Personal data processing
Below you can consult our PRIVACY MANAGEMENT POLICY (GDPR) and COOKIES
Reference legislation: European Regulation no. 679/2016 and Legislative Decree no. 196/2003 and subsequent amendments.
We wish to inform you that the EU Reg. 2016/679 ("European Regulation on the protection of personal data" or GDPR) and the Legislative Decree 196/03 "Code regarding the protection of personal data" and subsequent amendments provide for the protection of individuals and other subjects and respect for the processing of personal data which will be processed according to the principles of correctness, lawfulness, and transparency in full respect of customer rights in order to provide them with the requested services and products as well as to respond to any requests or communications from Users/Customers also regarding the online sale (e-commerce) of our products.
No data will be communicated or disseminated in violation of the law
This information, provided pursuant to the aforementioned legislation, available at the following web address, describes the methods and purposes of processing the personal data of users/customers who visit this Site.
The validity of the information contained on this page is limited to this Site and in particular to its home page and the shop section and does not extend to other websites that may be accessible via hyperlink.
Since the site https://www.nemastudio-vr.com/ collects some Personal Data of its Users, pursuant to articles 13 and 14 of the GDPR 679/2016 we provide you with some information on the processing of your data.
Since this is an e-commerce site with marketing and commercial purposes, the processing of such personal data will be aimed at fulfilling contractual obligations or sending additional commercial information and advertising material about product news from the owners of this site or any invoices.
The data will, therefore, be processed using automated tools for the time strictly necessary to achieve the purposes for which they were collected or subsequently processed, as provided by art. 11, lett. e) of the Privacy Code.
The company Irene Mazzai adopts all preventive safety measures established by Italian and EU regulations in order to avoid the risks of data destruction or loss, unauthorized access, or processing that is not allowed or not in line with the purpose of collection.
Apart from what is specified below with reference to navigation data (cookies), the provision of data through the information request form on this site or transmitted via email by customers or all information transmitted on a voluntary basis by customers is always optional; however, if the data marked as "mandatory" within the purchase form (checkout) is not provided, the company IRENE MAZZAI will not be able to provide the User with the requested service from time to time and in particular the service of selling its products with related shipping.
The data provided cannot be communicated, transferred to third parties, or used by third parties for commercial, propaganda, marketing, promotional purposes, or for market or sector surveys. Personal or corporate data may be used for the purposes described above only and exclusively by the company IRENE MAZZAI (P.Iva 04792750236). The data provided by the customer will be recorded through the information request form on the contact page and stored on the servers of the company responsible for hosting this site, namely FLAZIO (P.IVA 05021040877) located in Via Diodoro Siculo, 8, 95030 Canalicchio CT for which the related privacy policy can be found at the following link https://www.flazio.com/privacypolicy
Your data will be processed by the internal staff exclusively for administrative and accounting tasks. It may be that your data is processed by other organizations independent of the Data Controller: regarding this, please consult our Cookie Policy below.
The treatments, which will also be carried out with the aid of computer tools, have the following purposes:
1) fulfill the general obligations provided by law, by a regulation, by a contract, by community legislation or by an order of the Authority (such as in matters of anti-money laundering);
2) fulfill administrative obligations. The data acquired for these purposes are kept by us for the time required by the respective regulations (10 years);
3) prepare a quote following your request. In this case, the data will be stored for a period of three years;
4) send promotional messages and updates on our products and offers via mail, email, or SMS;
The provision of data is:
- mandatory and therefore does not require your consent to points 1), 2), and 3) of the previous list, but their eventual non-provision makes it impossible to execute the sales contract;
- optional with reference to point 4) of the previous list and, therefore, there will be no consequences except our inability to serve you best.
We adopt technical and organizational measures to protect data from manipulation, destruction, or loss in compliance with current regulations.
Rights of the Data Subject
Art. 15 (right of access), 16 (right to rectification) of Reg. EU 2016/679
The data subject has the right to obtain from the data controller confirmation as to whether or not personal data concerning them is being processed and, if so, to access the personal data and the following information: a) the purposes of the processing; b) the categories of personal data concerned; c) the recipients or categories of recipients to whom the personal data has been or will be disclosed, in particular if recipients in third countries or international organizations; d) the period for which the personal data will be stored, or, if not possible, the criteria used to determine that period; e) the existence of the right to request from the data controller rectification or erasure of personal data or restriction of processing of personal data concerning them or to object to such processing; f) the right to lodge a complaint with a supervisory authority; h) the existence of automated decision-making, including profiling, and, at least in those cases, meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for the data subject.
Right under Art. 17 of Reg. EU 2016/679 - right to erasure
The data subject has the right to obtain from the data controller the erasure of personal data concerning them without undue delay, and the data controller has the obligation to erase the personal data without undue delay if one of the following reasons applies: a) the personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed; b) the data subject withdraws consent on which the processing is based according to Article 6, paragraph 1, letter a), or Article 9, paragraph 2, letter a), and if there is no other legal ground for the processing; c) the data subject objects to the processing pursuant to Article 21, paragraph 1, and there are no overriding legitimate grounds for the processing, or objects to the processing pursuant to Article 21, paragraph 2; d) the personal data have been unlawfully processed; e) the personal data must be erased to comply with a legal obligation under Union or Member State law to which the data controller is subject;
f) personal data has been collected in relation to the offer of information society services referred to in Article 8, paragraph 1 of Reg. EU 2016/679
Right under art. 18 Right to restriction of processing
The data subject has the right to obtain from the data controller the restriction of processing when one of the following applies: a) the data subject contests the accuracy of the personal data, for the period necessary for the data controller to verify the accuracy of such personal data; b) the processing is unlawful and the data subject opposes the erasure of the personal data and requests the restriction of their use instead; c) although the data controller no longer needs the personal data for the purposes of processing, they are required by the data subject for the establishment, exercise, or defense of legal claims; d) the data subject has objected to processing pursuant to Article 21, paragraph 1, of Regulation (EU) 2016/679 pending the verification whether the legitimate grounds of the data controller override those of the data subject.
Protection of rights
Articles 11 and 12 of the "New Regulation" generally regulate the methods for exercising all the rights arising for the data subject. The Community Legislator has established the obligation - incumbent on the data controller - to respond regularly in writing to the data subject's requests, also through electronic means that facilitate accessibility. The requested information may be provided to the data subject orally only if the data subject explicitly requests it. The data subject may also contact the judicial authority or the Data Protection Authority to assert their rights if their requests to the data controller are not satisfied.
Rights of the interested parties
Customers/users can exercise at any time the rights provided by the current legislation in order to obtain confirmation of the existence of data concerning them, to rectify or update them, to delete them or to object for legitimate reasons to their processing, by submitting a specific request to the data controller via ordinary email at the address nemaboutiquestudio@gmail.com or certified email at the address hirene@pec.it.
Response times for exercising rights
The deadline for the response to the data subject by the Data Controller is, for all rights (including the right of access), 1 month, extendable up to 3 months in cases of particular complexity; the controller must still provide feedback to the data subject within 1 month of the request, even in the case of a denial. In the event of a data breach, the Data Controller must implement two different actions:
• notification of the breach to the supervisory authority (privacy guarantor) within 72 hours of the event
• notification to the data subject (without undue delay).
Withdrawal of consent to processing
For reasons related to the particular situation of the Data Subject, they may object at any time to the processing of their personal data if it is based on legitimate interest or if it occurs for commercial promotion activities, by sending the request to the Data Controller via email.
The Data Subject has the right to the deletion of their personal data if there is no overriding legitimate reason of the Data Controller compared to the one that gave rise to the request, and in any case, if the Data Subject has objected to the processing for commercial promotion activities.
If an interested party wants to exercise one of these rights, they simply need to send us an email. There are no costs to access your information or exercise your rights; however, there may be a reasonable fee if the request is unfounded or excessive; alternatively, we may refuse to fulfill the request. We may also request specific information from individuals making requests to confirm their identity and ensure that the rights are exercised by the legitimate holders.
Without prejudice to any other action in administrative or judicial proceedings, the Data Subject may lodge a complaint with the supervisory authority competent in the Italian territory (Data Protection Authority) or with the authority that performs its tasks and exercises its powers in the Member State where the GDPR violation occurred.
For any further information, you can contact us using the references listed in the table:
Data Controller Name | IRENE MAZZAI |
VAT Number | 04792750236 |
Registered Office | Via verga, Castelnuovo del garda |
Operational Headquarters | Via del Risorgimento, 37 Verona |
nemaboutiquestudio@gmail.com | |
Certified Email (Pec) | hirene@pec.it |
Data Processor | Mazzai Irene |
Phone Number | +39 3408001843 |
Below is the link to consult the entire European privacy regulation (GDPR) in Italian Regolamento europeo sulla privacy 679/2016
And the link of Legislative Decree No. 196/2003
COOKIES POLICY
This cookie policy is limited to this Site and in particular to its home page, blog section, and shop section, and is formulated taking into account the provisions published in the Official Gazette no. 126 of June 3, 2014, by the Privacy Guarantor concerning the identification of simplified methods for information and obtaining consent for the use of cookies - May 8, 2014, in implementation of directive 2009/136 which amended the "e-Privacy" directive (2002/58/EC).
Information sources on cookie policy
http://www.garanteprivacy.it/web/guest/home/docweb/-/docweb-display/docweb/3118884
http://www.garanteprivacy.it/web/guest/home/docweb/-/docweb-display/docweb/3585077
http://www.garanteprivacy.it/web/guest/home/docweb/-/docweb-display/docweb/2142939
http://www.garanteprivacy.it/web/guest/home/docweb/-/docweb-display/docweb/4006878
http://www.garanteprivacy.it/web/guest/home/docweb/-/docweb-display/docweb/4020961
A. What are cookies?
Cookies are text files that the sites visited by the user send to their terminal (usually to the browser) where they are stored to be transmitted back to the same sites on the next visit by the same user.
Their operation is entirely dependent on the browser the user is using and can be enabled or disabled by the user.
The cookies we use on this site are used to make your browsing work more efficiently and improve your online experience.
B. What cookies are used on this Site?
Within our Site, we use two distinct types of cookies: technical and analytics.
1. Technical cookies
These are cookies that are necessary for navigation or to provide a service requested by the user. They are not used for additional purposes and are normally installed directly by the website owner.
Without the use of such cookies, some operations could not be performed or would be more complex and/or less secure, such as home banking activities, for which cookies, which allow the user to be identified and maintained within the session, are essential.
Among the technical cookies, session cookies are used to ensure normal navigation and use of the site; their use is strictly limited to the transmission of session identifiers (consisting of random numbers generated by the server) necessary to allow safe and efficient exploration of the Site, and functionality cookies used to allow the User to navigate the Site according to a series of selected criteria (such as the selected language) in order to improve the service provided to the same.
2. Analytics cookies
Analytical cookies, such as those from Google Analytics, are used to monitor the use of the site by users for the purpose of optimizing it by the site owner, who can collect aggregated information on the number of users and how they visit the site. They can be assimilated to technical cookies when they are created and used directly by the first-party site (without, therefore, the intervention of third parties).
This site may use Google Analytics, a web analysis service provided by Google, Inc. ("Google"). Google Analytics uses cookies to collect and anonymously analyze information on the usage behaviors of this Site by Users (including the IP address). This information is transmitted to Google, which processes it to compile reports for the operators of this Site regarding User activities on the website itself.
This Site does not use (and does not allow third parties to use) Google's analysis tool to monitor or collect Users' personally identifiable information.
Google does not associate the IP address of Users with any other data held by Google nor does it attempt to link an IP address with the identity of a computer User. Google may also transfer this information to third parties where required by law or where such third parties process the aforementioned information on behalf of Google.
By using the services offered on this Site, the User consents to the processing of their data by Google for the methods and purposes indicated above.
The User always has the option to set their browser in such a way as to disable the aforementioned cookies through the options available in their internet browsing software according to the instructions provided by the respective providers.
To disable analytical cookies and prevent Google Analytics from collecting data on the Site's navigation, the User can always download the browser add-on for disabling Google Analytics: https://tools.google.com/dlpage/gaoptout .
For greater protection of the user/customer, however, the tracking of Google Analytics has been anonymized in the site's code using the "set" function ('set', 'anonymizeIp', true);.
To consult the privacy policy of Google and Google Analytics, please refer to the following links:
https://support.google.com/analytics/answer/9019185?hl=en#zippy=%2Cin-this-article
https://policies.google.com/privacy?hl=it
The above also applies if participating in the online questionnaire (feedback) hosted on the Google Forms service (google.com/forms).
It should also be noted that this site does not use profiling cookies, which are those cookies used to track the user's navigation on the web and create profiles on their tastes, habits, choices, etc.
With these cookies, advertising messages in line with the preferences already expressed by the user during online browsing can be transmitted to the user's terminal.
In the absence of profiling cookies, explicit consent is not required and the related information does not need to be provided via a banner.
This site does not use so-called "third-party" cookies, which are instead set by a website different from the one the user is visiting. This is because each site may contain elements (images, maps, sounds, specific links to web pages of other domains, etc.) that reside on servers different from that of the visited site.
The Privacy Guarantor specifies that the information does not apply to services provided by third parties, and this site has no control over their cookies, nor over their respective policies for processing the personal data of users/visitors, entirely managed by the third parties. As a result, information on the use of cookies and their purposes, as well as more generally on the purposes and methods of processing the personal data of users/visitors, is provided directly by the third parties in their respective privacy policies or cookie policies.
This site, in this regard, contains icons to access the social networks Instagram and WhatsApp Business.
In this case, there is no same obligation of information and consent as prescribed for profiling cookies.
The collection and use of personal information by such third parties are therefore governed by their respective privacy policies, to which please refer:
- Instagram:https://instagram.com/about/legal/privacy/; https://help.instagram.com/155833707900388/
- Google: https://www.google.com/policies/privacy/
- Sharethis: https://www.sharethis.com/privacy/
- whastapp business: https://faq.whatsapp.com/1148840052398648
This company reserves the right to update this information at any time; the User/customer agrees to periodically visit this section in order to view any changes.
© IRENE MAZZAI 2023 - Privacy and Cookies Policy.