Skip to main content

Who is the Data Controller?

The data controller is Macri’ Maryelisabeth , with headquarters at Via degli Emigrati, 35 Caulonia Marina – Reggio Calabria. , contactable by email: info@m17.store-pec: MACRIMARYELISABETH@PEC.STUDIOSARACO.IT

 

Foreword

Under the European Data Protection Regulation (GDPR), legal persons are not considered data subjects and therefore the European regulation does not apply to them. However, in the context of corporate data collection, if personal data referring to a natural person is included, that person will be considered a data subject under the GDPR, resulting in the applicability of the relevant legislation.

 

Treatments Performed Through the Site

1) Contact Us / Request Information
Processing of personal data enables users to send inquiries regarding our work and availability for reservations.

Legal Basis: User consent.
Period of data retention : Until the data subject objects.

 

2) Direct Marketing
Data will be processed for direct sales of Services, market research, sending communications and promotional, commercial and advertising material or inherent initiatives and events, through newsletters, e-mail, by telephone calls, paper mail and other informative material.

Legal basis: this processing is based on the consent freely given by the Data Subject pursuant to Art. 6(1)(A) of the GDPR.
Data retention period: until consent is revoked by the Data Subject.

 

3) Statistics
The Data will be processed to perform statistical analysis on aggregated and anonymous data to analyze the behavior of the Data Subject in order to improve the products and services provided by the Data Controller as well as to meet the Data Subject’s expectations.

Legal basis: this processing is based on the consent freely given by the Data Subject.
Data retention period: until consent is revoked by the Data Subject.

 

4) Profiling
Data will be processed for the analysis and evaluation of interests, habits, consumption choices, including the creation of profiles in order to be able to send personalized informative and promotional material about the Services/Products offered by the Data Controller.

Legal basis: this processing is based on the consent freely given by the Data Subject pursuant to Art. 6(1)(A) of the GDPR.
Data retention period: until consent is revoked by the Data Subject.

 

5) Satisfaction of the Interested Party
The Data will be processed for the purpose of sending Customer satisfaction surveys in order to improve the offer on the Owner’s Products and/or Services and without marketing purposes.

Legal basis: this processing is based on the legitimate interest of the Data Controller under Art. 6(F) and Recital no. 47 of the GDPR.
Period of data retention: until opposition by the Data Subject

 

6) Soft spam
The Data will be processed to enable the Data Controller to send by e-mail to the Interested Party commercial and promotional communications concerning Products and/or Services similar to the Products/Services being sold without the need for the express and prior consent of the Interested Party, as provided for in Art. 130, Paragraph 4, Privacy Code as amended by Leg. No. 101 of 2018, and provided that the Data Subject does not exercise the right to object.

Legal basis: this processing is based on the legitimate interest of the Data Controller under Art. 6(F) and Recital no. 47 of the GDPR.
Period of data retention: until the Data Subject objects.

 

7)Newsletters via MailPoet
Personal data will be processed to send monthly communications via a newsletter managed via MailPoet, containing relevant information regarding payment deadlines, signing of online contracts, and other relevant updates regarding services and contracts signed with us by our clients.

Legal basis: this processing is based on the consent freely given by the Data Subject pursuant to Art. 6(1)(A) of the GDPR.
Data retention period: until consent is revoked by the Data Subject.

 

Other Information

Providing data is optional, but if you refuse, you will not be able to proceed with sending the contact form or receive DEMs.

 

To whom will my data be disclosed?

In addition to the Owner, in some cases, they may have access to the Data:
(a) categories of specially trained appointees involved in the organization of the Website (administrative, sales, marketing, legal, system administrators);
b) external parties (such as third party technical service providers, hosting providers, IT companies, communication agencies) also appointed as Data Processors by the Data Controller ex art. 28 GDPR. An up-to-date list of Data Processors, if appointed, can always be obtained from the Data Controller;
(c) public or private entities that can access the Data in compliance with legal obligations;
(d) subjects who perform tasks that are ancillary and instrumental to the Holder’s activity;

 

Treatment times

As expressly stipulated in Art. 5, co. 1, letter e) of the GDPR, the Data is kept for the time necessary for the Processing of the same in connection with the performance of the service requested by the Data Subject, or required by the Purposes described above in this document. At the end of the retention period, the Personal Data will be deleted and therefore, the rights of access, deletion, rectification and portability of the Data can no longer be exercised.

 

Place of Storage and Transfer of Data

Data are processed at the Holder’s operational headquarters. For more information you can contact the Data Controller. Data may be processed by individuals and/or legal entities operating on behalf of the Data Controller and under specific contractual obligations and based in EU or non-EU member countries. In the event that Data is transferred outside the EEA, the Data Controller will take all appropriate contractual measures to ensure adequate protection of the Data.

 

Tools used to process personal data

1) Contact Form
By completing the Contact Form with their Data, the Data Subject consents to their use to respond to requests for information, or any other purpose indicated by the header of the form. Personal Data Collected through Contact Form:First Name and Last Name, Phone, Email, Municipality, Problems, General Information for Performing Services.

 

FormidableForms
Formidable Forms is a form creation and management service that allows this website to integrate such content within its pages.
Personal data collected through Formidable Forms include users’ email and name. Additional types of data may be collected as specified in the Privacy Policy of the service.

Place of Processing: Data collected through Formidable Forms may be stored and processed in the United States. Please refer to the service’s Privacy Policy for more information.

Privacy Policy of the Service

 

2) Address Management and Email Sending:
These services allow you to manage a database of email contacts, phone contacts or contacts of any other type, used to communicate with the User. These services may also allow for the collection of Data related to the date and time of the User’s viewing of messages, as well as the User’s interaction with them, such as information about clicks on links embedded in messages.

 

3) Newsletter
By registering for the newsletter, the Data Subject’s email address is automatically added to a list of contacts to whom email messages containing information, including information of a commercial and promotional nature, relating to this Web Site may be sent. The Data Subject’s email address may also be added to this list as a result of registering with this Site. The Interested Party can choose at any time to unsubscribe from the newsletter by clicking on a specific button they will find within the emails. After clicking the delete button, the Data Subject’s Data will be deleted immediately from the “email marketing” software. Personal Data Collected: Email, First Name, and Last Name.

This Web Site uses the newsletter service provided by:

MailPoet
MailPoet provides a newsletter platform that enables Data Controllers to reach out to their customers, understand how they interact with such communications and other content, and tailor marketing to their customers’ interests. The User can choose at any time to unsubscribe from the newsletter by clicking on a specific button they will find inside the emails. After clicking the delete button your Data will be deleted immediately from the software. Personal Data Collected: Email and Name.

Place of Processing: USA – Read the privacy policy

 

4) Security Measures Taken
This Web Site, to secure the time when Personal Data is entered, has an SSL certificate and uses the HTTPS protocol. With the use of this protocol, the transactions and data that are transmitted in the websites take place with the utmost security and the content of the communication is not read or manipulated in any way by third parties.

 

5)Statistics
Statistics services allow the Data Controller exclusively to monitor and analyze traffic data and are used to track User behavior.
This Web Site uses the following services:

a. Google Analytics (Google Ireland Limited)
Google Analytics is an analytics service provided by Google Ireland Limited. Google uses the Personal Data collected for the purpose of tracking and examining the use of this Website, compiling reports, and sharing them with other services developed by Google. Google may use Personal Data to contextualize and personalize ads in its ad network. Google may also transfer this information to third parties where required by law or where such third parties process this information on Google’s behalf. IP address anonymization is enabled on this site. The IP address transmitted by the browser for purposes related to Google Analytics will not be merged with other data already held by Google.
A browser add-on for disabling Google Analytics is made available by Google at the following link. Personal Data Collected: Cookies and Usage Data. Place of processing: Ireland –
Privacy Policy

b. Facebook (Facebook Ireland Ltd.) pixel conversion tracking.
Facebook conversion tracking (Facebook pixel) is a statistics service provided by Facebook. The Facebook pixel monitors conversions that can be attributed to Facebook ads. Personal Data Collected: Cookies; Usage Data. Place of processing: Ireland –
Privacy Policy
.

c. Google Search Console (Google Ireland Limited)
is an analytics service provided by Google Ireland Limited. Google uses the Personal Data collected for the purpose of tracking and examining the use of this Website, compiling reports, and sharing them with other services developed by Google. Google may use Personal Data to contextualize and personalize ads in its ad network. Google may also transfer this information to third parties where required by law or where such third parties process this information on Google’s behalf. Personal Data Collected: Cookies and Usage Data. Place of processing: Ireland –
Privacy Policy
.

 

Interaction with Social Networks

These services enable interactions with social networks or other external platforms directly from the pages of this Website. Interactions and information captured by this Website are in each case subject to the User’s privacy settings related to each social network. In the event that a social network interaction service is installed, it is possible that, even if Users do not use the service, it will collect traffic data related to the pages where it is installed.

a. Facebook (Facebook Ireland Ltd.)
Facebook buttons are interaction services with the social network Facebook, provided by Facebook Ireland Ltd. Personal Data Collected: Cookies and Usage Data. Place of processing: Ireland –
Privacy Policy

b. Instagram (Facebook Ireland Ltd.)
Instagram buttons are interaction services with the social network Instagram, provided by Facebook. Personal Data Collected: Cookies and Usage Data. Place of processing: Ireland –
Privacy Policy

c. LinkedIn (LinkedIn Ireland Unlimited Company)
LinkedIn buttons are interaction services with the LinkedIn social network, provided by LinkedIn Corporation. Personal Data Collected: Cookies and Usage Data. Place of processing: Ireland –
Privacy Policy

d. Telegram (Telegram UK Holdings Ltd)
Telegram buttons are communication service interaction services provided by Telegram. Personal Data Collected: Cookies and Usage Data. Place of processing: UK-
Privacy Policy

 

Remarketing and Retargeting

These services allow this Website to communicate, optimize, and serve advertisements based on the User’s past use of this Website. This activity is carried out through the tracking of Usage Data and the use of Cookies. This Web Site uses the following services:

a. Facebook Remarketing (Facebook Ireland Ltd)
Facebook Remarketing is a Remarketing and Behavioral Targeting service provided by Facebook, which links this Website’s activity with the Facebook advertising network. This Website makes use of the Facebook Pixel tool in order to measure conversions. Thanks to the Facebook Pixel, we can understand the actions people perform on the Website.
The Data you collect may be used for:

  • Make sure listings are shown to the right people;
  • Create audience groups for which to target advertisements;
  • Take advantage of the additional advertising tools of the platform you are advertising on

The information collected is anonymous to the operators of this Site and cannot be used to identify an individual user. However, the information is saved and analyzed by Facebook, which could link the action back to an individual profile and use this information for internal Facebook advertising purposes, as outlined by Facebook’s privacy policy. This will allow Facebook to show advertisements both on Facebook and on third-party sites. The Site Owner has no control over how this data is used.

For more information on how users can protect their privacy, please refer to the
Privacy Policy of Facebook
.

 

Changes to this Privacy Policy

The Data Controller reserves the right to make changes to this Privacy Policy at any time by giving notice to Users on this page. Therefore, please consult this page often, taking the date of last modification shown at the bottom as a reference.

In case of non-acceptance of the changes made to this Privacy Policy, the Data Subject must cease using this Website and may request the Data Controller to remove his/her Personal Data. Unless otherwise specified, the previous Privacy Policy will continue to apply to Personal Data collected up to that point.

The Owner is not responsible for updating all links viewable in this Privacy Policy, so whenever a link is not working and/or updated, Users acknowledge and agree that they should always refer to the document and/or section of the websites referred to by that link.

 

What are my rights and how can I exercise them?

The customer in his or her capacity as a data subject has the rights under Art. 15 ff. of the Regulations, namely:

  1. The interested party has the right to obtain confirmation of the existence or non-existence of personal data concerning him/her, even if not yet recorded, and its communication in an intelligible form.
  2. The data subject has the right to obtain the indication:
  3. A) of the origin of personal data;
  4. B) of the purposes and methods of processing;
  5. C) of the logic applied in case of processing carried out with the aid of electronic instruments;
  6. D) of the identification details of the owner, managers and representative;
  7. E) of the subjects or categories of subjects to whom the personal data may be communicated or who may become aware of them in their capacity as designated representative in the territory of the State, managers or appointees.
  8. The data subject has the right to obtain:
  9. A) updating, rectification or, when interested, supplementation of data;
  10. B) the deletion, transformation into anonymous form or blocking of data processed in violation of the law, including data whose retention is not necessary in relation to the purposes for which the data were collected or subsequently processed;
  11. (C) a statement that the transactions referred to in subparagraphs. (a) and (b) have been brought to the attention, also as regards their content, of those to whom the data have been communicated or disseminated, except where this proves impossible or involves the use of means manifestly disproportionate to the right protected.
  12. The data subject has the right to object, in whole or in part:
  13. A) for legitimate reasons to process personal data concerning him/her, even if relevant to the purpose of collection;
  14. B) to the processing of personal data concerning him or her for the pursuit of purposes not covered by Art. 2.

Also in accordance with Article 15 et seq. of the GDPR, you have the right to request at any time, access to your personal data, rectification or erasure of your personal data, restriction of processing in the cases provided for in Art. 18 of the GDPR, obtain in a structured, commonly used, machine-readable format the data concerning him or her in the cases provided for in Art. 20 of the GDPR. At any time, the user may revoke ex art. 7 of the GDPR the consent given; lodge a complaint with the competent supervisory authority ex art. 77 of the GDPR if he/she considers that the processing of his/her data is contrary to the legislation in force.

The user may make a request to object to the processing of his or her personal data pursuant to Article 21 of the GDPR in which to give evidence of the reasons justifying the objection: the Data Controller reserves the right to evaluate the request, which would not be accepted in case of the existence of compelling legitimate reasons to proceed with the processing that override the user’s interests, rights and freedoms.

 

How can you exercise your rights?

The interested party at any time may exercise the rights referred to in the preceding article by sending:

– a registered mail with return receipt to Macri’ Maryelisabeth , with headquarters at Via degli Emigrati, 35 Caulonia Marina – Reggio Calabria.
– an email to PEO info@m17.store and PEC addresses MACRIMARYELISABETH@PEC.STUDIOSARACO.IT

 

 

This privacy policy is updated to: March 2024.