INFORMATION ON PERSONAL DATA PROCESSING
pursuant to Article 13 of Regulation (EU) 2016/679
PREAMBLE
This page contains all the information regarding the management of the website https://www.massagioconda.com/, with respect to the processing of personal data of users who consult it.
This privacy notice is provided pursuant to Article 13 of Legislative Decree No. 196/2003 (and subsequent amendments) exclusively for the website https://www.massagioconda.com and not for other websites that the user may visit via links available on the site.
The texts, information, and other data published or accessible through forums on this website are solely for informational purposes and do not have official status, unless otherwise provided by current regulations.
Massa Gioconda di Giuseppe Marotta e F.lli s.a.s. assumes no responsibility for services offered by third parties with which the site has activated a link, and for any other content, information, or anything contrary to the laws of the Italian state present in the third-party resource linked through the attached link.
Data Controller
Massa Gioconda di Giuseppe Marotta e F.lli s.a.s., with registered office at Viale Castelluccio 57, 80059 Torre del Greco NA, Tax Code and VAT number 02763731219 (hereinafter, the “Controller”), in its capacity as data controller, informs you pursuant to Article 13 of Legislative Decree No. 30/06/2003 No. 196 (hereinafter, the “Privacy Code”) and Article 13 of EU Regulation No. 2016/679 (hereinafter, the “GDPR”) that your data will be processed in the following ways and for the following purposes:
Purpose of the Processing
The Controller processes personal data, both identifying and non-sensitive (in particular, name, surname, tax code, VAT number, email, phone number – hereinafter, “personal data” or also “particular data”) that you provide during the registration process on the Controller’s website and/or when subscribing to the newsletter service offered by the Controller.
Purposes of the Processing
Your personal data is processed:
- A) Without your explicit consent (Article 24, letters a, b, c of the Privacy Code and Article 6, letters b, e of the GDPR), for the following Service purposes: • To allow you to register on the website; • To manage and maintain the website; • To comply with pre-contractual, contractual, and fiscal obligations arising from relationships with you, if any; • To comply with obligations imposed by law, regulation, community legislation, or by an order of the Authority; • To prevent or detect fraudulent activities or abuses harmful to the website; • To exercise the Controller’s rights, for example the right to defense in court.
- B) Only with your specific and separate consent (Articles 23 and 130 of the Privacy Code and Article 7 of the GDPR), for the following Marketing purposes: • To send you newsletters, commercial communications, and/or advertising material on products or services offered by the Controller. • To allow you to subscribe to the newsletter service provided by the Controller and any other services you may request.
We inform you that if you are already our customer, we may send you commercial communications regarding services and products similar to those you have already used, unless you object.
Processing Methods
The processing of your personal data is carried out by means of the operations indicated in Article 4 of the Privacy Code and Article 4(2) of the GDPR, specifically: collection, recording, organization, storage, consultation, processing, modification, selection, extraction, comparison, use, interconnection, blocking, communication, deletion, and destruction of data. Your personal data will be processed both manually and electronically, including through automated methods. The Controller will process the data for the time necessary to fulfill the above purposes and in any case for no more than 10 years from the cessation of the relationship for Service purposes, and no more than 10 years from the collection of data for Marketing purposes.
Data Access
Your data may be made accessible for the purposes referred to in Articles 3.A) and 3.B): • To employees and collaborators of the Controller, as persons operating under the Controller’s authority and/or system administrators; • To external companies for support activities in the feasibility study of the customer’s project, for technical project management, data storage, providers for website management and maintenance, suppliers, banks, professional firms, etc., who carry out outsourcing activities on behalf of the Controller, in their capacity as external data processors.
Data Communication
Without your express consent (pursuant to Article 24, letters a), b), d) of the Privacy Code and Article 6, letters b) and c) of the GDPR), the Controller may communicate your data for the purposes referred to in Article 3.A) to Supervisory Bodies, Judicial Authorities, as well as to all other subjects to whom communication is mandatory by law for the execution of the aforementioned purposes. Your data will not be disclosed.
Data Transfer
The management and storage of personal data will take place on servers located within the European Union of the Controller and/or third-party companies appointed and duly designated as Data Processors. Currently, our servers are located in Italy. Data will not be transferred outside the European Union. However, the Controller may move the location of the servers to Italy and/or the European Union and/or non-EU countries if necessary. In such cases, the Controller ensures that the transfer of data outside the EU will comply with applicable legal provisions, entering into agreements that guarantee an adequate level of protection and/or adopting the standard contractual clauses provided by the European Commission, and requesting your explicit consent if required.
Nature of Data Provision and Consequences of Refusal
The provision of data for the purposes referred to in Article 3.A) is mandatory. Without it, we cannot guarantee registration on the website or the services referred to in Article 3.A). The provision of data for the purposes referred to in Article 3.B) is instead optional. You may therefore choose not to provide any data or to withdraw your consent for data previously provided. In this case, the services referred to in point 3.B. will not be provided. However, you will still be entitled to the services referred to in Article 3.A).
Rights of the Data Subject
As the data subject, you have the rights pursuant to Article 7 of the Privacy Code and Article 15 of the GDPR, and specifically the rights:
- A) To obtain confirmation of the existence or non-existence of personal data concerning you, even if not yet registered, and their communication in an intelligible form;
- B) To obtain the indication:
- The origin of the personal data;
- The purposes and methods of the processing;
- The logic applied in case of processing carried out with the aid of electronic tools;
- The identification details of the controller, the processors, and the representative designated pursuant to Article 5, paragraph 2 of the Privacy Code and Article 3, paragraph 1, of the GDPR; and the subjects or categories of subjects to whom personal data may be communicated or who may come to know it as the designated representative in the state, or processors.
- C) To obtain:
- The update, rectification, or, when there is an interest, the integration of the data;
- The cancellation, transformation into anonymous form, or blocking of data processed in violation of the law, including those that no longer need to be stored in relation to the purposes for which the data was collected or subsequently processed;
- D) To object, in whole or in part:
- For legitimate reasons, to the processing of personal data concerning you, even if relevant to the purpose of collection;
- To the processing of personal data concerning you for the purpose of sending advertising material or direct sales, or for market research or commercial communications, using automated calling systems without operator intervention by email and/or by traditional marketing methods by phone and/or mail. It should be noted that the right to object of the data subject, outlined in the previous point B), for direct marketing purposes via automated means extends to traditional methods and that the data subject can also exercise the right to object partially. Therefore, the data subject can choose to receive communications only via traditional means, only automated communications, or neither type of communication.
- Where applicable, you also have the rights pursuant to Articles 16-21 of the GDPR (Right to Rectification, Right to Erasure, Right to Restriction of Processing, Right to Data Portability, Right to Object), as well as the right to lodge a complaint with the Supervisory Authority.
10) How to Exercise Your Rights
You can exercise your rights at any time by sending:
- A registered letter to Massa Gioconda s.a.s, with registered office at Viale Castelluccio 57, 80059 Torre del Greco NA
- An email to info[@]massagioconda.it
- A PEC (Certified Email) to info[@]pec.massagioconda.com
11) Minors
This website and the services of the Controller are not intended for individuals under 18 years of age
