Privacy and Cookie Policy

INFORMATION ON THE PROCESSING OF PERSONAL DATA

Dear Customer,

Mazzoni SRL acts in full compliance with European Regulation no. 679/2016 (hereinafter for brevity GDPR), and, in compliance with the regulations contained therein, hereby provides all information on the processing of your personal data and your rights.
Before giving your consent to the processing of your data, we therefore invite you to carefully read the privacy policy.

1. Data Controller and Data Processor
   The Data Controller (i.e. the party responsible for decisions regarding the purpose, method of processing of the personal data, security and instruments used) is Mazzoni SRL, with registered office in Via Prati Vecchi 5 – 42025 Cavriago (RE) – VAT no. 01560810358 in the person of its legal representative Barbara Mazzoni, domiciled for this purpose at the Company’s registered office.
2. Purpose of the processing and legal basis
   The personal data of the data subject (i.e. data provided to the company, including through registration on the site) are provided to Mazzoni SRL and processed thereby, including through disclosure to third parties when necessary and instrumental, for the following purposes:
   a) for purposes strictly connected with and instrumental to the fulfilment of obligations deriving from contractual and other relations established with you, to allow and manage your registration on the site, to take advantage of the services offered and for administrative and accounting purposes and for the fulfilment of obligations envisaged by the regulations in force pursuant to Article 6(b) of the GDPR;
   b) for the fulfilment of obligations of whatever nature envisaged by laws, regulations, community norms or in any case connected to obligations deriving from orders issued by judicial authorities, administrative officials or police bodies empowered to do so by law or by supervisory and control bodies pursuant to Article 6(c) of the GDPR;
   c) for purposes related to Mazzoni SRL’s assertion or defence of a right in court pursuant to Article 6(c) of the GDPR.
   Authorisation for the purposes referred to in points a), b) and c) above is compulsory. Refusal may make it impossible for Mazzoni SRL to provide the services and/or implement the obligations arising from the relationship established. The legal basis for the processing of personal data is the consent of the data subject, which is given by ticking the box during registration or by sending an email to info@e-mazzoni.it and writing: I consent. The processing also serves the legitimate interests of the Data Controller, such as contract performance, invoicing and debt collection.
   On the other hand, consent to the processing of one’s data for the following various purposes functional to the activity of Mazzoni SRL pursuant to Article 6(a) of the GDPR is to be considered merely optional, and therefore any refusal will not prevent the provision of the services provided by Mazzoni SRL.
   The following processing requires the consent of the data subjects:
   d) for marketing and/or otherwise promotional purposes in automated form (text message, multimedia message, email, fax) or in traditional form (post, telephone contact);
   e) for disclosure to third-party companies, with consequent processing thereby, which may use them for marketing and/or otherwise promotional purposes;
   f) for own profiling and/or analyses related to market and/or statistical surveys.
   The relevant processing has its legal basis in the consent of the data subject as expressed by ticking the box during registration.
3. Special Data
   Pursuant to and for the purposes of Article 9 of the GDPR, special data include all data “…revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, and the processing of genetic data, biometric data for the purpose of uniquely identifying a natural person, data concerning health or data concerning a natural person’s sex life or sexual orientation” of the Data Subject.
   These data are never collected by Mazzoni SRL, but should it occur it will only be processed following a specific and explicit expression of consent by the Data Subject given in writing pursuant to and for the purposes of Article 9(2)(a) of the GDPR.
4. Methods of processing
   The personal data of data subjects collected for purposes directly connected to the provision of services will be processed by internal and external employees and contractors of Mazzoni SRL who are formally authorised to do so pursuant to Article 4 of the GDPR as persons formally authorised to process personal data.
   They may be processed by hand or using computers and/or online systems, including automated systems, in compliance with the rules and principles of lawfulness and propriety, using the most appropriate methods to guarantee their security and confidentiality. They will only be disclosed to third parties where strictly necessary.
5. Disclosure to third parties
   In compliance with all that has already been stipulated in the previous points, Mazzoni SRL data subjects’ data to:
   – designers, in order to allow them to perform the obligations they have undertaken vis-à-vis the data subjects/supporters;
   – suppliers of consultancy services external to the company, including but not limited to legal, fiscal, tax and similar services, and/or suppliers of IT services whose support Mazzoni SRL may make use of in the performance of its activities;
   – third parties for the purposes of measuring satisfaction with the quality of the services provided, and/or market research, customer profiling.
   Your personal data will be processed on Italian territory and will not be transferred abroad. Should this happen, the transfer will take place in such a way as to provide appropriate and adequate Guarantees in accordance with Articles 46 or 47 or 49 of Regulation 679/2016.
6. Personal data retention period and criteria used
   The personal data provided by you and those collected by us will be retained for 10 years from their last use unless they are necessary to fulfil legal obligations or obligations arising from the exercise of rights in court, or at the request of Authorities.
   Any data processed with your specific consent for marketing and/or profiling purposes will be processed for a maximum of 24 months.
7. Rights of the Data Subject
   European Regulation 679/2016 grants you the rights listed below, which you may exercise vis-à-vis the Data Controller. A full extract of the articles of law below follows.
   Requests regarding your rights and/or any information and explanations you may require may be submitted by means of a written request to the Data Controller/Data Processor by ordinary mail to Mazzoni SRL, with registered office in Via Prati Vecchi 5 – 42025 Cavriago (RE) , or by email to info@e-mazzoni.it.

7.1. RIGHT OF ACCESS
Article 15 of the European Regulation allows you to receive confirmation from the data controller as to whether or not your data are being processed, and if so to obtain access to such data.

7.2. RIGHT OF CORRECTION
Article 16 of the European Regulation allows you to obtain the rectification of your inaccurate personal data from the data controller. Taking into account the purposes of the processing, the data subject shall have the right to have incomplete personal data completed, including by means of providing a supplementary statement.

7.3. RIGHT OF CANCELLATION
Article 17 of the European Regulation allows you to obtain the deletion of your personal data by the data controller without undue delay if one of the grounds set out in the regulation applies

7.4. RIGHTS LIMITATION
Article 18 of the European Regulation allows you to obtain the restriction of processing from the data controller when one of the cases envisaged in the regulation applies.

7.5 RIGHT TO DATA PORTABILITY
Article 20 of the European Regulation allows you to receive the personal data that you have provided to a data controller in a structured, commonly used and machine-readable format and to transmit these data to another data controller without hindrance by the controller you provided them to.
It also allows you to obtain the direct transmission of personal data from one data controller to another, if technically feasible.

7.6 RIGHT OF OBJECTION
Article 21 of the European Regulation gives you the right to object on grounds relating to your particular situation at any time to the processing of your personal data pursuant to Article 6(1)(e) and (f), including profiling based on those provisions.

7.7. RIGHT TO WITHDRAW CONSENT
L’art. 7 del Regolamento Europeo le consente di revocare il consenso da lei prestato in qualsiasi momento. La revoca del consenso non pregiudica la liceità del trattamento basata sul consenso prima della revoca.

7.8. RIGHT TO COMPLAIN
Article 77 of the European Regulation recognises your right to lodge a complaint with a supervisory authority (Privacy Authority) in the Member State in which you habitually reside or work or in the place where the alleged infringement has taken place if you consider that the processing concerning you is in breach of the Regulation.