Personal data processing
Below you can view our PRIVACY MANAGEMENT POLICY (GDPR) and COOKIES
Reference legislation: European Regulation No. 679/2016 and Legislative Decree No. 196/2003, as amended.
We wish to inform you that EU Reg. 2016/679 ("European Regulation on the protection of personal data" or GDPR) and Legislative Decree 196/03 “Personal Data Protection Code”, as amended, provide for the protection of individuals and other subjects and for compliance with the processing of personal data, which will be handled according to the principles of fairness, lawfulness and transparency, in full respect of customers’ rights, in order to provide them with the requested services and products, as well as to respond to any requests or communications from Users/Customers, also in relation to the online sale (e-commerce) of our products.
No data will be communicated or disclosed in breach of the law
This notice, provided pursuant to the above-mentioned legislation, available at the following web address, describes the methods and purposes of the processing of the personal data of users/customers who browse this Site.
The validity of the notice on this page is limited to this Site and, in particular, to its home page and the shop section, and does not extend to other websites that may be accessed via hyperlink.
Since the website https://www.nemastudio-vr.com/ collects some Personal Data from its Users, pursuant to Articles 13 and 14 of GDPR 679/2016 we provide you with some information on the processing of your data.
As this is an e-commerce site with marketing and commercial purposes, the processing of such personal data will be aimed at fulfilling contractual obligations or at the electronic sending of further commercial information and advertising material on new products from the owners of this site or any invoices.
The data will therefore be processed using automated tools for the time strictly necessary to achieve the purposes for which they were collected or subsequently processed, as provided for by Art. 11, letter e) of the Privacy Code.
Irene Mazzai adopts all preventive security measures required by Italian and EU regulations in order to avoid risks of data destruction or loss, unauthorized access, or processing that is not permitted or not consistent with the purpose of collection.
Except as specified below with reference to browsing data (cookies), the provision of data via the information request form on this website or sent by customers via email, as well as any information provided voluntarily by customers, is always optional; however, if the data marked as “mandatory” within the purchase (checkout) form are not provided, the company IRENE MAZZAI will not be able to provide the User with the service requested from time to time and, in particular, the service of selling its products with related shipping.
The data provided may under no circumstances be disclosed or transferred to third parties, nor used by third parties for commercial, advertising, marketing or promotional purposes, or for market or sector research. Personal or company data may possibly be used for the purposes described above solely and exclusively by the company IRENE MAZZAI (VAT No. 04792750236). The data provided by the customer will be recorded via the information request form on the contacts page and stored on the servers of the company responsible for hosting this website, namely FLAZIO (VAT No. 05021040877) headquartered in Via Diodoro Siculo, 8, 95030 Canalicchio CT; please refer to its privacy policy at the following link https://www.flazio.com/privacypolicy
Your data will be processed by our internal staff solely for administrative and accounting tasks. Your data may be processed by other organizations independent of the Data Controller: please refer to our Cookie Policy below.
The processing, which will also be carried out with the aid of IT tools, has the following purposes:
1) to comply with the general obligations set out by law, a regulation, a contract, EU rules, or an order of the Authority (for example, in anti-money laundering matters);
2) to comply with administrative obligations. The data collected for these purposes are kept by us for the period required by the relevant regulations (10 years);
3) prepare a quote following your request. In this case, the data will be kept for a period of three years;
4) send promotional messages and updates on our products and offers by mail, email, or SMS;
Providing the data is:
- mandatory and therefore does not require your consent for items 1), 2), and 3) of the previous list, but any failure to provide it makes it impossible to perform the sales contract;
- optional with reference to point 4) of the previous list and, therefore, there will be no consequences except our inability to serve you as best as possible.
We adopt technical and organisational measures to protect data from manipulation, destruction or loss, in compliance with applicable regulations.
Data subject rights
Art. 15 (right of access), 16 (right to rectification) of EU Reg. 2016/679
The data subject has the right to obtain from the data controller confirmation as to whether or not personal data concerning them are being processed and, where that is the case, to obtain access to the personal data and the following information: a) the purposes of the processing; b) the categories of personal data concerned; c) the recipients or categories of recipients to whom the personal data have been or will be disclosed, in particular recipients in third countries or international organisations; d) the envisaged period for which the personal data will be stored or, if not possible, the criteria used to determine that period; e) the existence of the data subject’s right to request from the data controller rectification or erasure of personal data or restriction of processing of personal data concerning them or to object to such processing; f) the right to lodge a complaint with the supervisory authority; h) the existence of automated decision-making, including profiling and, at least in those cases, meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for the data subject.
Right under Art. 17 of EU Reg. 2016/679 - right to erasure
The data subject has the right to obtain from the controller the erasure of personal data concerning him or her without undue delay and the controller has the obligation to erase personal data without undue delay where one of the following grounds applies: a) the personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed; b) the data subject withdraws consent on which the processing is based in accordance with Article 6(1)(a) or Article 9(2)(a), and where there is no other legal ground for the processing; c) the data subject objects to the processing pursuant to Article 21(1) and there are no overriding legitimate grounds for the processing, or the data subject objects to the processing pursuant to Article 21(2); d) the personal data have been unlawfully processed; e) the personal data must be erased for compliance with a legal obligation in Union or Member State law to which the controller is subject;
f) the personal data were collected in relation to the offer of information society services referred to in Article 8(1) of EU Reg. 2016/679
Right under Art. 18 Right to restriction of processing
The data subject has the right to obtain from the controller the restriction of processing where one of the following applies: a) the data subject disputes the accuracy of the personal data, for the period needed by the controller to verify the accuracy of such personal data; b) the processing is unlawful and the data subject opposes the erasure of the personal data and requests instead that its use be restricted; c) although the controller no longer needs it for processing purposes, the personal data are required by the data subject for the establishment, exercise or defence of a right in court; d) the data subject has objected to processing pursuant to Article 21(1), EU Reg 2016/679 pending verification as to whether the controller’s legitimate grounds override those of the data subject.
Protection of rights
Arts. 11 and 12 of the "New Regulation" set out, in general terms, the procedures for exercising all rights vested in the data subject. The EU Legislator has provided for an obligation - incumbent on the controller - to respond duly in writing to the data subject’s requests, including through electronic tools that facilitate accessibility. The requested information may be provided to the data subject orally only where the latter expressly requests it. To enforce their rights, the data subject may also apply to the judicial authority or to the Data Protection Authority, where their requests to the data controller are not met.
Data subjects' rights
Customers/users may exercise at any time the rights provided for by applicable law in order to obtain confirmation of the existence of data concerning them, to rectify or update it, to delete it or to object, for legitimate reasons, to its processing, by submitting a specific request to the data controller via standard email at nemaboutiquestudio@gmail.com or certified email at hirene@pec.it .
Response times for exercising rights
The deadline for the Controller’s response to the data subject is, for all rights (including the right of access), 1 month, extendable up to 3 months in cases of particular complexity; in any case, the Controller must provide a reply to the data subject within 1 month of the request, even in the event of refusal. In the event of a data breach, the Controller must implement two different actions:
• notification of the breach to the Supervisory Authority (Data Protection Authority) within 72 hours of the event
• reporting to the data subject concerned (without undue delay).
Withdrawal of consent to processing
For reasons related to the Data Subject’s particular situation, they may object at any time to the processing of their personal data if it is based on legitimate interest or if it is carried out for commercial promotional activities, by sending the request to the Data Controller by email.
The Data Subject has the right to have their personal data erased if there is no overriding legitimate ground of the Controller compared to the one that gave rise to the request, and in any case where the Data Subject has objected to processing for commercial promotional activities.
If a data subject wishes to exercise any of these rights, they simply need to email us. There is no fee to access your information or exercise your rights; however, a reasonable fee may apply if the request is unfounded or excessive; alternatively, we may refuse to comply with the request. We may also ask requesters for specific information to confirm their identity and ensure that the rights are exercised by the legitimate holders.
Without prejudice to any other administrative or judicial remedy, the Data Subject may lodge a complaint with the competent supervisory authority in Italy (the Italian Data Protection Authority) or with the authority that performs its tasks and exercises its powers in the Member State where the GDPR infringement occurred.
For any further information, you can contact us using the details shown in the table:
Data Controller | IRENE MAZZAI |
VAT No. | 04792750236 |
Registered office | Via verga, Castelnuovo del garda |
Operating office | Via del Risorgimento, 37 Verona |
nemaboutiquestudio@gmail.com | |
PEC | hirene@pec.it |
Person in charge of processing | Mazzai Irene |
Phone number | +39 3408001843 |
Below is the link to view the full European privacy regulation (GDPR) in Italian European privacy regulation 679/2016
And here is the link to Legislative Decree No. 196/2003
COOKIE POLICY
This cookie policy is limited to this Site and, in particular, to its home page, the blog section and the shop section, and is drafted in accordance with the provisions published in the Official Gazette no. 126 of 3 June 2014 by the Privacy Authority concerning the identification of simplified methods for providing information and obtaining consent for the use of cookies - 8 May 2014" implementing Directive 2009/136, which amended the "e-Privacy" Directive (2002/58/EC).
Information sources on cookie policy
http://www.garanteprivacy.it/web/guest/home/docweb/-/docweb-display/docweb/3118884
http://www.garanteprivacy.it/web/guest/home/docweb/-/docweb-display/docweb/3585077
http://www.garanteprivacy.it/web/guest/home/docweb/-/docweb-display/docweb/2142939
http://www.garanteprivacy.it/web/guest/home/docweb/-/docweb-display/docweb/4006878
http://www.garanteprivacy.it/web/guest/home/docweb/-/docweb-display/docweb/4020961
A. What are cookies?
Cookies are text files that the websites visited by the user send to their device (usually the browser), where they are stored and then sent back to the same websites on the user's next visit.
Their operation depends entirely on the web browser the user uses and they can be enabled or not by the user.
The cookies we use on this website are used to make your browsing work more efficiently and improve your online experience.
B. Which cookies are used on this Site?
Within our Site we use two distinct types of cookies: technical and analytics.
1. Technical cookies
These cookies are needed to enable browsing or to provide a service requested by the user. They are not used for any other purposes and are normally installed directly by the website owner.
Without using these cookies, some operations could not be carried out or would be more complex and/or less secure, such as home banking activities, for which cookies, which allow the user's identification to be performed and maintained within the session, are essential.
Among technical cookies are session cookies used to ensure normal browsing and use of the site; their use is strictly limited to the transmission of session identifiers (made up of random numbers generated by the server) needed to allow safe and efficient browsing of the Site, and functionality cookies used to allow the User to browse the Site according to a set of selected criteria (such as the selected language) in order to improve the service provided.
2. Analytics cookies
Analytics cookies, such as Google Analytics, are used to monitor users’ use of the site for optimization purposes by the site owner, who may collect aggregated information on the number of users and how they visit the site. They may be treated as technical cookies where they are created and used directly by the first-party site (thus, without the involvement of third parties).
This website may use Google Analytics, a web analytics service provided by Google, Inc. ("Google"). Google Analytics uses cookies to allow the anonymous collection and analysis of information on Users’ use of this Website (including the IP address). This information is sent to Google, which processes it in order to prepare reports for this Website’s operators regarding Users’ activity on the website itself.
This Site does not use (and does not allow third parties to use) Google’s analytics tool to track or to collect Users’ personally identifiable information.
Google does not associate Users’ IP address with any other data held by Google, nor does it try to link an IP address to the identity of a computer User. Google may also transfer this information to third parties where required by law or where such third parties process the above information on Google’s behalf.
By using the services offered on this Site, the User consents to the processing of their data by Google in the ways and for the purposes indicated above.
The User may always set their browser to disable the above cookies via the options available in their web browsing software, according to the instructions provided by the relevant vendors.
To disable analytics cookies and prevent Google Analytics from collecting data on Site browsing, the User can always download the Google Analytics Opt-out Browser Add-on: https://tools.google.com/dlpage/gaoptout .
However, to better protect the user/customer, Google Analytics tracking has been anonymized in the site code via the "set" function ('set', 'anonymizeIp', true);.
To view the privacy policy of Google and Google Analytics, please refer to the following links:
https://support.google.com/analytics/answer/9019185?hl=en#zippy=%2Cin-this-article
https://policies.google.com/privacy?hl=en
The above also applies if you take part in the online questionnaire (feedback) hosted on the Google Forms service (google.com/forms).
It is also specified that this website does not use profiling cookies, meaning those cookies used to track the user's browsing online and create profiles about their tastes, habits, choices, etc.
With these cookies, advertising messages consistent with the preferences already expressed by the user while browsing online may be sent to the user's device.
In the absence of profiling cookies, explicit consent is not required and the related notice does not need to be provided via a banner.
This site also does not use so-called "third-party" cookies, which are instead set by a website other than the one the user is visiting. This is because each site may contain elements (images, maps, sounds, specific links to web pages on other domains, etc.) that are hosted on servers different from those of the site visited.
The Privacy Authority clarifies that this notice does not apply to services provided by third parties, and this site has no control over their cookies, nor over their respective policies for processing users'/visitors' personal data, which are entirely managed by the third parties. As a result, information on the use of cookies and their purposes, as well as more generally on the purposes and methods of processing users'/visitors' personal data, is provided directly by the third parties in their respective privacy policy or cookie policy
This website, in this regard, includes icons to access the social networks Instagram and WhatsApp Business.
In this case there is no same obligation to provide notice and obtain consent as required for profiling cookies.
The collection and use of personal information by such third parties are therefore governed by their respective privacy policies, to which you are kindly asked to refer:
- Instagram:https://instagram.com/about/legal/privacy/; https://help.instagram.com/155833707900388/
- Google: https://www.google.com/policies/privacy/
- Sharethis: https://www.sharethis.com/privacy/
- WhatsApp Business: https://faq.whatsapp.com/1148840052398648
This company reserves the right to update this notice at any time; the User/customer agrees to visit this section periodically in order to review any changes.
© IRENE MAZZAI 2023 - Privacy and Cookies Policy.