Information Statement pursuant to Art. 13 of the Privacy Code
In accordance with the obligations established by Regulation (EU) 679/2016 (General Data Protection Regulation, or “G.D.P.R.”) the company Mad in Italy srl provides here information on how your personal data is processed, and requests your consent where necessary.
Data Controller and contact data
The Controller of the processing is the company Mad in Italy srl, with registered office at Via degli Alpini 14/D - 32031 Alano di Piave (BL) - Italy, VAT number: 01209130259.
Sources of collection of personal data
The Company collects personal data concerning you directly from you, both during sales operations and on other occasions (for example during events, external activities or visits by agents; in that case, consent must be provided before communicating the data). It also collects such data through remote communication techniques (for example through its web site, for which we refer to the specific privacy statement published there; and telephone communications or e-mails, etc.). You may provide us your personal data when you request information or estimates, during sales negotiations, at the time contracts are signed or during their performance, and at the time activities and/or services are accepted or provided, however they are classified or defined.
Methods of processing
Your personal data is processed both manually, in paper form, and through electronic, IT and/or automated instruments, with logics strictly related to the purposes as indicated.
Your personal data is entered into our management software, where your particulars and contact data are kept. If you have provided your express consent, the data may also be processed for the additional purposes specified in more detail below.
In any event, your personal data is protected through adequate technical and organizational measures, so as to guarantee its security and confidentiality, in accordance with currently applicable provisions of law. The Company has implemented specific security measures to prevent the loss or destruction of the data, unauthorized access or processing, and processing that is not consistent with the purposes for which the data was collected.
Purposes and legal basis of processing
The Company processes the personal data for multiple purposes, some of which require your express, optional consent. To facilitate your understanding and guarantee greater clarity, we have decided to expressly distinguish the single purposes, as indicated below:
Operational management: this term means the performance of all of those activities strictly necessary to satisfy your requests, in both the pre-sales phase and to execute a specific contract to which you are a party, and all activities connected and or instrumental to the contract, and functionally linked to the Company's operations or the protection of its rights. This purpose includes all of the activities necessary to provide you the information, sales assistance and product information and/or sheets you request or that are in your interest. For greater clarity, we provide a list here, by way of example:
the management of negotiations; the performance of administrative and accounting tasks; the management of payments and/or issuance of loans; pre and post-sales assistance; and the management of any complaints or warranty requests. We also consider the following activities to be connected and instrumental to those listed above: verification of internal quality through audits and controls, including conducted by third parties; the conduct of audits, including by third parties, aimed at guaranteeing compliance with applicable laws concerning personal data processing; the performance of legal, accounting, tax and administrative requirements under laws, regulations or European legislation; debt recovery; protection against credit risk; protection of the company's assets; protection of the Company's rights in legal proceedings and other appropriate venues. These processing operations are legitimate because they are necessary for the execution of a contract to which you are a party, or the execution of precontractual measures adopted on request from you, to allow the Company to fulfill a legal obligation it has, or lastly, for a legitimate interest the Company has. As explained more fully in the dedicated paragraph below, the processing of any particular data is carried out based on your express consent, and that data may be used to protect the Company's rights, if strictly necessary.
Marketing: subject to your consent, your data is processed to send advertising and direct sales material, and commercial and promotional communications, including the sending of communications relating to goods, accessories and products of its own or third parties, events and initiatives sponsored by the Company or by independent business partners. Unless you indicate a different preference, this may take place through both Traditional Contact Methods, such as the sending of paper mail, and through Automated Contact Methods, and thus through the use of automated electronic mail systems, including of a periodic nature (Newsletters).
Statistics: subject to your consent, your data may be used ANONYMOUSLY in order to draw up studies, research, market statistics and to conduct surveys, inquiries and polls using automated electronic mail or in paper form, such as regular mail, carried out directly by the Company or by way of specialized outside companies.
Revocation of consent
If you have provided your consent to authorize a specific type of processing, we inform you that you may revoke it at any time by contacting the Controller in the manner indicated in the paragraph "Rights of the Data Subject" below. In any event, such a revocation will not affect the legitimacy of the processing based on the consent provided before the revocation.
Provision of data
The provision of your personal data is always a result of your free decision.
However, the provision of personal data for the Primary Purposes, which at times may include particular data, is necessary and indispensible to allow the Company to satisfy your requests. Failure to provide the personal data may therefore make it impossible for the Company to initiate the pre- and post-sales negotiations/relationships, to establish contractual relationships, and/or to provide you with information or responses to your requests.
On the other hand, the provision of your personal data for Marketing and Statistical Purposes is entirely optional. Failure to provide your personal data for one or more of those purposes will have no consequences for you, except for making it impossible for the Company to perform the activities described above.
Right to access and communication of the data
When your personal data is processed in electronic form, it is accessible at the Company's branch office.
Your personal data is processed by persons specifically authorized or designated for that purpose by the Controller, inside of its organization (employees and associates however they are defined), based on the performance of the duties and tasks assigned to each of them.
Your personal data may also be processed by other outside persons or entities operating on the Company's behalf based on specific contractual commitments, or persons who in any event are duly authorized or appointed as data processors. By way of example, if necessary, your personal data may be processed by: suppliers of IT, electronic and technological services, including hosting and maintenance; the Company's business partners; companies that offer services for maintenance, updating and development of the web sites and related functions; oversight bodies and/or quality certification bodies or related activities; auditors; supervisory boards; persons that manage the printing, transmission, packing, shipping and collation of communications; persons who manage the document archives and storage; subject to your consent, companies specialized in marketing activities, business intelligence, research, and market surveys and/or analysis. The
Register of the processing operations and the data processors is available at the registered office and may be consulted on request.
For the pursuit of the Primary Purposes, if necessary, your personal data may be communicated to the following categories of recipients: banks and credit institutions; debt recovery companies; business intelligence companies, professionals, technical experts, consultants, and consulting firms or companies in the areas of administration, accounting, taxes, technical and legal matters.
We inform you that your personal data may always be communicated to third parties, whether public and private, to fulfill legal obligations, to respect orders from public authorities, or to exercise a right in legal proceedings or any other venues.
Your personal data will not be sold or circulated to others.
Transfer of data
The Company processes the data principally at its own registered office, or in any event within the European Union.
Duration of the processing
In accordance with the provisions of law that require the preservation of documents for accounting purposes and with the general laws relating to the ordinary statute of limitations on contractual actions, we will delete your personal data relating to the Primary Purposes once eleven years have passed, starting from the time the relationships ends.
The personal data processed for the additional optional purposes (Marketing and/or statistics purposes) will be deleted once ten years have passed.
Rights of the Data Subject
In application of the G.D.P.R., We inform you that you may exercise the following rights at any time:
obtain confirmation as to whether or not personal data concerning you is being processed, and where that is the case, obtain access to the personal data and all of the information identified by Art. 15 of the G.D.P.R., potentially obtaining a copy where it does not adversely affect the rights and freedoms of others;
obtain without undue delay the rectification of inaccurate personal data concerning you. Taking into account the purposes of the processing, you shall have the right to have incomplete personal data completed, including by means of providing a supplementary statement;
obtain the erasure of personal data concerning you without undue delay;
obtain the restriction of processing where one of the cases identified in Art. 18 of the G.D.P.R. applies;
portability of data, i.e. to receive the personal data concerning you that has been provided to our Company in a structured, commonly used and machine-readable format;
not to be subject to a decision based solely on automated processing, which produces legal effects concerning you or that similarly significantly affects your person. This right shall not apply in the cases identified in Art. 22, paragraph 2 of the G.D.P.R.
Right to object
In accordance with the requirements of Art. 21, paragraph 4 of the G.D.P.R., the Company brings to your attention your right to object to processing. In particular, you will have the right to:
object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on point (e) or (f) of Article 6(1) of the G.D.P.R. In this case the Company will no longer process the personal data unless it demonstrates compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject or for the establishment, exercise or defense of legal claims;
to object at any time to processing of personal data concerning you for direct marketing purposes, which includes profiling to the extent that it is related to such direct marketing. In this case, the personal data shall no longer be processed for such purposes.
Amendments and updates
Since the regulatory framework is constantly evolving, we will inform you of any amendments or updates to this Statement through the same channels used to contact you. We trust that you will appreciate our commitment to transparency and our desire to keep you fully informed regarding our activities using your personal data.
Cookies are text files used for automatic authentication, tracking sessions and memorizing specific information regarding users who access the server, such as preferred web sites, or in the case of purchases on the Internet, the contents of their "carts". Cookies are small strings of text sent from a server to a web client (usually a browser) and then sent back to the server by the client (without changes) each time the client accesses the same portion of the same web domain. Each domain that is visited with the browser can set up cookies. Since a typical web page contains objects that come from many different domains and each of them can set up cookies, it is normal for one's browser to host many hundreds of cookies. Cookies are divided into different types.
Technical cookies are those used only in order to “transmit communications on an electronic communication network, or to the extent strictly necessary for the provision of a service by the information company expressly requested by the subscriber or the user in order to provide the service (see Art. 122, paragraph 1, of the Code). They are not used for additional purposes and are normally installed directly by the owner or manager of the web site. They can be divided into navigation or session cookies, that guarantee normal navigation and use of the web site (for example, allowing the user to make a purchase or access restricted areas through authentication; analytics cookies, that are similar to technical cookies when used directly by the site manager to collection information in aggregate form on the number of users and how they visit the same site; functionality cookies, that allow the user to navigate based on a series of selected criteria in order to improve the service provided (for example the language and the products selected for purchase). The installation of these cookies does not require user consent, while the obligation remains to provide the Information Statement pursuant to Art. 13 of the Code, that the site manager may provide in the manner considered most suitable, if the site uses only those devices.
Third-party service analysis cookies
These cookies are used to collect information on the use of the site by users in anonymous form, such as: pages visited, time of stay, origins of the traffic, geographic origin, age, gender and interests for marketing purposes. These cookies are sent from third-party domains outside of the site.
Cookies to integrate third-party software products and functions
This type of cookie integrates functions developed by third parties into the page, like icons and preferences expressed in social networks in order to share the site contents or for the use of third-party software services (like software to generate maps and additional software that offers added services). These cookies are sent by third-party domains and by partner sites that offer their functions among the site's pages.
Profiling cookies are used to create profiles of users and in order to send advertising messages in line with the preferences shown by the user while navigating the web.
This site uses technical and analytics cookies. Under applicable legislation the site is not required to request consent for these cookies, since they are necessary to provide the services requested. For all other types of cookies, consent can be expressed by the user in one of the following ways:
- through specific configurations of the browsers used or the computer programs used to navigate the site's pages;
- through modification of the settings for use of third-party services.
Both of these solutions could prevent the user from using or viewing parts of the site.
Third-party web sites and services
The site could contain connections to other web sites that have their own Privacy Statements; therefore, this site is not responsible for those other sites. Most browsers are set to accept cookies automatically. The user then may set the browsers to accept them, accept them in part, or deactivate them completely. Each browser has different procedures for managing settings.