Privacy Policy

Pursuant to and for the purposes of the provisions of art. 13 of European Regulation 2016/679 regarding the protection of personal data (“GDPR”) and national privacy legislation (hereinafter: “Regulation”), we inform you that your Personal Data will be processed using electronic tools, manual tools, and Social Networks, in Italy.

This policy, drafted on the basis of the principle of transparency and all elements required by the GDPR, is divided into individual sections, each dealing with a specific topic to make reading quicker, easier, and readily understandable (hereinafter the “Policy”).

MDM Srl, with registered office in Viale Mediterraneo snc, 74023 Grottaglie (TA), Italy (hereinafter the “Company”) is constantly committed to protecting the online privacy of its users.

Source of Personal Data and Data Controller

 

This document describes the general methods for processing the personal data of site users and cookies, and how your personal information is managed when you use our website www.zerbini.shop (hereinafter “Site”).

The information and data provided by you or otherwise acquired during the use of the Site:

  • access to the reserved area

  • the newsletter

  • information request forms

(hereinafter “Services”), will be processed in compliance with the provisions of the Regulation and the obligations of confidentiality that inspire the Company’s activity.

The Data Controller (hereinafter “Controller”) is MDM Srl, with registered office in Viale Mediterraneo snc, 74023 Grottaglie (TA), to whom you can write for any information regarding the processing of personal data.

According to the rules of the Regulation, the processing carried out by the Company will be based on the principles of lawfulness, fairness, transparency, purpose limitation and storage, data minimization, accuracy, integrity, and confidentiality.

This policy is provided only for this Site and not for other websites that may be consulted by the user through links. Please refer to any specific sections of the Site where you can find specific policies and any requests for consent for individual processing operations.

Types of Data

 

Following browsing of the Site, we inform you that the Company will process personal data (art. 4(1) of the Regulation) hereinafter referred to only as “Personal Data”.

In particular, the Personal Data processed through the Site are the following:

a) Navigation Data

 

The computer systems and software procedures used to operate the Site acquire, during their normal operation, some Personal Data whose transmission is implicit in the use of Internet communication protocols.

This is information that is not collected to be associated with identified data subjects, but which by its very nature could, through processing and association with data held by third parties, allow users to be identified.

This category of data includes IP addresses or domain names of the computers used by users connecting to the Site, the URI (Uniform Resource Identifier) addresses of the requested resources, the time of the request, the method used in submitting the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters relating to the operating system and the user’s IT environment.

This data is used only to obtain anonymous statistical information on the use of the Site and to check its correct functioning (see the paragraph on cookies below), to identify anomalies and/or abuses, and is deleted immediately after processing. The data could be used by the competent authorities to ascertain responsibility in case of hypothetical computer crimes against the site.

b) Data Provided Voluntarily by the Data Subject

 

Apart from what is specified for navigation data, the user is free to provide personal data listed in any request forms present on the website (e.g., to activate newsletters, request information, etc.). Failure to provide them may make it impossible to provide the service. In these cases, only the information necessary for the requested service will be requested (see the specific policies in detail).

c) Cookies

 

Access to the site may involve sending the user’s PC so-called “cookies”, i.e., files that allow information to be obtained on the pages visited in order to speed up the use of the various services.

Two types of cookies may be used on the site: ‘session cookies’ and ‘persistent cookies’. ‘Session cookies’ are temporary cookies that remain on the device until you leave the site. The ‘persistent cookie’ remains on your device for longer or until you manually delete it.

You can choose at any time to disable cookies by simply changing your browsing settings; however, we remind you that disabling cookies may slow down or prevent access to certain sections of the site. You can find more information in the cookie policy available on the site.

Purpose of Processing and Legal Bases

 

The processing of personal data that we intend to carry out, with your specific consent where necessary, has the following purposes:

a) Allow the provision of Site Services; b) Communication and/or sending (by e-mail, post, telephone contact, etc.), including automated methods, of commercial information and offers, advertising and promotional material on own services.

The legal basis for processing is the execution of pre-contractual measures adopted at the request of the data subject (art. 6(1)(b) of the Regulation) since the processing is necessary for the provision of the Service.

The provision of Personal Data for these purposes is optional but any failure to provide it would make it impossible to activate the Services provided by the Site.

In any case, you may revoke your consent, even partially, for example by consenting only to traditional contact methods.

Recipients of Personal Data

 

Your personal data will be processed exclusively by persons authorized by the Company to process Personal Data necessary to carry out activities strictly related to the provision of the Services, who have committed to confidentiality or have an adequate legal obligation of confidentiality (e.g., employees and system administrators).

Your Personal Data may be shared for the purposes mentioned above, with third parties, possibly assigned to the management of the Site, who typically act as Data Processors.

Your Personal Data may be communicated to Public Bodies or the Judicial Authority, where required by law or to prevent or suppress the commission of a crime and in any case to:

  • those who are legitimate recipients of communications provided for by law or regulations (such as, for example, Public Offices and Authorities);

  • those who are recipients of communications necessary in execution of the obligations deriving from the Service;

Minors

 

The Personal Data of minors under the age of 16 will not be processed by the Data Controller, unless authorized by the holder of parental responsibility.

Transfer of Data

 

Your Personal Data will be processed by the Controller within the territory of the European Union.

If, for technical and/or operational reasons, it is necessary to use subjects located outside the European Union, the Company ensures that the processing of your Personal Data by these Recipients takes place in compliance with the Regulation. Indeed, transfers can be based on an adequacy decision, on the Standard Contractual Clauses approved by the European Commission, or on another suitable legal basis.

In any case, you can request more details from the Data Controller if your Personal Data has been processed outside the European Union by requesting evidence of the specific guarantees adopted.

Storage Period

 

Your personal data will be kept for the period necessary to pursue the purposes related to point a) above.

Furthermore, should you decide to grant your optional consent relating to the marketing and/or profiling purposes referred to in point b), your data will be kept, unless consent is revoked, for a period not exceeding that necessary to achieve the purposes.

Withdrawal of Consent

 

You have the right to withdraw your consent given to the Controller at any time totally and/or partially without prejudicing the lawfulness of the Processing based on the consent given before the withdrawal.

To withdraw your consent, you can make the modification in the dedicated section, or contact the Controller at the addresses published in this policy.

Your Rights

 

We remind you that you may exercise your rights provided for by the GDPR and in particular obtain:

  • confirmation as to whether or not Personal Data concerning you is being processed and obtain access to the data and the following information (purpose of processing, categories of Personal Data, recipients and/or categories of recipients to whom the data has been and/or will be communicated, storage period);

  • the rectification of inaccurate Personal Data concerning you and/or the integration of incomplete Personal Data, also by providing a supplementary statement;

  • the erasure of Personal Data, in the cases provided for by the GDPR;

  • the restriction of processing in the cases provided for by the current Privacy Legislation;

  • the portability of the data concerning you, and in particular to request the Controller for the Personal Data concerning you and/or request the Controller to directly transmit your data to another data controller;

  • the right to object to processing at any time, on grounds relating to your particular situation, to the processing of Personal Data concerning you in full compliance with the current Privacy Legislation.

You can exercise your rights by contacting the email address assistenza@zerbini.shop attaching a copy of your identity document.

In any case, you will always have the right to lodge a complaint with the competent supervisory authority (Garante per la Protezione dei Dati Personali – Guarantor for the Protection of Personal Data), pursuant to art. 77 GDPR, if you believe that the processing of your Data is contrary to the current Privacy Legislation.

Changes

 

This Privacy Policy is effective from May 23, 2018.

The Company reserves the right to modify or simply update its content, in part or completely, also due to changes in applicable legislation.

The Company will inform you of such changes as soon as they are introduced and they will be binding as soon as they are published on the Site, and therefore invites you to regularly visit this section to take note of the most recent and updated version of the Privacy Policy so as to always be updated on the data collected and their use.

Cookie Policy