PRIVACY POLICY AND PERSONAL DATA PROCESSING NOTICE
This Notice aims to describe how the website http://mate-presse.com is managed with regard to the processing of the personal data of the users/customers who consult it and use its services.
1. Data Controller
The Data Controller is MA.TE SRL, with registered office at Via Unità d’Italia, 28 – 24033 Calusco d’Adda (BG) – IT.
2. Types of Data Processed
- Identification and contact data: First name, surname, residence/shipping address, email address, telephone number, tax code/VAT number provided during registration or purchase.
- Browsing data: IP addresses, system logs, browser type, parameters of the device used to connect to the website.
- Purchase data: Information relating to purchased products, payment methods used and transaction history.
- Cookies and similar technologies: (Please refer to the specific Cookie Policy on the website for full details).
3. Purposes of Processing and Legal Basis
Data processing is carried out lawfully and fairly for the following specific purposes:
| Purpose of Processing | Legal Basis |
|---|---|
| Performance of the contract: Website registration, management and shipping of purchase orders, and provision of customer support. | Contractual necessity (Art. 6.1.b GDPR) |
| Legal obligations: Administrative, accounting and tax fulfilments arising from online sales activities. | Legal obligation (Art. 6.1.c GDPR) |
| Direct marketing: Sending newsletters, advertising material and commercial communications by email, post or telephone. | Explicit consent (Art. 6.1.a GDPR) |
| Profiling: Analysis of the user’s preferences and purchasing habits to personalise and improve the commercial offering. | Explicit consent (Art. 6.1.a GDPR) |
| Security and Fraud Prevention: Technical protection of the website, prevention of abuse and monitoring of any unlawful activities. | Legitimate interest (Art. 6.1.f GDPR) |
4. Nature of Data Provision
The provision of data for the purposes of Performance of the contract and for the fulfilment of Legal obligations is mandatory. Any refusal to provide such data will make it impossible to proceed with registration or to complete the purchase on the website.
The provision of data for Marketing and Profiling purposes is instead entirely optional. The user has the right to refuse consent at any time without this in any way affecting the ability to browse the website or purchase products.
5. Processing Methods and Security
Processing is carried out using IT and electronic tools, with logic strictly related to the stated purposes. MA.TE SRL adopts adequate technical and organisational measures to ensure the security and confidentiality of the data, preventing unauthorised access, disclosure, alteration or unlawful destruction.
All sensitive transactions and communications on the website take place through a secure connection (HTTPS/SSL protocol) in order to prevent the interception of data by third parties.
6. Data Recipients
Personal data will in no case be subject to public disclosure, but may be communicated to external parties acting on behalf of the Controller:
- Authorised internal staff of MA.TE SRL (duly appointed and instructed persons).
- External Data Processors: IT service providers, web hosting, marketing agencies and legal and tax consultants.
- Independent third-party controllers: Shipping companies, express couriers, banking institutions and payment service providers.
- Competent public authorities for the fulfilment of regulatory obligations.
7. Transfer of Data Abroad
The data collected is stored on servers located within the European Economic Area (EEA). Should it become necessary to transfer data to non-EU countries (e.g. for the use of specific cloud software), MA.TE SRL guarantees that such transfer will take place in strict compliance with the Standard Contractual Clauses approved by the European Commission or in the presence of a formal adequacy decision.
8. Data Retention Period
- Contractual, accounting and tax data: Retained for the entire duration of the contractual relationship and for the following 10 years from its termination, as provided for by the legal limitation periods and the tax obligations in force.
- Data processed for Marketing and Profiling purposes: Retained until any withdrawal of consent by the data subject or, in any case, for a maximum period of 24 months (marketing) and 12 months (profiling) from the last active interaction, subject to any different provisions prescribed by the Data Protection Authority.
9. Rights of the Data Subject
In accordance with the provisions of Articles 15 et seq. of the GDPR, the user has the right at any time to:
- Access: Obtain confirmation from the Controller as to whether or not personal data is being processed and access it.
- Rectification: Request the immediate correction of inaccurate data or the integration of incomplete data.
- Erasure (Right to be Forgotten): Request the erasure of data if it is no longer necessary for the purposes for which it was collected, or if processing has become unlawful.
- Restriction: Obtain the temporary blocking of processing in certain cases provided for by law.
- Portability: Receive your own data in a structured, machine-readable format, in order to transfer it without hindrance to another data controller.
- Objection: Object at any time, for reasons related to your particular situation, to the processing of data, including profiling.
- Withdrawal of consent: Withdraw at any time the consent previously given, without this in any way affecting the lawfulness of the processing based on the consent given before the withdrawal.
To exercise these rights, the data subject may send a written communication by registered letter with return receipt to the Controller’s office, or by email to the address specified in point 1.
10. Right to Lodge a Complaint
If the user believes that the processing of their personal data takes place in breach of the provisions of the GDPR, they have the right to lodge a formal complaint with the Italian Data Protection Authority (www.garanteprivacy.it), or to bring the matter before the appropriate judicial bodies.