PRIVACY POLICY
- WHO PROCESS YOUR DATA?
Data Controller
Registered office: Viale dei Papaveri, 13, Corato 70033 in the person of its legal representative and VAT number: 6972990722.
Responsible for the protection of personal data
We have appointed a person responsible for the protection of personal data pursuant to art. 37 of the General Data Protection Regulation n. 2016/679 (“GDPR”). We remind you that you can contact us at any time and send any questions or requests relating to your personal data and respect for your privacy by writing to the following email address info@mepalitalia.it
Other subjects
Your personal data may be brought to the attention of our employees or collaborators, belonging to the categories of administrative, commercial, legal, accounting or IT system administrators, depending on the processing, who, operating under our direct authority, are appointed data controllers and receive adequate operational instructions in this regard.
The recipients of your data also include suppliers of third-party services relating to payments, shipping, marketing services, suppliers of information systems engineering services, with whom we stipulate agreements that require them to adopt suitable technical measures and organizational for the protection of your personal data. Your data may also be transmitted to the police forces and judicial and administrative authorities in accordance with the law.
We may also transfer your personal data in the event of a sale or transfer of all or a portion of our business or assets (including in the event of a reorganization, spin-off, dissolution or liquidation).
Under no circumstances will we give or sell your personal data.
Your personal data may be transferred outside the European Union for processing by some of our service providers. In this case, we ensure that this transfer takes place in compliance with current legislation and that an adequate level of protection of personal data is guaranteed in accordance with the provisions of this Privacy Policy, based on an adequacy decision, on standard clauses defined by the Commission European Union or on Binding Corporate Rules. In the event that your personal data is transferred to third party suppliers established in the United States, the data may be transferred to them if they have submitted a self-certification pursuant to the Privacy Shield scheme (so-called “Privacy Shield”) in relation to the type of data to be transferred, which requires them to provide similar protection to personal data shared between the EU and the US.
2. WHAT TYPES OF DATA DO WE COLLECT?
Personal data means all information relating to you that allows us to identify you, such as your name, contact details, payment details and information about your access to the Site. When you register on our Site, create an account, use our services or contact our support service, we collect some of your personal data. Some of the aforementioned data are provided to us voluntarily by the user himself while we collect others automatically.
Data provided voluntarily by the user
The Site offers users the opportunity to voluntarily provide personal information through, for example, the creation of an account, the purchase of products through our Site, the inclusion of a review or comment, the completion of the return service, the filling in the contact forum or using the messaging and chat service with our customer service or when you contact us to leave your comments or opinions. If you need to contact us by telephone, we record the call for training purposes and to improve our services and make notes regarding your call. We remind you that you can register on the Site and create an account also using a social network account, such as a Facebook account. In the event that you register via this method by issuing the authorizations requested during registration, we will receive your social network account information, such as name and surname, position, basic personal data.
Sensitive data
We do not process sensitive data, i.e. details on physical or mental health, on the alleged commission of crimes or criminal convictions, however, in the event that you spontaneously share any of this information with us, we will process such data only with your explicit consent.
Third party data
If you decide to provide data from third parties, make sure that these subjects have been previously and adequately informed about the methods and purposes of processing indicated here. In relation to this hypothesis, you act as an independent data controller, assuming all obligations and legal responsibility.
Data of children under 16 years of age
In this regard, we remind you that if you are under 16 years of age you cannot provide us with any personal data, and in any case we assume no responsibility for any false statements provided by you. If we become aware of the existence of untrue statements, we will proceed with the immediate cancellation of any personal data acquired.
Browsing data
We collect the following data through the services you use:
technical data: This category of data includes the IP addresses or domain names of the computers you use when you connect to the Site, the addresses in URI (Uniform Resource Identifier) notation of the requested resources, the time of the request, the method used in the submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters relating to your operating system and the IT environment. These data are used only for statistical information (therefore they are anonymous), to check the correct functioning of the Site and are deleted immediately after processing. The data could be used to ascertain responsibility in the event of hypothetical computer crimes against the site: except for this eventuality, the data on web contacts do not persist for more than 7 days.
data collected using cookies or similar technologies: for further information, please visit the Cookies section.
FOR WHICH PURPOSES DO WE PROCESS YOUR DATA?
a) To guarantee you access to our Site and the use of our services
When you use our Site and its related services, we will use your personal data to allow you to register on the Site and create a personal account, to verify your identity as a user of the Site, to allow you to buy/sell products and, where appropriate, make the products purchased, to provide you with customer support service and to resolve any problems reported by you, to send you necessary communications (such as for example confirming the purchase order or confirming successful payment or reminding you of products in your cart) as well as to provide you with all further services.
b) To inform you about products, services, events and for other promotional purposes
If you have expressly given us your consent or if we have a legitimate interest (pursuant to applicable law), we will use your data to update you about products and services offered by us as well as to inform you about promotional, commercial and advertising activities of the Company or of third party commercial partners via email, SMS or WhatsApp; only if you are a professional could we notify you of such promotions and events by telephone call via operator or customer care service consisting in the offer of dedicated services during sales and after sales. Furthermore, always subject to your consent or if we have a legitimate interest (pursuant to applicable legislation), we may use your data as part of carrying out market research and surveys to measure your satisfaction, via e-mail, sending SMS or whatsapp, with the aim of improving our services and the relationship with our users
- c) To offer you a personalized service
If you have expressly given us your consent, we use your data to analyze your consumption habits and choices, in order to offer you a personalized service in line with your interests and to improve our commercial offer.
- d) To improve the services we offer through the Site
We will use the data provided to improve the services we offer through the Site and your product buying/selling experience. In particular, we will be able to analyze the use and measure the effectiveness of our Site and our services to better understand how it is used in order to improve it as well as engage and retain users.
- e) To ensure our rights, ownership or security of data
We may also use personal data in connection with your use of our Site to prevent or detect fraud, abuse, illegal use, violations of our Terms and Conditions, and to comply with court orders, government requests or comply with applicable laws.
4. WHAT IS THE LEGAL BASIS OF THE PROCESSING?
We will only process your personal data where we have a legal basis for doing so.
In most cases we will process your data to guarantee you access to the Site and the services offered therein. In addition, we may process your data for one or more of the following reasons:
Subject to your explicit consent (for example to inform you about our products, services, events and for other promotional purposes, as well as to offer you a personalized service)
To ensure compliance with legal obligations, regulations and community standards (for example to comply with court orders, government requests or comply with applicable legal provisions).
For our legitimate interest (for example to improve the services we offer through the Site or to guarantee the ownership and security of the data we process).
IS THE PROVISION OF DATA MANDATORY?
The provision of personal data is mandatory exclusively for the processing necessary to guarantee access to our Site and the services we offer through it. Any refusal to provide the personal data requested for this purpose makes it impossible to register on the Site and use the related services. All other provisions of your information are optional but providing them allows us to offer you a better experience.
HOW DO WE PROCESS YOUR DATA AND FOR HOW LONG?
The storage of personal data will take place in paper and/or electronic form and for the time strictly necessary to pursue the purpose referred to in point 3 above (“For what purposes do we process your data?”).
In particular, when you register on the Site and create an account, we process and store most of your information in our possession for as long as you actively use the services we offer through the Site. Following termination of your account, we will retain your personal information for a maximum period of 24 months from the date of cancellation of the account for defense purposes and/or to assert our rights in court and/or out of court in the event of legal disputes relating to the execution of our services; your further personal information relating to transactions carried out through the Site are retained for 10 years in accordance with the law (including tax obligations).
For direct marketing and profiling purposes, we store your data for a maximum period equal to that required by applicable law, respectively equal to 24 and 12 months from the last interaction of any kind on your part with the Site.
For analysis purposes aimed at improving the service, the user’s personal data will be subject to a maximum retention period of 24 months from the date of their registration.
Upon expiry of the maximum retention period for personal data in accordance with the provisions of this section, we will delete your data automatically or anonymize it permanently and irreversibly.
We remind you that if you do not carry out any active action (such as use of the services offered by the Site, navigation, searches and/or any other method of using the Site) for a continuous period of 36 months, you will be classified as an inactive user. and, upon written communication regarding the deactivation of your account, we will proceed to retain your personal data for the maximum retention period established therein.
HOW CAN YOU EXERCISE YOUR RIGHTS?
Consistent with the provisions of the GDPR, you have the right to request, at any time, access to your personal data, rectification or cancellation of the same, to object to their processing or to exercise the right to portability. The applicable legislation regarding the protection of personal data also allows you to exercise the right to request the limitation of processing in the cases provided for by the art. 18 of the GDPR, as well as to obtain the data concerning you in a structured, commonly used and automatically readable format, in the cases provided for by the art. 20 of the GDPR.
Requests can be sent to the email address info@mepalitalia.it. In particular, if you wish to authorize the activities referred to in letters b) (Marketing purposes) in the previous point 3 (“For what purposes do we process your data? ”) and subsequently do not wish to receive further communications from us or wish to limit the ways in which you can be contacted, you can at any time interrupt these communications simply by clicking on the appropriate “unsubscribe” link at the bottom of each communication.
Finally, we remind you that you always have the right to lodge a complaint with the competent supervisory authority (Guarantor for the Protection of Personal Data), pursuant to art. 77 of the GDPR, if you believe that the processing of your data is contrary to the legislation in force.
HOW DO WE GUARANTEE THE PROTECTION OF YOUR DATA?
Your personal data are processed by the subjects indicated in the previous point 1 (“Who processes your data?”), in compliance with the provisions of current legislation. In particular, to guarantee the security of your data taking into account the state of the art and implementation costs, as well as the nature, object, context and purposes of the processing, as well as the risk of varying probability and severity for the rights and freedoms of natural persons, we have adopted appropriate technical and organizational measures to guarantee a level of security appropriate to the risk.
WHEN WAS THIS INFORMATION UPDATED?
This information was published on the date indicated in the heading and may undergo changes over time also in connection with the possible entry into force of new sector regulations, the updating or provision of new services or technological innovations. In this case the joint owners will notify you by providing evidence of such updates.
FURTHER INFORMATION
(A) Nominations
If the “Work with us” page is active on our Site, you will be able to consult any of our open professional positions or send your spontaneous application.
The curricula received, following communication via the Site of our open professional positions or if you independently decide to send us your CV, will be kept for a maximum period of 6 months from the date of receipt for the sole purpose of evaluating your application or for re-evaluation. for subsequent searches for professional positions compatible with your profile as long as they are activated during the maximum retention period of your data. You can object to the processing of your personal data at any time by writing to info@mepalitalia.it.
If you apply, remember to include in your CV the declaration with which you consent to the processing of personal data for the purpose of selection and avoid entering sensitive personal data (such as your state of health, religious, philosophical or political beliefs ) not relevant to the job offer.
(b) Third Party Links
This Privacy Policy refers exclusively to the Site. Where the Site contains links to third-party websites, we remind you that we do not exercise any form of control over them and are in no way responsible. We therefore invite you to read the respective privacy information present on the third-party sites you access.
DO YOU HAVE FURTHER QUESTIONS?
We welcome questions, comments and concerns about our privacy policy and privacy practices.
If you wish to provide feedback or if you have questions or doubts, please contact our DPO or send an email to info@mepalitalia.it