Personal data processing
Below you can consult our PRIVACY (GDPR) and COOKIES MANAGEMENT POLICY
Reference legislation: European Regulation no. 679/2016 and Legislative Decree no. 196/2003 and subsequent amendments.
We wish to inform you that Regulation (EU) 2016/679 ("European Regulation on the protection of personal data" or GDPR) and Legislative Decree 196/03 "Code regarding the protection of personal data" and subsequent amendments provide for the protection of individuals and other subjects and the respect for the processing of personal data, which will be processed according to the principles of correctness, lawfulness, and transparency in full respect of the rights of customers in order to provide them with the requested services and products as well as to respond to any requests or communications from Users/Customers, including those relating to the online sale (e-commerce) of our products.
No data will be communicated or disclosed in violation of the law
This information notice, provided pursuant to the above-mentioned regulations, available at the following web address, describes the methods and purposes of the processing of personal data of users/clients who consult this Site.
The validity of the information contained on this page is limited to this Site and in particular to its home page and the shop section, and does not extend to other websites that may be accessed via hyperlinks.
Since the site https://www.nemastudio-vr.com/ collects some Personal Data of its Users, pursuant to Articles 13 and 14 of the GDPR 679/2016 we provide you with some information on the processing of your data.
Since this is an e-commerce site with marketing and commercial purposes, the processing of such personal data will be aimed at fulfilling contractual obligations or at sending additional commercial information and advertising material about product news from the owners of this site or any invoices electronically.
The data will therefore be processed using automated tools for the time strictly necessary to achieve the purposes for which they were collected or subsequently processed, in accordance with Article 11, letter e) of the Privacy Code.
The company Irene Mazzai adopts all preventive security measures established by Italian and European regulations in order to avoid the risks of destruction or loss of data, unauthorized access, or processing that is not permitted or not in line with the purpose of collection.
Apart from what is specified below with reference to navigation data (cookies), the provision of data through the information request form on this site or sent by email by customers, or any information voluntarily provided by customers, is always optional; however, if the data marked as "mandatory" within the purchase form (checkout) is not provided, the company IRENE MAZZAI will not be able to provide the User with the requested service from time to time and in particular the service of selling its products with the related shipping.
The data provided may under no circumstances be communicated or transferred to third parties, nor used by third parties for commercial, propaganda, marketing or promotional purposes or for market or sector surveys. Personal or company data may possibly be used for the purposes described above only and exclusively by the company IRENE MAZZAI (VAT No. 04792750236). The data provided by the customer will be recorded through the information request form on the contact page and stored on the servers of the company responsible for hosting this site, namely FLAZIO (VAT No. 05021040877) with registered office in Via Diodoro Siculo, 8, 95030 Canalicchio CT for which reference is made to the relevant privacy policy at the following link https://www.flazio.com/privacypolicy
Your data will be processed by internal staff exclusively for administrative and accounting purposes. It is possible that your data may be processed by other organizations independent of the Data Controller: for more information, please refer to our Cookie Policy below.
The processing, which will also be carried out with the aid of electronic means, has the following purposes:
1) fulfill the general obligations provided by law, by a regulation, by a contract, by community legislation or by an order of the Authority (such as, for example, in matters of anti-money laundering);
2) fulfill administrative obligations. The data acquired for these purposes are kept by us for the period provided by the respective regulations (10 years);
3) prepare a quote following your request. In this case, the data will be kept for a period of three years;
4) send promotional messages and updates about our products and offers by mail, email, or SMS;
The provision of data is:
- mandatory and therefore does not require your consent for points 1), 2), and 3) of the previous list, but failure to provide them makes it impossible to execute the sales contract;
- optional with reference to point 4) of the previous list and, therefore, there will be no consequences except for our inability to serve you at best.
We adopt technical and organizational measures to protect data from manipulation, destruction, or loss in compliance with current regulations.
Rights of the data subject
Art. 15 (right of access), 16 (right of rectification) of EU Regulation 2016/679
The data subject has the right to obtain from the data controller confirmation as to whether or not personal data concerning him or her are being processed and, if so, to access the personal data and the following information: a) the purposes of the processing; b) the categories of personal data concerned; c) the recipients or categories of recipients to whom the personal data have been or will be disclosed, in particular recipients in third countries or international organizations; d) the envisaged period for which the personal data will be stored or, if not possible, the criteria used to determine that period; e) the existence of the right of the data subject to request from the data controller rectification or erasure of personal data or restriction of processing of personal data concerning him or her or to object to such processing; f) the right to lodge a complaint with a supervisory authority; h) the existence of automated decision-making, including profiling, and, at least in those cases, meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for the data subject.
Right under Art. 17 of EU Regulation 2016/679 - right to erasure
The data subject has the right to obtain from the data controller the erasure of personal data concerning him or her without undue delay and the data controller has the obligation to erase personal data without undue delay if one of the following reasons applies: a) the personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed; b) the data subject withdraws consent on which the processing is based in accordance with Article 6, paragraph 1, letter a), or Article 9, paragraph 2, letter a), and where there is no other legal ground for the processing; c) the data subject objects to the processing pursuant to Article 21, paragraph 1, and there are no overriding legitimate grounds for the processing, or the data subject objects to the processing pursuant to Article 21, paragraph 2; d) the personal data have been unlawfully processed; e) the personal data have to be erased for compliance with a legal obligation in Union or Member State law to which the controller is subject;
f) the personal data was collected in relation to the offer of information society services referred to in Article 8, paragraph 1 of EU Regulation 2016/679
Right under Art. 18 Right to restriction of processing
The data subject has the right to obtain from the data controller the restriction of processing when one of the following applies: a) the data subject contests the accuracy of the personal data, for the period necessary for the data controller to verify the accuracy of such personal data; b) the processing is unlawful and the data subject opposes the erasure of the personal data and requests the restriction of their use instead; c) although the data controller no longer needs the personal data for the purposes of the processing, they are required by the data subject for the establishment, exercise or defense of legal claims; d) the data subject has objected to processing pursuant to Article 21(1) of Regulation (EU) 2016/679 pending the verification whether the legitimate grounds of the data controller override those of the data subject.
Protection of rights
Articles 11 and 12 of the "New Regulation" generally govern the procedures for exercising all rights arising for the data subject. The Community Legislator has established the obligation—incumbent on the data controller—to respond regularly in writing to the data subject's requests, also through electronic means that facilitate accessibility. The requested information may be provided to the data subject orally only if the data subject explicitly requests it. In order to exercise their rights, the data subject may also contact the judicial authority or the Data Protection Authority, in case their requests to the data controller are not satisfied.
Rights of the data subjects
Clients/users may exercise at any time the rights provided by current legislation in order to obtain confirmation of the existence of data concerning them, to rectify or update them, to delete them, or to object for legitimate reasons to their processing, by submitting a specific request to the data controller via regular email at the address nemaboutiquestudio@gmail.com or certified email at the address hirene@pec.it .
Response times for the exercise of rights
The deadline for the response to the data subject by the Data Controller is, for all rights (including the right of access), 1 month, extendable up to 3 months in cases of particular complexity; the controller must in any case provide feedback to the data subject within 1 month of the request, even in the case of denial. In the event of a data breach, the Data Controller must take two different actions:
• notification of the breach to the Supervisory Authority (privacy guarantor) within 72 hours of the event
• notification to the data subject (without undue delay).
Withdrawal of consent to processing
For reasons related to the particular situation of the Data Subject, they may object at any time to the processing of their personal data if it is based on legitimate interest or if it is carried out for commercial promotion activities, by sending a request to the Data Controller via email.
The Data Subject has the right to have their personal data erased if there is no overriding legitimate reason of the Data Controller compared to the one that gave rise to the request, and in any case if the Data Subject has objected to the processing for commercial promotion activities.
If a data subject wishes to exercise one of these rights, they simply need to send us an email. There are no costs to access your information or exercise your rights; however, there may be a reasonable fee if the request is unfounded or excessive; alternatively, we may refuse to comply with the request. We may also request specific information from individuals making requests to confirm their identity and ensure that rights are exercised by the legitimate holders.
Without prejudice to any other action in administrative or judicial proceedings, the Data Subject may lodge a complaint with the competent supervisory authority in Italy (the Data Protection Authority) or with the authority that performs its tasks and exercises its powers in the Member State where the GDPR violation occurred.
For any further information, you can contact us using the references listed in the table:
Name of the data controller | IRENE MAZZAI |
VAT number | 04792750236 |
Registered office | Via verga, Castelnuovo del garda |
Operating office | Via del Risorgimento, 37 Verona |
nemaboutiquestudio@gmail.com | |
Pec | hirene@pec.it |
Person in charge of processing | Mazzai Irene |
Phone number | +39 3408001843 |
Below is the link to consult the entire European privacy regulation (GDPR) in Italian European Privacy Regulation 679/2016
And the link to the Legislative Decree No. 196/2003
COOKIES POLICY
This cookie policy is limited to this Site and in particular to its home page, the blog section, and the shop section, and is formulated taking into account the provisions published in the Official Gazette No. 126 of June 3, 2014 by the Privacy Guarantor concerning the identification of simplified procedures for the information and acquisition of consent for the use of cookies - May 8, 2014" in implementation of Directive 2009/136 which amended the "e-Privacy" Directive (2002/58/EC).
Information sources on cookie policy
http://www.garanteprivacy.it/web/guest/home/docweb/-/docweb-display/docweb/3118884
http://www.garanteprivacy.it/web/guest/home/docweb/-/docweb-display/docweb/3585077
http://www.garanteprivacy.it/web/guest/home/docweb/-/docweb-display/docweb/2142939
http://www.garanteprivacy.it/web/guest/home/docweb/-/docweb-display/docweb/4006878
http://www.garanteprivacy.it/web/guest/home/docweb/-/docweb-display/docweb/4020961
A. What are cookies?
Cookies are text files that websites visited by the user send to their device (usually to the browser) where they are stored to then be sent back to the same sites upon the user's next visit.
Their operation is entirely dependent on the browser that the user uses and can be enabled or disabled by the user.
The cookies we use on this site are used to make your browsing more efficient and improve your online experience.
B. Which cookies are used on this Site?
Within our Site we use two distinct types of cookies: technical and analytics.
1. Technical cookies
These are cookies that are used to enable navigation or to provide a service requested by the user. They are not used for further purposes and are normally installed directly by the owner of the website.
Without the use of such cookies, some operations could not be performed or would be more complex and/or less secure, such as home banking activities, for which cookies, which allow the identification of the user to be carried out and maintained during the session, are essential.
Among technical cookies, there are session cookies used to ensure normal navigation and use of the site; their use is strictly limited to the transmission of session identifiers (consisting of random numbers generated by the server) necessary to allow safe and efficient browsing of the Site, and functionality cookies used to allow the User to navigate the Site according to a series of selected criteria (such as the selected language) in order to improve the service provided to them.
2. Analytics cookies
Analytical cookies, such as those from Google Analytics, are used to monitor the use of the site by users for the purpose of optimizing the site itself by the site owner, who can collect aggregated information on the number of users and how they visit the site. They can be assimilated to technical cookies when they are created and used directly by the first-party site (thus, without the involvement of third parties).
This site may use Google Analytics, a web analysis service provided by Google, Inc. ("Google"). Google Analytics uses cookies to allow the collection and anonymous analysis of information about how Users use this Site (including IP address). This information is transmitted to Google, which processes it in order to prepare reports for the operators of this Site regarding Users' activities on the website itself.
This Site does not use (and does not allow third parties to use) the Google analytics tool to monitor or collect Users' personally identifiable information.
Google does not associate Users' IP addresses with any other data held by Google nor does it attempt to link an IP address with the identity of a computer User. Google may also transfer this information to third parties where required by law or where such third parties process the aforementioned information on Google's behalf.
By using the services offered on this Site, the User consents to the processing of their data by Google for the methods and purposes indicated above.
The User always has the option to set their browser in such a way as to disable the aforementioned cookies through the options available in their internet browsing software according to the instructions provided by the respective providers.
To disable analytical cookies and prevent Google Analytics from collecting data about browsing on the Site, the User can always download the browser add-on for disabling Google Analytics: https://tools.google.com/dlpage/gaoptout .
For greater protection of the user/client, however, in the site code the tracking of Google Analytics has been made anonymous through the function "set"('set', 'anonymizeIp', true);.
To consult the privacy policy of Google and Google Analytics, please refer to the following links:
https://support.google.com/analytics/answer/9019185?hl=en#zippy=%2Cin-this-article
https://policies.google.com/privacy?hl=it
The above also applies in the event of participation in the online questionnaire (feedback) hosted on the Google Forms service (google.com/forms).
It should also be noted that this site does not use profiling cookies, understood as those cookies used to track the user's browsing on the web and create profiles based on their tastes, habits, choices, etc.
With these cookies, advertising messages in line with the preferences already expressed by the user during online browsing can be transmitted to the user's device.
In the absence of profiling cookies, express consent is not required and the related information does not need to be provided via a banner.
This site also does not use so-called "third-party" cookies, which are instead set by a website different from the one the user is visiting. This is because each site may contain elements (images, maps, sounds, specific links to web pages of other domains, etc.) that reside on servers different from that of the visited site.
The Privacy Guarantor specifies that the information notice does not apply to services provided by third parties, and this site has no control over their cookies, nor over their respective policies for processing users’/visitors’ personal data, which are entirely managed by the third parties. As a result, information about the use of cookies and their purposes, as well as more generally about the purposes and methods of processing users’/visitors’ personal data, is provided directly by the third parties in their respective privacy policies or cookie policies.
This site, for this purpose, contains icons to access the Instagram and WhatsApp Business social networks.
In this case, there is not the same obligation of disclosure and consent as prescribed for profiling cookies.
The collection and use of personal information by such third parties are therefore governed by their respective privacy policies, which you are kindly requested to refer to:
- Instagram:https://instagram.com/about/legal/privacy/; https://help.instagram.com/155833707900388/
- Google: https://www.google.com/policies/privacy/
- Sharethis: https://www.sharethis.com/privacy/
- whastapp business: https://faq.whatsapp.com/1148840052398648
This company reserves the right to update this information at any time; the User/client undertakes to periodically visit this section in order to be aware of any changes.
© IRENE MAZZAI 2023 - Privacy and Cookies Policy.