Privacy Policy

1. General information 


Who is the Data Controller?

marcodimarzio.com with registered office in 20154 – Milano, via Saronno, 3, PI 07472470967 (the “Company”), is the Data Controller, i. e. the person who decides how and why to process your personal data.

You can always contact the Company by writing to the above address or by writing to the following address: privacy@marcodimarzio.com

Who is the Personal Data Protection Officer?

The Company has designated a Personal Data Protection Officer (the “DPO”).

If you wish, for any request regarding the protection of your personal data and the exercise of your rights, you can contact our DPO by writing to “Data Protection Officer” at the Owner’s address, or by e-mail at the DPO address: privacy@marcodimarzio.com.

2. What personal data do we collect? 


The categories of personal data that the Company collects and processes when you browse or purchase on the Site, are as follows:

[a] We collect your email address when you sign up for our newsletter service;

[

b] We process the personal information you provide us with when you contact us to provide you with the assistance you request;

[c] Subject to your consent, we collect and use your personal information for marketing purposes;

[d] We collect information about your navigation on the Site, such as the pages you visit and how you interact with the individual page, and we store this information on our servers.

Please note that the Company does not process personal data relating to minors. If you access the Site and use the services offered by the Company, you declare that you are of legal age.

3. How do we use the personal data we collect?

The Company collects and processes your personal data for the following purposes:

[a] provision of the services offered on the Site. To this end, the Company needs to collect, in relation to each service and its characteristics, the personal data necessary to perform the service you requested;

[b] handling of requests received, through the use of personal data that you provide to meet your requests for information and requests for assistance;

[c] sending of CVs. If you send us your CV to be considered for an open position application, we will use the information contained in your CV exclusively for this purpose. Your CV will be kept for a maximum period of six months, after which it will be deleted: if you wish, you can of course send us a new updated version;

[d] Analysis and statistical surveys. We use certain information about your use of the Site to conduct statistical analysis and surveys in order to improve our offering and services;

[e] sending commercial and promotional communications following the request for information on our site. In this case, we will send you to the email address you provided us with communications containing our business proposals for related products and services;

[f] with your express consent, we may use the contact details you have provided for commercial communications about our products and services, in order to update you on news, new arrivals, exclusive products/services, our offers and promotions. In addition, subject to your consent, we may use your contacts for market research and satisfaction surveys in order to improve our services and the relationship with our users. These communications will be made exclusively in the manner of your choice (by e-mail, SMS, telephone, paper mail, Whatsapp);

If you do not wish to receive further communications from the Company or if you wish to limit the way in which you can be contacted, you may at any time interrupt these communications by simply clicking on the “unsubscribe” link at the bottom of each communication or by contacting us at the addresses listed above.

Please note that you may receive further communications from us even after your unsubscription request has been submitted, as some mailings may already have been planned, our systems may take some time to process your request.

In relation to all the above activities, we will process your personal data mainly through in-formatics and electronic tools; the tools we use guarantee high standards of security, in full compliance with current legislation on the subject.

4. Legal basis of the treatment 


We process your personal data only in the presence of one of the conditions provided for by current legislation, and in the special section:

[a] for the conclusion and execution of a request to which you are a party.

When we process your data for the conclusion of a request of which you are a party we take care to use exclusively the minimum information necessary for the execution of the same. This basis legitimizes the processing of personal data that occur in the following activities:

– provision of services offered on the Site;
– to handle your requests.

The provision of your personal data for such activities is a contractual obligation. You are free to communicate your data to us or not, but in the absence of the requested data it may not be possible to conclude or execute your requests. This means that you may be prevented from using the services of the Company which will not be able to handle your requests;

[b] To comply with a legal obligation.

The processing of spontaneously sent CVs, carried out to assess candidates with respect to a possible job position at the Company, is legitimate as it is expressly authorized by a rule of law, which specifies that in this case does not require the consent of the person to whom the personal data refer. You are free to send us your CV or not, but without it we will not be able to evaluate your application;

[c] based on your consent.

We will only perform the following treatments if you have given us your express consent:

– carrying out of marketing activities and opinion polls and market research;
– analysis of your browsing and consumption habits in the context of the use of your personal profile, in order to per-sonalize your experience on our Site.

Providing us with your personal data for such activities is absolutely optional. You are free to provide or not to provide us with your data for these purposes, but in the absence of the same it will not be possible for the Company to carry out marketing activities, surveys of opi-nione and market research, and analysis of your habits.

5. Who will process your data? 


Your personal data will be processed by the Company’s internal staff specifically trained and authorized to process.

Your personal data will also be transmitted to third parties that we use to provide our services; these parties have been properly selected and offer appropriate guarantees of compliance with the rules on the processing of personal data. These persons have been designated as data processors and carry out their activities in accordance with the instructions given by the Company and under its control.

The third parties in question belong to the following categories: banking operators, internet providers, companies specialising in IT and telematic services; couriers; companies carrying out marketing activities; companies specialising in market research and data processing.

Your data may be transmitted to the police and judicial and administrative authorities, in accordance with the law, for the detection and prosecution of crime, prevention and protection from threats to public security, to enable the Company to ascertain, exercise or defend a right in court, and for other reasons related to the protection of the rights and freedoms of others.

6. Extra-EU data transfer 


Some of the third parties listed in the previous section “Who will process your data?” may be located in countries outside the European Union that do, however, offer an adequate level of data protection, as established by specific decisions of the European Commission (http://www. garanteprivacy. it/home/provvedimenti-normativa/normativa/normativa-comunitaria-e-intenazionale/trasferimento-dei-dati-verso-paesi-terzi#1).

The transfer of your personal data to countries that do not belong to the European Union and that do not ensure adequate levels of protection will be carried out only after the conclusion between the Company and these subjects of specific agreements, including safeguards and appropriate guarantees for the protection of your personal data so-called “standard contractual clauses”, also approved by the European Commission, or when the transfer is necessary for the conclusion and execution of a contract between you and the Company (for the purchase of goods offered on our Site, for the registration to the Site or the use of services on the Site) or for handling your requests.

7. How long do we keep the data?

We store your personal data for a limited period of time, depending on the type of activity that involves the processing of your personal data.

After this period, your data will be permanently deleted or otherwise made anonymous irreversibly.

Your personal data is stored in accordance with the terms and criteria specified below:

[a] Registered User data: the data will be kept until you request the deletion of your profile;

[b] data collected in the context of the use of services offered on the Site: these data are kept until the termination of the service or the cancellation of the subscription to the service by the User;

[

c] data related to user requests to our Customer Service: the data needed to assist you will be kept until your request is satisfied;

[d] CV: for 6 (six) months from receipt;

[e] data provided for commercial communications, opinion polls and market research activities: until the user’s request for business interruption and in any case within 2 years of the user’s last interaction of any kind with the Company;

[f] data used to personalize the Site and to show personalized commercial offers: until the user requests the cessation of the activity and in any case within two years from the last interaction of any kind of the user with the Company;

[g] data used for the performance of market research and satisfaction surveys: until the User requests the cessation of the activity.

In any case, for technical reasons, the cessation of the treatment and the consequent definitive cancellation or anonymisation in an irreversible way of the relative personal data will be definitive within 30 (thirty) days from the terms indicated above.

8. Your rights 


At any time you can exercise your rights with regard to the specific processing of your personal data by the Company. Below is a general description of them and how to exercise them.

Access and modify your data: you have the right to access your personal data and to request that it be corrected, modified or integrated with other information. If you wish, we will provide you with a copy of your data in our possession.

Revoke your consent: you can revoke at any time your consent to the processing of your personal data in connection with any activity for marketing purposes. In this regard, we remind you that the sending of commercial and promotional communications, the carrying out of market research and in-demands to measure satisfaction with the customization of the website and commercial offers according to your interests are considered marketing activities. Upon receipt of your request, we will promptly cease the processing of your personal data based on such consent, while other processing or based on other assumptions will continue to be carried out in full compliance with the provisions in force.

Opt for the processing of your data: you have the right to object at any time to the processing of your personal data carried out on the basis of our legitimate interest, explaining the reasons justifying your request; before accepting it, the Company must evaluate the reasons for your request.

Delete your data: in the cases provided for by current legislation you can request the cancellation of your personal data. We will re-obtain and evaluate your request and, if legitimate, we will promptly stop processing and delete your personal data.

Request that the processing of your personal data be temporarily limited: in this case the Company will continue to retain your personal data but will not process them, unless otherwise requested by you and subject to the exceptions provided for by law. You can obtain the limitation of the treatment when you contest the accuracy of your personal data, when the processing is illegal but you oppose the deletion of your data, when we no longer need your data but you need it to exercise your right in court and when you oppose the treatment, in the period in which we evaluate the reasons for your request.

Request your data or transfer it to a person other than the Company (“right to data portability”). You can request to receive your data that we process on the basis of your consent or on the basis of a contract with you in a standard format. If you wish, where technically possible, we may, at your request, transfer your data directly to a third party specified by you.

In order to exercise some of your rights described above you can access your account or alternatively you can contact us at the addresses listed in this privacy policy or by writing to the address of the Data Controller above.

In order to ensure that our users’ data is not violated or misused by third parties, we will ask you for some information to be sure of your identity before we accept your request to exercise any of the rights indicated.

9. Security measures

We protect your personal data with specific technical and organisational security measures to prevent the unlawful or fraudulent use of your personal data. In particular, we use security measures that guarantee: the pseudonymisation or encryption of your data; the confidentiality, integrity, availability of your data as well as the resilience of the systems and services that process them; the ability to restore data in the event of a data breach. In addition, the Company undertakes to regularly test, verify and evaluate the effectiveness of technical and or-ganisational measures in order to ensure continuous improvement in treatment safety.

10. Complaints 


If you believe that the processing of your personal data has been carried out unlawfully, you may file a complaint with one of the supervisory authorities responsible for compliance with the rules on the protection of personal data.

In Italy, the complaint can be submitted to the Guarantor for the Protection of Personal Data.

More information on how to submit your application is available on the Guarantor’s website at http://www. garanteprivacy. it.

11. Changes to this information notice 


The constant evolution of our services may lead to changes in the characteristics of the processing of your personal data described above. As a result, this privacy policy may be modified and supplemented over time, which may also be necessary with reference to new regulatory interventions regarding the protection of personal data.

Therefore, we invite you to periodically check the contents: where possible, we will try to inform you in a timely manner about the changes made and their consequences. 

The updated version of the privacy policy, in any case, will be published on this page, indicating the date of its last update.



12. Legislative references and useful links

The processing of your personal data is carried out by the Company in full compliance with the relevant provisions of Regulation (EU) 2016/679 general regulation on data protection, the rules on the processing of Italian personal data and the provisions of the Italian supervisory authority (http://www. garanteprivacy. it).