Information on the processing of personal data
The data controller is Mezcal s.r.l with registered office in via Tintoretto 10, 20093, Cologno Monzese
Place of data processing
The processing operations connected to the web services of this site take place at the aforementioned premises and are carried out only by personnel in charge of processing, or by persons in charge of occasional maintenance and secretarial operations.
Types of data processed
To proceed with the purchase and receive the product, you will be asked to provide the following data: name, surname, e-mail, address, method of payment, tax code.
Purposes of data processing
Your personal data will be processed only for the following purposes
- to proceed with the purchase;
- to receive the product purchased;
- for related services such as customer care and registration to the reserved area;
- for navigation of the site and processing of statistics in anonymous form in relation to data acquired from the user’s browsing experience;
fulfilment of administrative and legal obligations connected with our activity;
- technical information relating to navigation (where collected through acquisition, by way of example, of the IP resource or cookies);
- to receive updates on our company/activities/to receive promotions/etc..
The site makes use of technical/session cookies and also third-party cookies better described in the specific information notice found here (Extended Cookie Notice).
The legal basis for our data processing is:
Art. 6, para. 1 letter b) and letter f) of EU Reg. 2016/679 for the purposes from No. 1 to No. 6, for the purposes of numbers 6 and 7 Art. 6 letter a), i.e. consent which is always revocable.
Compulsory or optional nature of providing data, consequences of refusal and legal basis for processing
For purposes 1 to 6, the provision of your personal data is compulsory, because without it we will not be able to reply to you or offer you the requested service. Consent for the purposes of number 7 is optional. Failure to consent to stay updated on our initiatives means that we will not be able to send you e-mails with product news or other information about our company. We remind you that your consent is always revocable with the unsubscribe procedure at the bottom of each email.
The processing will be carried out both in paper form and with the aid of electronic and automated tools; in particular, computer, telephone, telematic, audiovisual, cable or satellite, magnetic, paper and manual tools may be used, among others, and stored on servers located within the European Union.
Your data will be processed under the authority of the Data Controller, only by persons specifically instructed, authorised and trained to process them in accordance with Art. 29 of EU Reg. 2016/679.
Appropriate security measures pursuant to Articles 5 and 32 of EU Regulation 2016/679 will be observed to prevent the loss of your data, unlawful or incorrect use, unauthorised access, unintentional deletion. Each processor is bound by the principles of lawfulness and confidentiality in processing.
Your personal data is processed in compliance with the applicable law and using appropriate security measures, in accordance with the legislation in force also pursuant to Articles 5 and 32 of EU Regulation 2016/679
To whom may we pass on your personal data?
Your personal data may be communicated within the EU, in full compliance with the provisions of EU Regulation 2016/679, to the following entities: to public authorities, where required by law or at their request; to external structures and/or companies that the Data Controller uses to perform related or instrumental activities; to external consultants. The Data Controller shall appoint the third parties who process data in its name and on its behalf as data processors pursuant to Article 28.
Duration of Processing
Without prejudice to legal obligations, the personal data we process will be kept for a fixed period of time, according to the requirements of judicial protection of rights and contractual needs and fulfilments, including those established by law, and in any case for as long as is necessary to process the report.
At any time, you may exercise your rights under Articles 15, 16, 17, 18, 20 and 21 of EU Regulation 2016/679, by sending us a written communication to the following address email@example.com. You may request: confirmation of the existence or non-existence of your personal data in our databases, verify their accuracy or request that they be updated, corrected, supplemented; access to, correction, deletion of your personal data or restriction of processing; deletion, transformation into anonymous form or blocking of your personal data if you believe they have been processed in violation of the law.
Privacy Guarantor Complaint
We would like to remind you that if you think your right has been infringed, you have the possibility of lodging a complaint with the Privacy Guarantor Authority, which can be contacted at garanteprivacy.it.