PRIVACY NOTICE ON THE PROCESSING OF PERSONAL DATA
WEBSITE NAVIGATION, E-COMMERCE AND NEWSLETTER
COOKIE POLICY
Below we provide to the individuals who come into contact with our Company (the “Data Subjects”), a brief description of the essential characteristics of the processing of their personal data carried out by MALTEMPI S.R.L., with registered office in Via Malignani 1/a, Fontanafredda (PN), acting as the Data Controller (hereinafter referred to as the “Controller”). The processing will be carried out in compliance with Regulation (EU) 2016/679 – General Data Protection Regulation (the “Regulation”) and the Legislative Decree of 30 June 2003, n. 196 as amended by Legislative Decree 101/2018 (hereinafter referred to as the “Code”).
By “data” we mean “any information relating to an identified or identifiable natural person” and by “processing” we mean “any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction”.
For further details, please refer to the detailed notice that follows.
The privacy policy regarding the processing of personal data concerning browsing on the Company’s website and access to services provided through e-Commerce is made available succinctly in the following summary table on data processing. This allows for easy access to essential information regarding the processing of personal data.. However, a detailed notice is also available, which provides a complete overview of the information we are required to provide pursuant to articles 13 and 14 of the GDPR.
Maltempi Srl, with headquarters in Via Malignani 1/a Fontanafredda (PN).
Contact details are privacy@maltempisrl.com
The appointed DPO can be contacted at the email address dpo@maltempisrl.com
For the operation and navigation of the site we process:
- Browsing data (including, for example, IP addresses, URI/URL addresses of requested resources);
- Data possibly collected by means of cookies, for which reference is made to the specific cookie policy.
For access to the services provided by e-Commerce we process:
- Common personal data (name, surname, residential address, shipping address if not the same);
- Identification documents (such as, for example, the passport for the execution of tax relief requests for subjects domiciled and resident outside the European Community as per Presidential Decree 633/1972);
- Personal contact details (telephone number and email address);
- Personal identification data for billing purposes (Tax Code or VAT number);
- Electronic payment data.
- To allow the interested party to navigate the website of the Data Controller;
- To carry out research and/or statistical analysis activities on aggregate or anonymous data, without the possibility of identifying the user;
- To register for Maltempi Srl e-Commerce;
- To execute purchase orders received via e-Commerce;
- To manage relationships with Maltempi Srl Customers (e.g. purchase assistance, response to questions, refund operations).
- To manage requests for information received by the Data Controller via a specific form on the website;
- To allow the user to subscribe to the newsletter;
- soft-spam forwarding;
- To fulfill all obligations required by law (for example, those connected to the management of the purchase contract or to the execution of requests for tax relief for subjects domiciled and resident outside the European
Community pursuant to Presidential Decree 633/1972); - For the need to ascertain, exercise or defend a right in court or whenever the Authorities exercise their functions.
- The treatments sub. 1), sub. 2), sub. 8) and sub. 10) are connected to the legitimate interest of the Data Controller.
- The processing referred to in sub. 3), sub. 4), sub. 5) and sub. 6) is based on the execution of a contract to which the interested party is a party or on the execution of pre-contractual measures adopted at the request of the same;
- The processing under 7) is subject to the acquisition of free, specific and informed consent from the interested party.
- The processing referred to in point 9) is related to compliance with the obligations of the law , regulation and community legislation to which the Data Controller is subject.
In computer mode, with the observance of all precautionary measures applied by the Owner which guarantee its security, confidentiality and control.
The data may also be stored and processed on servers located outside the European Community in compliance with current legislation.
- Employees, collaborators, persons appointed and authorised by the Data Controller;
- Service providers, who act as Data Processors pursuant to art.28 GDPR, such as, for example, the entity that manages the website;
- Persons legally authorised to access the data;
- Subjects to whom communication is necessary for the fulfillment of contractual obligations;
- Public authorities;
- Third Parties.
The personal data processed by the Data Controller are in no way subject to disclosure.
Personal data will be stored for the time necessary to achieve the purposes indicated above. In any case, the data will be processed by the Data Controller:
- For a period not exceeding 7 days for navigation data from the moment of their acquisition;
- For a period not exceeding 24 months from the date of the interested party’s consent to register for the newsletter, except in the case of early revocation of consent, or in the case of sending soft spam , starting from the date of the last purchase by the Customer;
- For a period not exceeding 10 years from the acquisition of the data, when the interested party has communicated them in order to use services provided by the Data Controller, unless the statute of limitations
has intervened.
In any case, the need to retain the data for the purposes of fulfilling legal obligations of the Data Controller or for the ascertainment, exercise or defense in court of the Data Controller’s rights remains intact.
By way of example, the criteria used to determine the further retention period of the data are indicated below :
- Pursuit of the purposes related to the processing.
- Retention time required by law.
- Revocation of consent by the data subject (in case of processing based on consent).
- Maximum term permitted by current legislation to protect the rights and/or interests of the Owner.
To navigate the site, it is necessary to provide navigation data and data contained in some cookies (technical cookies). Failure to provide such data may not guarantee an optimal navigation experience on this website, resulting in the impossibility of satisfying the interested party’s requests.
The provision of data for access to e-Commerce services is mandatory for the conclusion of the contract and for assistance activities related to the customer care service. The provision of data is also mandatory for the execution of the obligations provided by law for the Data Controller.
Providing data for registration to the newsletter service is optional: failure to provide or revoking consent will make it impossible to receive the newsletter, without any impact on any other legal relationships that may exist.
The interested party has the right to:
- Access the data in our possession and request communication of it in an intelligible form;
- Request updating, rectification and/or integration;
- Request erasure (“right to be forgotten”);
- Request limitation of processing;
- Request notification of the update, rectification, cancellation, limitation;
- Request data portability;
- Object to processing;
- Revoke previously granted consent;
- Lodge a complaint with a supervisory authority.
The site uses cookies to improve the user’s browsing experience.
The site uses technical cookies, Google Analytics statistical cookies, profiling and tracking cookies, marketing cookies.
Through the interactive banner, the interested party will be able to control the activities of cookies.
PRIVACY NOTICE ON THE PROCESSING OF PERSONAL DATA
IN-STORE CLIENTS
Below we provide to the individuals who come into contact with our Company (the “Data Subjects”), a brief description of the essential characteristics of the processing of their personal data carried out by MALTEMPI S.R.L., with registered office in Via Malignani 1/a, Fontanafredda (PN), acting as the Data Controller (hereinafter referred to as the “Controller”). The processing will be carried out in compliance with Regulation (EU) 2016/679 – General Data Protection Regulation (the “Regulation”) and the Legislative Decree of 30 June 2003, n. 196 as amended by Legislative Decree 101/2018 (hereinafter referred to as the “Code”).
By “data” we mean “any information relating to an identified or identifiable natural person” and by “processing” we mean “any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction”.
For further details, please refer to the detailed notice that follows.
The privacy policy regarding the processing of personal data for walk-in customers is concisely presented in the summary table below. This allows for easy access to essential information regarding the processing of personal data. However, a detailed notice is also available, which provides a complete overview of the information we are required to provide pursuant to articles 13 and 14 of the GDPR.
Maltempi Srl, with headquarters in Via Malignani 1/a Fontanafredda (PN).
Contact details are privacy@maltempisrl.com
The appointed DPO (Data Protection Officer) can be reached at: dpo@maltempisrl.com
- Personal details (name, surname, place and date of birth, Tax Code);
- Residential address;
- Personal contact details (email and phone number);
- Personal data related to invoicing and payment methods;
- Personal image.
- Establishment and management of relationships with Customers, including Customer Care and all related administrative-accounting purposes.
- Establishment, exercise, or defense of the Controller’s rights, including in judicial settings.
- Marketing and profiling activities, by sending commercial communications, promotions, and discounts.
- Video surveillance activities (where systems are present) carried out for security, protection, and safeguarding of corporate assets.
- The processing referred to in point 1) is necessary for the implementation of pre-contractual measures taken at the request of the data subject or for the performance of a contract to which the data subject is party.
- The same processing referred to in point 1) is necessary for the fulfillment of a legal obligation to which the Data Controller is subject, with regard to accounting matters.
- The processing referred to in points 2) and 4) is related to the legitimate interest of the Data Controller.
- The processing referred to in point 3) is based on the free, specific, and informed consent of the data subject.
Electronically, observing every precautionary measure applied by the Controller to guarantee security, confidentiality, and control. Data may also be stored and processed on servers located outside the European Community in compliance with current regulations.
- Employees, collaborators, persons appointed and authorised by the Data Controller;
- Service providers, who act as Data Processors pursuant to art.28 GDPR, such as for example, the company management software provider;
- Entities legally authorised to access the data;
- Parties to whom communication is necessary for the fulfillment of contractual obligations;
- Public authorities;
- Third Parties.
The personal data processed by the Data Controller are in no way subject to disclosure.
Personal data will be retained for the time necessary to achieve the purposes listed above. Specifically, the data will be processed by the Data Controller:
- For a period no longer than 10 years from the termination of the relationship between the Data Controller and the data subject, without prejudice to the interruption of the statute of limitations;
- For marketing activities, for a period no longer than 24 months from the data subject’s consent, unless revoked;
- For profiling activities, for a period no longer than 12 months from the data subject’s consent, unless revoked.
- For video surveillance activities, for a period between 24 hours from the time the footage is acquired and a maximum of 72 hours if the conditions are met.
Criteria used to determine the further data retention period:
- Pursuit of the purposes related to the processing;
- Retention period required by law;
- Withdrawal of consent by the data subject (in the case of consent-based processing);
- Maximum period permitted by applicable law to protect the Data Controller’s rights and/or interests.
For data processing carried out on the basis of the contractual relationship, the provision of data is mandatory, and refusal to provide it may make it impossible to conclude the contract and thus unable to provide the requested service.
For data processing carried out based on the data subject’s consent, the provision of data is optional, and refusal to provide it would only make it impossible for the Data Controller to provide additional information on its products and services. Any other existing relationships between the data subject and the Data Controller would not be affected by the failure to provide consent.
The interested party has the right to:
- Access the data in our possession and request communication of it in an intelligible form;
- Request updating, rectification and/or integration;
- Request erasure (“right to be forgotten”);
- Request limitation of processing;
- Request notification of the update, rectification, cancellation, limitation;
- Request data portability;
- Object to processing;
- Revoke previously granted consent;
- Lodge a complaint with a supervisory authority.
