In accordance with art. 13 of D. Lgs. 196/2003 (after “Codice Privacy”) and art. 13 of UE regulation n. 2016/679 (after “GDPR 2016/679”), containing provisions to protect people and other subjects regarding the processing of personal data, we wish to inform you that the personal data you provide will be processed in compliance with the aforementioned legislation and the confidentiality obligations to which this is held MUD IS MOOD di Valerio Sirchia .
Titolare del trattamento
The Data Controller is Mud is Mood in the person of Mr. Valerio Sirchia President and Legal Representative of the Company, with registered office in Voc. Bassano 53, Castel dell’Aquila - Montecastrilli 05026 (VAT: 01673810550).
Purpose of the treatment
The Personal Data concerning you, communicated by you to the Company or collected through the network (in the latter case after verification of compliance with the conditions of lawfulness by third parties), are processed by the Company as part of its activity for the following promo-commercial purposes:
- Processing of purchase orders formulated through the Site and activities related to order management (providing e-commerce services, sales and after-sales customer assistance, communications with the customer on the status of the order, receiving your requests for information in relation to the products purchased, payment management, reporting, shipping and delivery);
- Sending commercial communications, with prior consent, on products and services of the Mud is Mood site and / or third parties, special offers, promotions and news, coupons, for carrying out market research, by means of automated systems (cd " marketing purposes ");
- Analysis of preferences and consumption habits and the processing of personal preferences and the interests of the Purchaser through automated systems and the transmission of personalized offers through the Site (so-called "profiling" purposes), subject to consent.
The Data Controller, through external managers, specifically designated pursuant to art. 28 of the GDPR, will carry out the necessary technical treatments to allow you to benefit from the services.
Methods of treatment and conservation
The treatment will be carried out in an automated and / or manual form, in compliance with the provisions of art. 32 of the GDPR 2016/679 and Annex B of Legislative Decree 196/2003 (articles. 33-36 of the Code) on security measures, by subjects specifically appointed and in compliance with the provisions of art. 29 GDPR 2016/679.
We point out that, in compliance with the principles of lawfulness, purpose limitation and data minimization, pursuant to art. 5 GDPR 2016/679, subject to your free and explicit consent expressed at the bottom of this information, your personal data will be kept for the period of time necessary for the achievement of the purposes for which they are collected and processed.
In the event of a purchase, we will keep your data for the purpose of fulfilling legal obligations and to assert and defend a right in court for the term of 10 years.
Once these retention times have elapsed, or once the cancellation has been made by you, the data no longer necessary will be removed.
Scope of communication and diffusion
The following may become aware of the personal data referred to in this information, as Data Processors or Persons in charge of the processing:
- Within Mud is Mood, qualified staff, each limited to their skills and duties and on the basis of the tasks assigned and the instructions given;
- Outside of Mud is Mood, third parties, also specifically designated as Data Processors or persons in charge of the processing - of which the Data Controller uses for various services and exclusively to carry out these services - each limited to their own skills and duties and on the basis of the tasks assigned and the instructions given.
Transfer of personal dataYour Personal Data are processed by the Company within the territory of the European Union and are not disclosed. If necessary, for technical or operational reasons, the Company reserves the right to transfer your Personal Data to countries outside the European Union for which there are "adequacy" decisions of the European Commission, or on the basis of adequate guarantees or of the specific derogations provided for by the Regulation.
Particular categories of personal data
Pursuant to articles 26 and 27 of Legislative Decree 196/2003 and articles 9 and 10 of EU Regulation no. 2016/679, you could give the data controller qualifying data as "particular categories of personal data", that is, data that reveal "racial or ethnic origin, political opinions, religious or philosophical beliefs, or belonging union, as well as genetic data, biometric data intended to uniquely identify a natural person, data relating to the health or sexual life or sexual orientation of the person ".
These categories of data may be processed only with your free and explicit consent, expressed in writing at the bottom of this information.
Rights of the interested party
We inform you that as an interested party you have the right to lodge a complaint with the Control Authority, the rights listed below, which you can assert by addressing a specific request to the Data Controller and / or to the data processor, as indicated in point 1. (the list can also be simplified to the articles of the Regulation only)
Art. 15-Right of access
The interested party has the right to obtain from the data controller the confirmation that a processing of personal data concerning him is in progress and in this case, to obtain access to personal data and information regarding the processing.
Art. 16 - Right to rectification
The interested party has the right to obtain from the data controller the correction of inaccurate personal data concerning him without undue delay. Taking into account the purposes of the processing, the interested party has the right to obtain the integration of incomplete personal data, also by providing an additional declaration.
Art. 17 - Right to erasure (right to be forgotten)
The interested party has the right to obtain from the data controller the cancellation of personal data concerning him without undue delay and the data controller has the obligation to cancel personal data without undue delay.
Art. 18 - Right to limit the treatment
The interested party has the right to obtain from the data controller the limitation of the processing when one of the following hypotheses occurs:
a) the interested party disputes the accuracy of personal data, for the period necessary for the data controller to verify the accuracy of such personal data;
b) the treatment is illegal and the interested party opposes the cancellation of personal data and instead requests that their use be limited;
c) although the data controller no longer needs it for processing purposes, personal data are necessary for the interested party to ascertain, exercise or defend a right in court;
d) the interested party has opposed the processing pursuant to Article 21, paragraph 1, pending verification of the possible prevalence of the legitimate reasons of the data controller with respect to those of the interested party.
Art. 20 - Right to data portability
The interested party has the right to receive in a structured format, commonly used and readable by automatic device, the personal data concerning him provided to a data controller and has the right to transmit these data to another data controller without impediments from part of the data controller to whom you provided them. In exercising his rights regarding data portability pursuant to paragraph 1, the interested party has the right to obtain the direct transmission of personal data from one data controller to another, if technically feasible.
Art. 21 - Right to object
The interested party has the right to object at any time, for reasons related to his particular situation, to the processing of personal data concerning him pursuant to Article 6, paragraph 1, letters e) of), including profiling on the basis of these provisions.
Art. 22 - Right not to be subjected to automated decision-making, including profiling
The interested party has the right not to be subjected to a decision based solely on automated processing, including profiling, which produces legal effects concerning him or which similarly significantly affects his person. You can exercise your rights with a written request sent to the Data Controller, to the postal address of the registered office or to the email address firstname.lastname@example.org .