Privacy policy
INFORMATION FOR THE PROCESSING OF PERSONAL DATA
AT SENSI OF ART. 13 OF EU REGULATION NO. 679/2016
MASSI STOCK, in its capacity as "Controller" of the processing of personal data, to the sensi and for the purposes of the European Regulation (EU) 279/2016 on the protection of personal data (hereinafter referred to as GDPR) in relation to the management of personal data entered on the website by the user (hereinafter referred to as "Data Subject") establishes the following:
this Privacy Policy explains how the Data Controller collects, uses, shares and processes your Personal Data when you use or access this at the Website www.massistock.com or to use any of our services, through communication platforms and any other related services we have (collectively the "Services").
Data Controller:
MASSI STOCK S.R.L.
Via Padre Leone Dehon, 71-73 zip code 76123 Andria (BT) ITALY
VAT number 07573210726
Tel: 0883 1951543
Email: massistock@gmail.com ; Pec: massistocksrl@pec.co.uk
- Cookie
Please refer to 'specific information found in the Privacy section of the site. (insert cookies link)
- Type of data collected
The data collected by this site are: biographical data - name - contact data (address, telephone number, e-mail) sex and age, payment data; Absolutely no sensitive data are collected.
Unless otherwise specified, this Web Site processes all payments by credit card, bank transfer or other means through external payment service providers. In general, and unless otherwise specified, Users are requested to provide payment details and personal information directly to such payment service providers.
This Web Site is not involved in the collection and processing of such information: instead, you will only receive notification from the payment service provider in question about your payment.
The payment providers are: Shopify payments, Stripe, Paypal, wire transfer, Postepay. See the privacy policy of the individual payment processors offering the service.
Regarding the social channels Facebook, Instagram, Whatsapp please refer to the privacy policy of the managers of the app.
- Purposes of processing
To carry out the request for contact with the company, online sales and/or any other related services (returns, exchanges, etc.) made through the site www.massistock.com in the various dedicated sections: contact, account creation and user profiling, sales and related services.
The Personal Data collected to finalize the payment may be those related to the credit card, bank account used for the transfer or other payment instruments provided. The Payment Data collected by this Web Site depends on the payment system used
- Legal Basis
The legal basis of the processing is the execution of pre-contractual and contractual measures, at the request of the user / interested party expressed by sending the question / contact to obtain information of various kinds to MASSI STOCK SRL. The provision of data is not mandatory ma necessary, since, without it, it will not be possible to send answers to the user's / interested party's questions.
The consenso explicit is required for marketing and profiling activities;
.
- Data retention
Processing may be carried out on paper and also with the help of electronic means, in a manner suitable to ensure the security and confidentiality six data.
The data will be kept for the time strictly necessary to respond to requests coming through the contact on the company website and, in the case of registration to the various services until the cancellation of the registration or/and revocation of the consenso There where it is required. In addition, the Controller may retain the data to fulfill legal obligations or to protect its interests before the competent authorities.
- Location
The Data are processed at the Controller's operational offices and at any other place where the parties involved in the processing are located. For more information, please contact the Data Controller.
The User's Personal Data may be transferred to a country other than the country where the User is located. To obtain more information about the location of the processing, the User may refer to the section on Personal Data processing details.
L'User has the right to obtain information regarding the legal basis for the transfer of Data outside the European Union or to an international organization under public international law or consisting of two or more countries, such as the UN, as well as regarding the security measures taken by the Data Controller to protect the Data.
Should any of the transfers just described take place, the User may refer to the respective sections of this document or request information from the Data Controller by contacting it at the contact details given at the beginning.
|
Purpose. |
Data |
Legal basis |
Storage time |
|
User registration and profiling |
Biographical data - name - contact data (address, phone number, e-mail) gender and age; |
processing is necessary for the performance of a contract with the User and/or the execution of pre-contractual measures; |
Until revocation of registration if it occurs earlier. |
|
Profiling |
Consenso |
Until revocation of the consenso |
|
|
Purchases |
Master data - name - contact information (address, phone number) and payment information; |
Contract execution |
In compliance with the terms of the law and/or for a time necessary for the protection of interests before the competent authority. |
|
Marketing |
Email address |
Consenso |
Until the revocation of the consenso |
|
Customer Support |
Phone number, e-mail address |
Execution of pre-contractual and contractual measures |
In compliance with the terms of the law |
- Data recipients
Personal data will be processed by parties specifically appointed by the Data Controller, as external data processors (couriers to make deliveries, professionals such as accountants to fulfill legal obligations etc. ec.) and/or anyone acting under the authority of the Data Controller and/or external data processors, employees, collaborators, etc, these subjects will process the data of the interested party only when necessary in relation to the purposes of the conferment and only within the scope of the performance of the tasks assigned to them by the Owner/External Manager, undertaking to process only the data necessary for the performance of such tasks and to carry out only the operations necessary for the performance of such tasks. Payment data is handled by companies that offer this service.
The data subject's personal data will not be disclosed to unspecified third parties and/or disseminated. The MASSI STOCK S.R.L. does not make use of the DPO.
- Rights of the data subject
Articles 15- 22 of EU Regulation No. 679/2016 list the rights that the data subject is entitled to exercise at any time:
- request confirmation of the existence or non-existence of his/her personal data;
- obtain information about the purposes of the processing, the categories of personal data, the recipients or categories of recipients to whom the personal data have been or will be disclosed and, when possible, the storage period;
- obtain rectification and erasure of data;
- obtain the restriction of processing;
- obtain portability of data, i.e., receive them from a data controller, in a structured, commonly used, machine-readable format, and transmit them to another data controller without hindrance;
- To object to the processing at any time and also in the case of processing for direct marketing purposes;
- object to automated decision-making related to natural persons, including profiling.
- to request from the data controller access to personal data and the rectification or erasure thereof or the restriction of processing concerning him or her or to object to its processing, as well as the right to data portability;
- revoke the consenso data at any time without prejudice to the lawfulness of the processing based on the consenso provided before the revocation;
- Right to file a complaint with the Data Protection Authority,
by following the procedures and directions published on the official website of the Authority www.garanteprivacy.it.
- Ways of exercising rights
L'interested party may at any time exercise rights by sending:
a registered letter with return receipt to MASSI STOCK SRL Via Padre Leone Dehon, 71-73 CAP 76123 Andria (BT) ITALY
or to the e-mail address: massistock@gmail.com;
Definitions and legal references
Personal Data (or Data)
Personal data is any information that, directly or indirectly, including in connection with any other information, including a personal identification number, makes a natural person identified or identifiable.
Usage Data
This is the information collected automatically through this Web Site (including by third party applications integrated into this Web Site), including: the IP addresses or domain names of the computers used by the User who connects with this Web Site, URI notation addresses (Uniform Resource Identifier), the time of the request, the method used in forwarding the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response from the server (successful, error, etc..) the country of origin, the characteristics of the browser and operating system used by the visitor, the various temporal connotations of the visit (e.g. the length of time spent on each page) and the details of the itinerary followed within the Application, with particular reference to the sequence of pages consulted, the parameters relating to the User's operating system and computer environment.
User
L'individual who uses this Web Site which, except where otherwise specified, coincides with the Data Subject.
Interested Party
The natural person to whom the Personal Data refers.
Data Controller (or Processor)
The natural person, legal entity, public administration and any other entity that processes Personal Data on behalf of the Controller, as set out in this privacy policy.
Data Controller (or Controller)
The natural or legal person, public authority, service or other body which, individually or jointly with others, determines the purposes and means of the processing of personal data and the means adopted, including the security measures relating to the operation and use of this Web Site. The Data Controller, unless otherwise specified, is the owner of this Web Site.
This Web Site (or this Application)
The hardware or software tool by which Users' Personal Data are collected and processed.
Service
The Service provided by this Web Site as defined in the relevant terms (if any) on this site/application.
Cookie
Small portion of data stored within the User's device.
Legal References.
This privacy policy is written on the basis of multiple legislative orders, including Articles 13 and 14 of Regulation (EU) 2016/679.
Unless otherwise stated, this privacy policy covers this Website only.