Privacy Policy

Information on the processing of personal data

The undersigned Pubblimais di Mais Luca, with registered office in Via Michelangelo 8 - 10126 Turin (Italy) - VAT number 13002630013, as "Data Controller" informs you, pursuant to articles 13 and 14 of the European Regulation no. 679/2016 (hereinafter "EU Regulation"), that your data, when released or transmitted to us in any form or manner, will be processed as indicated below:

Object of the processing of personal data

The Data Controller informs you that the personal, identifying data (for example, name, surname, company name, address, telephone, e-mail, bank and/or payment details, etc.), hereinafter called "personal data" and also the data of "particular categories" as provided for in the art. 9 of the EU Regulation (for example data relating to health status, political, religious, sexual orientation) and all simply called "data", relating to you, acquired even verbally directly or through third parties in the past, as well as those that will be collected in the future, may be processed in full compliance with the EU Regulation. The Data Controller carries out the processing in a lawful manner specifically for the execution of a contract of which you are a party or for the execution of pre-contractual measures (e.g. preparation of an offer, etc.) requested by you (art. no. 6 of the EU Regulation). Data processing means any operation or set of operations concerning the collection, recording, organisation, conservation, consultation, processing, modification, selection, extraction, comparison, use, interconnection, blocking, communication, diffusion, destruction of the data themselves.

Legal basis and purpose of the processing of personal data

2A) without your express consent (art. 6 letter b), c), e) of the EU Regulation), for the following purposes:

fulfill pre-contractual, contractual and tax obligations deriving from any existing relationships with you;
fulfill the obligations established by law, by a regulation, by community legislation or by an order from the Authority (such as for example in the field of anti-money laundering);
exercise the rights of the Data Controller, for example the right of defense in court;
for management purposes (invoicing, registrations, document management relating to the proposed activity, etc.);
for statistical and quality control analyses;
for technical assistance.

We also inform you and in any case that your browsing data will be processed for purposes related to the implementation of the following obligations, relating to legislative or contractual obligations:

Technical and functional access to the Site, no data is retained after closing the browser;
Advanced navigation purpose or personalized content management;
Statistical and analysis purposes of navigation and users.

2B) Only with your specific and distinct consent (art. 7 of the EU Regulation), for the following purposes:

commercial and/or marketing and/or profiling, exclusively if we make use of them and inform you in advance with:
– sending via e-mail, post and/or sms and/or telephone contacts of newsletters, commercial communications and/or advertising material on products or services offered by the Data Controller and/or surveying the degree of satisfaction with the quality of what has been carried out on Your request;
sending commercial and/or promotional communications from third parties via e-mail, post and/or text message and/or telephone contacts.

Method of processing personal data

The processing of your personal data is carried out by means of the operations indicated in the art. 4 no. 2) of the EU Regulation and precisely: collection, recording, the organization, the structuring, the conservation, adaptation or the edit, extraction, the consultation, use, the communication by transmission, diffusion or any other form of making available, comparison or interconnection, limitation, cancellation or destruction, blocking. Your personal data is subjected to both paper and electronic and/or automated processing (in any case suitable to guarantee the security and confidentiality of the data).

Data retention times and other information

The Data Controller will process personal data for the time necessary to fulfill the aforementioned purposes and in any case no later than the legal deadlines from the termination of the relationship for the Purposes referred to in the existing relationship. With reference to personal data being processed for marketing and commercial purposes, the same will be kept in compliance with the principle of proportionality and in any case until the purposes of the processing have been achieved or until the specific consent from the party is revoked. part of the interested party. Specifically, the Data Controller will process the data for no longer than 5 years from the end of the relationship, after which it will be anonymized or destroyed.
The personal data you provide will be processed "lawfully, correctly and transparently", protecting your privacy and your rights.
The interested party undertakes not to insert or transmit to or from the Site or other platform any material:
that is intimidating, defamatory, obscene, indecent, seditious, offensive, pornographic, abusive, likely to incite racial hatred, discriminatory or discriminating, threatening, scandalous, inciting, blasphemous, violative of confidentiality obligations, invasive of privacy or which may in any way cause annoyance or damage; or which represents or encourages behavior that could be considered a form of crime, which could give rise to the liability of anyone, which is in any way contrary to the law, public order or morality or which infringes the rights of third parties anywhere in the world ; or which causes damage (including, without limitation, computer viruses, logic bombs, Trojan horses, worms, defective components, corrupted data or other software with harmful or damaging content). The User may not abuse the Site (including, without limitation, carrying out hacking activities).

Data retention times and other information

Without the need for express consent (art. 6 letter b) and c) of the EU Regulation), the Data Controller may communicate your data for the purposes referred to in the previous point 2.A) to supervisory bodies, judicial authorities , to insurance companies for the provision of insurance services, as well as to those subjects to whom communication is mandatory by law for the fulfillment of the purposes indicated above.
These subjects will process the data in their capacity as independent data controllers.
During and after browsing, your data may be communicated to third parties, in particular to:

Google: Advertising service, Advertising target, Analytics/Measurement, Content personalization, Optimization;
Google AdWords: Advertising service, Advertising target, Analytics/Measurement, Content personalization, Optimization;
Google Analytics: Analytics/Measurement, Content Personalization, Optimization
Wix SEO: Analytics/Measurement, Content Personalization, Optimization

Your information will not be disseminated.

Data transfer

Personal data is stored on devices located at the headquarters of the Data Controller or at providers within the European Union. In any case, it is understood that the Data Controller, if necessary, will have the right to move the data also to non-EU countries. In this case, the Data Controller hereby ensures that the transfer of non-EU data will take place in compliance with the applicable legal provisions, subject to the stipulation of the contractual clauses and standard checks required by the European Commission.
Both with regard to the data present on their devices and for any data present at providers, the Data Controller has implemented adequate technical and organizational measures to guarantee an adequate level of security, in full compliance with what is indicated in the art. 32 of the EU Regulation.
Browsing: your browsing data may also be transferred, limited to the purposes indicated above, to the following states: – EU countries, – United States of America.

Nature of providing data and consequences of refusing to respond

The provision of data for the purposes referred to in the previous point 2.A) is mandatory. In their absence, we will not be able to guarantee the Services as indicated in 2.A).
The provision of data for the purposes referred to in point 2.B) above is optional. You can therefore decide not to provide any data or to subsequently deny the possibility of processing data already provided: in this case, you will not be able to receive newsletters, commercial communications and advertising material and/or anything else relating to the Services offered by the Data Controller.
You will however continue to be entitled to the Services referred to in point 2.A).

Rights of the interested party

In your capacity as an interested party, you have the rights referred to in the art. 15 of the EU Regulation reported below and precisely:

has the right to obtain confirmation from the Data Controller as to whether or not personal data concerning him is being processed and, in this case, to obtain access to the personal data and the following information:
a) the purposes of the processing;
b) the categories of personal data in question;
c) ) the recipients or categories of recipients to whom the personal data have been or will be communicated, in particular if recipients are from third countries or international organizations;
d) when possible, the expected retention period of personal data or, if this is not possible, the criteria used to determine this period;
e) the existence of the right of the interested party to ask the Data Controller to rectify or delete personal data or to limit the processing of personal data concerning him or to oppose their processing;
f) the right to lodge a complaint with a supervisory authority (the Guarantor for the protection of personal data);
g) if the data are not collected from the interested party, all available information on their origin;
h) the existence of an automated decision-making process, including profiling pursuant to art. 22, paragraphs 1 and 4 of the EU Regulation, and, at least in such cases, significant information on the logic used, as well as the importance and expected consequences of such processing for the interested party.
If your personal data are transferred to a third country or to an international organisation, you have the right to be informed of the existence of adequate guarantees pursuant to art. 46 of the EU Regulation relating to the transfer.
The Data Controller will provide you with a copy of your personal data being processed if you request it. If you request further copies, the Data Controller may charge you a reasonable fee based on administrative costs. If you submit your request by electronic means, and unless you indicate otherwise, the information will be provided to you in a commonly used electronic format.
The right to obtain a copy referred to in paragraph 3 must not adversely affect the rights and freedoms of others. Furthermore, where applicable, you can enjoy the rights referred to in articles 16 to 22 of the EU Regulation and specifically you have:

the right to rectification of personal data;
the right to be forgotten (right to erasure);
the right to limit processing;
the right to data portability;
the right to object;
the right to complain to the Guarantor Authority.

You also have the right to revoke any consent already given at any time without prejudice to the lawfulness of the processing based on the consent given before the revocation.