Privacy

Privacy Policy

The purpose of this document (hereinafter “Privacy Policy”) is to inform Users about the personal data, understood as any information that allows the identification of a natural person (hereinafter “Personal Data”), collected by the website www.MercatiGenerali.com (hereinafter “Application”).

The Data Controller, as identified below, may modify or simply update all or part of this Policy by informing Users. Changes and updates will be binding as soon as they are published on the Application. The User is therefore invited to read the Privacy Policy each time they access the Application.

In the event of non-acceptance of the changes made to the Privacy Policy, the User is required to cease using this Application and may request the Data Controller to remove their Personal Data.

1. Personal Data collected by the Application

The Data Controller collects the following types of Personal Data:

1. Content and information provided voluntarily by the User

- Contact details and content: these are the Personal Data that the User voluntarily provides to the Application during its use, such as personal details, contact information, access credentials to the services and/or products provided, personal interests and preferences, and other personal content, etc.

- Personal Data collected from social media: Users may share data provided to social media with the Application. The User has the right to control the Personal Data that the Application can access through the privacy settings available on the social media in question. By associating accounts managed by social media with the Application and authorizing the Data Controller to access such Personal Data, the User consents to the acquisition, processing, and storage of said data in accordance with this Privacy Policy.

Failure by the User to provide Personal Data, for which there is a legal or contractual obligation, or if they constitute a necessary requirement for the use of the service or for the conclusion of the contract, will result in the impossibility for the Data Controller to provide its services in whole or in part.

The User who communicates to the Data Controller Personal Data of third parties is directly and exclusively responsible for their origin, collection, processing, communication, or dissemination.

1. Data and content acquired automatically during the use of the Application:

Technical data: the computer systems and software procedures used to operate this Application may acquire, during their normal operation, some Personal Data whose transmission is implicit in the use of internet communication protocols. This information is not collected to be associated with identified Users, but by its very nature, through processing and association with data held by third parties, could allow the identification of Users. This category includes IP addresses or domain names used by Users connecting to the Application, URI (Uniform Resource Identifier) notation addresses of the resources requested, the time of the request, the method used to submit the request to the server, the size of the file obtained, etc.

Usage data: Personal Data relating to the use of the Application by the User may also be collected, such as the pages visited, actions performed, and features and services used.

1. Personal Data collected through cookies or similar technologies:

The Application uses cookies, web beacons, unique identifiers, and other similar technologies to collect Personal Data about pages, links visited, and other actions performed when using our services. They are stored to be then retransmitted upon the same User's subsequent visit.

2. Purpose

The collected Personal Data may be used for the performance of contractual and pre-contractual obligations and for legal obligations, as well as for the following purposes:

External management of payments via credit card, bank transfer, or other instruments: to manage User payments through external platforms that acquire payment data without the Application owner having access.

Sending emails or newsletters and mailing list management: to contact the User with emails containing commercial and promotional information related to the Application.

User registration and authentication: to allow the User to register on the Application to access and be identified.

Archiving, hosting, and backend infrastructure management: to manage the technical infrastructure for storing User data.

Monitoring, analysis, and tracking of User behavior: to monitor and analyze how the User behaves on the Application.

Support and contact with the User: to respond to the User's requests and help them in case of problems.

User profiling: to group and analyze User characteristics or behaviors in an automated way and provide them with personalized services or messages.

Viewing content from external platforms: to allow the User to view and share content from social networks or other external platforms (e.g., YouTube, Facebook).

3. Processing methods

The processing of Personal Data is carried out using computer and/or telematic tools, with organizational methods and logic strictly related to the purposes indicated.

In some cases, parties involved in the Data Controller's organization (such as personnel management staff, commercial staff, system administrators, etc.) or external parties (such as IT companies, service providers, postal couriers, hosting providers, etc.) may also have access to Personal Data. These parties may be appointed as Data Processors by the Data Controller if necessary, and may access the Users' Personal Data whenever required, and will be contractually obliged to keep the Personal Data confidential.

The updated list of Data Processors can be requested via email at info@MercatiGenerali.com

4. Legal basis for processing

The processing of Personal Data relating to the User is based on the following legal grounds:

consent given by the User for one or more specific purposes;

processing is necessary for the performance of a contract with the User and/or for the performance of pre-contractual measures

processing is necessary to fulfill a legal obligation to which the Data Controller is subject

processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the Data Controller

processing is necessary for the pursuit of the legitimate interest of the Data Controller or third parties

processing is necessary for the pursuit of a vital interest of the Data Controller or third parties.

It is, in any case, always possible to request the Data Controller to clarify the legal basis of each processing operation at info@mercatigenerali.com

5. Place

Personal Data are processed at the Data Controller's operating offices and in any other place where the parties involved in the processing are located. For further information, contact the Data Controller at the following email address info@mercatigenerali.com or at the following postal address: Viale Europa 31, 26839 Zelo Buon Persico (LO)

Personal Data may be transferred to countries outside the EU: USA.

For such countries, an adequacy decision of the European Commission exists or, in the absence of such a decision, more information can be requested from the Data Controller regarding the appropriate safeguards adopted, as well as the means to obtain a copy of such Data or the exact place where they have been made available.

6. Security measures

The processing is carried out according to methods and with tools suitable to guarantee the security and confidentiality of Personal Data, as the Data Controller has adopted adequate technical and organizational measures that guarantee, and allow demonstrating, that the processing is carried out in compliance with the relevant legislation.

7. Data retention period

Personal Data will be kept for the period of time necessary to fulfill the purposes for which they were collected.

In particular, Personal Data will be kept for the entire duration of the contractual relationship, for the execution of the fulfillments inherent and consequent to it, for compliance with applicable legal and regulatory obligations, as well as for defense purposes of the Controller or third parties.

If the processing of Personal Data is based on the User's consent, the Data Controller may keep the Personal Data until the consent is revoked.

Personal Data may be kept for a longer period if necessary to comply with a legal obligation or by order of an authority.

All Personal Data will be deleted or kept in a form that does not allow the identification of the User within 30 days from the end of the retention period. Upon the expiry of this term, the right of access, cancellation, rectification, and the right to portability of Personal Data can no longer be exercised.

8. Automated decision-making processes

All collected Personal Data will not be subject to any automated decision-making process, including profiling, which may produce legal effects for the person or which may affect them in a significant way.

9. User rights

Users may exercise certain rights with reference to the Personal Data processed by the Data Controller. In particular, the User has the right to:

withdraw consent at any time;

object to the processing of their Personal Data;

access their Personal Data;

verify and request rectification;

obtain the restriction of processing;

obtain the cancellation of their Personal Data;

receive their Personal Data or have them transferred to another controller;

lodge a complaint with the Personal Data protection supervisory authority and/or take legal action.

To exercise their rights, Users may address a request to the contact details of the Data Controller indicated in this document. Requests are made free of charge and processed by the Data Controller as soon as possible, in any case within 30 days.

10. Data Controller

The Data Controller is Mercati Generali

Last update: 10/10/2019