Information on the processing of customers' personal data
With this information on the processing of personal data, made pursuant to Art. 13 of Regulation (EU) 2016/679 (the so-called “GDPR”), Mascarello Michele & Figli C. Valletti s.n.c., as Data Controller, intends to explain to you the purposes and methods by which mascarello.com collects and processes your personal data, which categories of data are subject to processing, what rights you are granted as a data subject to processing and how they can be exercised. This information is provided solely for this website (“Site”), so mascarello.com assumes no responsibility for other websites that may be consulted through hyperlinks on the Site. Users, by using this Site, accept this policy and are, therefore, encouraged to read it before providing personal information of any kind.
Table of Contents
1. DATA CONTROLLER
Mascarello.com is the Data Controller of the personal data collected through the platform.
For certain processing operations, mascarello.com makes use of employees, agents or collaborators, who are appointed to carry out processing operations under the authority of the Data Controller, as well as partner companies or professional firms providing assistance and consultancy in accounting, administrative, legal, tax and financial matters located in the territory of the European Union, who are duly appointed as data processors pursuant to Art. 28 of the GDPR.
An up-to-date list of the data processors, as well as the individuals who carry out processing operations under the authority of the Data Controller, is kept at the Data Controller’s office.
The updated list of data processors and processors is kept at the Data Controller’s office.
2. CATEGORIES OF PERSONAL DATA
- Biographical data, such as first and last name, place and date of birth, and residential address;
- contact information, such as shipping address, telephone number, and e-mail address;
- Bank details (e.g., IBAN), if provided for possible reimbursement;
- browsing data, such as IP address, time of access to the site and/or registration to the platform, possible registration referer, methods of access to the server, numerical code indicating the status of the response given by the server (successful, error, etc.);
- purchase data, such as average purchase value, type of product purchased, frequency of purchase, total amount purchased over time, and total number of orders placed.
3. PURPOSE AND LEGAL BASIS FOR PROCESSING
Your Data will be used for the following purposes:
For the execution of the contract
The Data will be processed by mascarello.com to enable you to register on the Site and use the services specifically related to it. By way of example, your Data will be processed for the management of purchase orders, for maintenance and technical assistance, and in order to improve the quality of the services offered. The Data will then be processed for the execution of the existing contract with the Owner. The provision of Data is necessary to enable the establishment and management of the contractual relationship; failure to do so will make it impossible for us to execute the contract and provide you with the requested service.
For marketing purposes
- Direct Sales
Subject to your specific consent, mascarello.com may process your Data to send advertising material or commercial communications relating to any promotions or for market research. Such communications may be sent through the use of automated systems (e.g., e-mail, SMS, push notifications) and traditional systems (e.g., paper mail). The consent given is revocable at any time, including with regard to automated contact systems only, by writing to email@example.com
The Data provided when subscribing to the newsletter will be used by mascarello.com for the sole purpose of providing the requested newsletter service. The Data will then be processed for the purpose of providing the requested service to the Data Controller. You may at any time request to unsubscribe from the newsletter by following the instructions given from time to time in any communication made for the purposes mentioned in this section.
For profiling purposes
mascarello.com may process your Data to understand your buying habits and preferences in relation to the products and services offered through the platform in order to offer you products and services in line with your profile.
For the pursuit of this purpose, mascarello.com may process the Data referred to in paragraph 2.
Such data will be processed on the basis of its legitimate interest in optimizing its purchasing procedures, through offering products and services that are more functional and useful to the specific needs of customers. The legitimate interest of mascarello.com has been appropriately balanced against your interests and expectations in the data protection impact assessment (available by clicking here), where certain technical and legal measures have been provided in order to minimize the impact of profiling carried out by mascarello.com on your legal sphere.
We remind you that, pursuant to Art. 21 of the GDPR, you may object to such processing at any time, on grounds related to your particular situation, by writing to firstname.lastname@example.org
The entities or categories of entities to which your personal data will be disclosed by mascarello.com will process such data as autonomous data controllers according to the provisions of their respective privacy policies.
The consent given is revocable at any time by writing to email@example.com
4. DATA STORAGE AND PROCESSING
Your Data will be subject to storage for the duration of your contractual relationship with mascarello.com. Following the termination of the relationship, the Data will be retained for a period, exclusively for the needs of protecting the rights of the Owner and for the fulfillment of legal obligations.
With reference to processing for marketing purposes, we inform you that the Data will be processed for the duration of the contract unless you withdraw your consent or exercise your right to object to the processing.
With reference to the data processed for profiling purposes, we inform you that the Data will be processed for a period or for such different period as may be provided for by law or by measures of the Supervisory Authority, unless you exercise your right to object to the processing. After this period or in case of opposition, the data will be retained if necessary to pursue other purposes or will be permanently deleted.
With reference to the communication of data to third parties for marketing purposes, we would like to inform you that the data may be communicated until your consent is revoked.
5. DEFENSE IN COURT
Your Data may be used for the defense by mascarello.com in court or in the preparatory stages of its possible establishment.
6. CREDIT CARD INFORMATION
Your credit card information will not be processed by mascarello.com as it is processed and/or stored directly by the banking circuit. mascarello.com uses the professional payment services Stripe and PayPal Inc. which ensure maximum protection and confidentiality for the consumer.
To make navigation easier and more intuitive, mascarello.com uses cookie technology. More information about cookies is available by clicking here.
8. USERS' RIGHTS
We inform you that, in accordance with current regulations, you have the following rights:
- to request and obtain information about the existence of their data in the availability of mascarello.com and access to such data;
- For data processed by automated systems, request transfer to another owner;
- To request and obtain amendment and/or correction of your personal data if you believe it is inaccurate or incomplete;
- to request and obtain the deletion – and/or restriction of processing – of your personal data if it is data or information that is not needed – or no longer needed – for the above purposes, then after the retention period indicated in the preceding paragraph has elapsed.
We would also like to inform you that in accordance with current regulations, you may bring any complaints regarding the processing of your personal data to the Data Protection Authority.
Finally, the User has the right to independently delete his or her account and personal information related to it. To delete their account, Users may request deletion by writing to firstname.lastname@example.org