DATA PROCESSING CARRIED OUT BY LMA BRANDS S.R.L. FOR ONLINE SALE

Dear User, on this page we describe the ways in which LMA BRANDS S.r.l. manages your data that is collected through the website www.muschieri.com

The processing of your data will be based on principles of correctness, lawfulness and transparency and protecting your privacy and your rights in line with both the Privacy Code (Legislative Decree 196/2003) and the European Regulation n. 2016/679 (RGDPR)

The Data Controller
The Data Controller is LMA BRANDS srl via Banchina dell’Azoto 15 Venice (VE) Italy VAT number 04595500275 (distributor)

Data Protection Officer or DPO
Pursuant to and for the purposes of art. 37 of EU Reg. 2016/679 GDPR, the Data Protection Officer is Mr. Antonio Del Sesto who you can contact using the following contacts Tel +39 0771207600 mail: privacy@muschieri.com

Type of data collected:
With regard to the data collected, we inform you that the collection and processing concern the following types of data:

Personal data
In order to be able to proceed with our relationship and/or the services connected to it, we collect personal data such as: user identification data such as name, surname, tax code, place of residence, email address, bank details and in any case all those data essential to proceed to correctly fulfill the orders received, manage payments, deliveries, any return / refund requests, etc.

Navigation data
The computer systems and software procedures used to operate this website acquire, during their normal operation, some personal data whose transmission is implicit in the use of internet communication protocols. This is information that is not collected to be associated with identified interested parties, but which by their very nature could, through processing and association with data held by third parties, allow users to be identified. This category of data includes the IP addresses or domain names of the computers used by users who connect to the site, the addresses in URI (Uniform Resource Identifier) ​​notation of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error ..) and other parameters relating to the operating system and the user’s IT environment. These data are used for the sole purpose of obtaining anonymous statistical information on the use of the site and to check its correct functioning and are canceled immediately after processing. The data could be used to ascertain responsibility in the event of hypothetical computer crimes against the site.

Cookies
A cookie is a textual element that is inserted into the hard disk of a computer only after authorization. Cookies have the function of streamlining the analysis of web traffic or of signaling when a specific site is visited and allow web applications to send information to individual users. No user data is acquired by the site for this purpose. Cookies are not used to transmit information of a personal nature, nor are c.d. persistent cookies of any kind, or systems for tracking users.

Purpose of the processing and data retention time
The processing of data is aimed exclusively at providing the services connected to the web services of the muschieri.com site and in any case for purposes strictly connected to the performance of the service. The personal data provided by users who request services are used for the sole purpose of performing the service or provision requested and are not communicated to third parties unless the communication is imposed by legal obligations or is strictly necessary for the fulfillment of the requests.

The personal information we collect is mainly used for two purposes: to carry out your orders and to offer you products and services that are more in line with your needs, interests and expectations. The communications we send to Users may contain proposals defined by our employees who take care of preparing the offers and managing the catalogue.

The increase of information over time allows us to improve the quality of the service.

The data will be kept for the time necessary to perform the requested service and after the termination of the commercial relationship for the purpose of issuing certificates or documentation that may be requested, for the fulfillment of any obligations connected or deriving from the conclusion of the relationship itself and in any case for a period not exceeding 5 years from the aforementioned termination. For example, after termination of the relationship it may be necessary to keep your data to comply with legal obligations and/or fulfill tax obligations. The treatment takes place at the headquarters of LMA BRANDS S.r.l. and the contents are edited by employees and/or collaborators of the same who act under the supervision and control of LMA BRANDS S.r.l..

Periodically visiting our site and receiving our emails is a free and automatic way to help you shop better.

Security measures
The system is protected against access by any malicious people; our Company has set up and will continuously improve the security system for accessing and storing data. LMA BRANDS S.r.l. uses industry standards for the protection of personal information. The data will be processed by employees and/or professionals appointed by the latter, who will carry out the aforementioned activities under the direct supervision and responsibility of the legal representative.

Specific security measures are observed to prevent data loss, illicit or incorrect use and unauthorized access.

Mandatory treatment
We point out that the provision of data is not mandatory, however failure to provide it could lead to failure or partial performance of the requested service.

7. Data provided voluntarily by users

The optional, explicit and voluntary sending of e-mails to the addresses indicated on this site involves the subsequent acquisition of the sender’s address, necessary to respond to requests, as well as any other personal data included in the message. Brief information will be progressively reported or displayed on the pages of the site designed to offer particular services.

Communication and sharing of information with third parties
LMA BRANDS S.r.l. may have to make the data concerning you accessible to the Judicial Authorities as well as to qualified third parties only on the basis of precise legal duties and for the performance of the requested service, in particular LMA BRANDS S.r.l. may communicate the data you provide to third parties such as 1) Companies and/or subjects belonging to Alias ​​for the improvement of the quality of the services offered and for marketing purposes of our services and/or updated information on products and services; 2) natural and/or legal persons who, by virtue of contracts entered into with LMA BRANDS S.r.l. provide specific processing services or carry out related, instrumental or supportive activities to those performed by Alias.

For example, the data, for the purposes related to the execution of contractual obligations, may be communicated by us and/or transmitted to the following categories of subjects: – companies of the Group as parent companies, subsidiaries or affiliates;

– to our consultants, within the limits necessary for the performance of their duties at our Company;

– to our suppliers of goods and services (such as couriers) within the limits necessary for the performance of the activities covered by the negotiating and contractual relationships established with you; banking institutions for the management of receipts and payments;

– financial administrations and other companies or public bodies in fulfillment of regulatory obligations;

– companies and law firms for the protection of contractual rights;

– competent judicial and investigative authorities in the event of an express request by the Authorities themselves.

In all other cases, any communication can only take place upon explicit request and, in any case, exclusively for the purposes referred to in point 4 of this information.

No data collected through the web service is disclosed to third parties

Methods of data processing
Data processing may be carried out using manual, IT or telematic tools designed to memorize, manage and transmit the data organized according to logics related to the same stated purposes and, in any case, in order to guarantee the security and confidentiality of the data processed. The retention and archiving of personal data takes place through the use of electronic and IT tools.
Data retention takes place at the headquarters of the company LMA BRANDS S.r.l.

Rights of the interested parties.
Pursuant to art. 13 RGDPR, the User has the right to obtain the indication;

a) the origin of the personal data;

b) the purposes and methods of processing;

c) of the logic applied in case of treatment carried out with the aid of electronic instruments;

d) of the identification details of the owner, of the managers and of the designated representative;

e) of the subjects or categories of subjects to whom the personal data may be communicated or who can learn about them as managers or agents.

The User also has the right to obtain:

• confirmation of the existence or not of personal data concerning you, even if not yet registered, and their communication in an intelligible form;

• updating, rectification or, when interested, integration of data;

• their cancellation, transformation into anonymous form or blocking of data processed unlawfully, including data whose retention is unnecessary for the purposes for which the data were collected or subsequently processed;

• the limitation of the treatment or the opposition to their treatment;

• access to data in accordance with the provisions of art. 15 EU Reg. 2016/679 GDPR;

• data portability;

• the right to lodge a complaint with a supervisory authority;

• the right to cancellation (right to be forgotten) in accordance with the provisions of art. 17 of EU Reg. 2016/679 GDPR

11. Right to object
The User has the right to object, according to the provisions of art. 21 EU Reg 2016/679RGDP, in whole or in part:

1. at any time, for reasons related to your particular situation, to the processing of personal data concerning you, pursuant to art. 6 Par. 1 letters e) or f) of EU Reg. 2016/679 including profiling on the basis of these provisions;

2. to the processing of personal data concerning you for the purpose of sending advertising material or direct sales;

3. to processing for direct marketing purposes including profiling to the extent that it is connected to direct marketing.

4. To processing for scientific or historical research purposes or for statistical purposes unless the processing is necessary for the performance of a task in the public interest.

Methods of exercising rights
You can exercise your rights towards LMA BRANDS S.r.l. at any time. as Data Controller by sending a request to the following email address marco@muschieri.com and/or by writing to us at the addresses indicated in point 13.

13. Contacts
For any information, request, clarification, contact us at: LMA BRANDS S.r.l. at Banchina dell’Azoto 15 Venice (VE) Italy VAT IT04595500275 or send an email to: privacy@muschieri.com

DATA PROCESSING CARRIED OUT BY LMA BRANDS S.r.l. FOR MARKETING AND PROFILING PURPOSES
This information governs the processing of personal data through the use of the website available at the address https://muschieri.com/it/privacy-policy, LMA BRANDS S.r.l. at Banchina dell’Azoto 15 Venice (VE) Italy VAT number IT04595500275, email address privacy@muschieri.com, (hereinafter the “Owner”), in compliance with current data protection regulations, including, in particular , the EU Regulation 2016/679 (hereinafter “GDPR”).

Identity and contact details of the data controller
The data controller is LMA BRANDS S.r.l.

Contact details of the data protection officer
The Owner has appointed Antonio Del Sesto as data protection officer and can be contacted at the owner’s office as well as at the address privacy@muschieri.com

Processing methods
3.1 Cookies and environmental data

TECHNICAL COOKIES

Navigation, functional, session cookies: they allow the site to function properly. The use of c.d. session cookies (which are not stored permanently on the device of the interested party and are automatically deleted when the browser is closed) is strictly limited to the transmission of identifiers of the individual sessions, and are used in order to allow safe and efficient use of the site. They differ in:
– activities strictly necessary for the functioning: cookies used to save the User’s session and to carry out other activities strictly necessary for the functioning of the application, for example in relation to the distribution of traffic;

– saving preferences, optimization and statistics: cookies used to save browsing preferences and optimize the User’s browsing experience. These cookies include, for example, those used to set the language and currency or for the management of statistics by the site owner.

Statistical cookies: the site uses statistical cookies created directly by the data controller, such as
first party, or provided by third parties. In the latter case, suitable tools have been adopted to reduce their identifying power, including by masking significant portions of the IP addresses thus processed. Furthermore, the use of these third-party statistical cookies has been subject to contractual obligations which commit the third party to use them exclusively for the provision of the service, to keep them separately and not to “enrich” them or not to “cross” them with other information of which they have. With specific regard to Google Analytics cookies, the information obtainable from the cookies on the use of the site by users will be transmitted by the browser of the interested party to Google Inc., with registered office at 1600 Amphitheater Parkway, Mountain View, CA 94043, United States United, and stored on the company’s servers.
Google’s privacy policies, which we invite you to read, are available at the following address: http://www.google.com/intl/it/privacy/privacy-policy.html

The privacy information relating to Google Analytics services is available at the following address: http://www.google.com/intl/en/analytics/privacyoverview.html

Navigation data and environmental variables: The IT systems and procedures used to operate the site automatically acquire, during their normal operation, some personal data relating to the navigation of the interested party, including environmental variables. This category of data includes, for example:
the IP addresses of the computers used by users who use the service;
the number of accesses;
the pages viewed;
the date and time of access;
the URL your browser was in before viewing our page;
the type of navigation browser;
the operating system used.
NON-TECHNICAL COOKIES

Profiling cookies: the site uses profiling cookies provided by third parties. In detail, the following are used:
– interaction with social networks and external platforms: this type of service allows interaction with social networks or other external platforms directly from the pages of this application. The interactions and information acquired by this application are in any case subject to the User’s privacy settings relating to each social network.

In the event that an interaction service with social networks is installed, it is possible that, even if the Users do not use the service, the same collects traffic data relating to the pages in which it is installed.

AddThis (Addthis Inc.): is a service provided by Clearspring Technologies Inc. which displays a widget that allows interaction with social networks and external platforms and sharing the contents of this application. Depending on the configuration, this service can show widgets belonging to third parties, such as social network managers on which to share interactions. In this case, even the third parties that provide the widget will be aware of the interaction performed and of the usage data relating to the pages in which this service is installed.

Personal Data collected: Cookies and Usage Data.

Place of processing: USA – Privacy Policy.

– Remarketing and behavioral targeting: allows this application and its partners to communicate, optimize and serve advertisements based on past use of this application by the User. This activity is carried out by tracking usage data and the use of cookies, information that is transferred to the partners to whom the remarketing and behavioral targeting activity is connected. In addition to the possibility of opting out offered by the services listed below, the User can opt for exclusion from receiving cookies relating to a third party service by visiting the opt-out page of the Network Advertising Initiative.

Facebook Remarketing (Facebook, Inc.): is a Remarketing and Behavioral Targeting service provided by Facebook, Inc. which connects the activity of this Application with the Facebook advertising network.

Personal Data collected: Cookies and Usage Data.

Place of processing: USA – Privacy Policy – ​​Opt Out.

AdWords Remarketing (Google Inc.): is a remarketing and behavioral targeting service provided by Google Inc. which connects the activity of this Application with the Adwords advertising network and the Doubleclick Cookie.

Personal Data collected: Cookies and Usage Data.

Place of processing: USA – Privacy Policy – ​​Opt Out.

– Statistics: the services contained in this section allow the Data Controller to monitor and analyze traffic data and are used to keep track of User behaviour.

Google Analytics with anonymized IP (Google Inc.): is a web analytics service provided by Google Inc. (“Google”). Google uses the Personal Data collected for the purpose of tracking and examining the use of this Application, compiling reports and sharing them with other services developed by Google. Google may use the Personal Data to contextualize and personalize the ads of its advertising network. This integration of Google Analytics makes your IP address anonymous. The anonymization works by shortening the IP address of the Users within the borders of the member states of the European Union or in other countries adhering to the agreement on the European Economic Area. Only in exceptional cases, the IP address will be sent to Google servers and shortened within the United States.

Personal Data collected: Cookies and Usage Data.

Place of processing: USA – Privacy Policy – ​​Opt Out

Facebook Ads conversion tracking (Facebook, Inc.):

is a statistics service provided by Facebook, Inc. which connects data from the Facebook advertising network with the actions performed within this Application.

Personal Data collected: Cookies and Usage Data.

Place of processing: USA – Privacy Policy

Criteo Dynamic Retargeting:

is a remarketing service provided by Criteo SA.

Personal Data collected: Cookies and Usage Data.

Place of processing: France

Privacy Policy – https://www.criteo.com/it/privacy/

Opt Out – https://privacy.eu.criteo.com

Delete and disable cookies

Since cookies are normal text files, they can be accessed using word processing programs. In any case, it is possible to configure your browser to prevent it from dealing with cookies.

Delete/deactivate cookies with Firefox:

http://support.mozilla.com/it/kb/Eliminare%20i%20cookie

Clear/deactivate cookies with Edge:

https://support.microsoft.com/it-it/help/4027947/windows-delete-cookies

Delete/deactivate cookies with Chrome:

http://support.google.com/chrome/bin/answer.py?hl=it&answer=95647

3.2 Data provided voluntarily by the interested party

The data optionally and freely provided by the interested party by sending e-mails to the addresses on the site may be acquired for the purpose indicated in point 4.

In particular, in addition to the email address necessary to reply to the sender, any other personal data contained in the relative communication will be processed.

Purpose of the processing and legal basis of the processing
To send direct marketing communications, newsletters, advertising material, by means of traditional contact systems and automated IT systems, including commercial or promotional communications by email or SMS, or for market research and analysis. In this case, the consent, expressed in accordance with this information, constitutes a legal basis;

For profiling and determination of habits and preferences. In this case, the consent, expressed in accordance with this information, constitutes a legal basis.

Method of expressing consent
Consent to the processing of personal data through non-technical cookies can be expressed:

By clicking on a specific box presented within a banner.
Source from which the personal data originates
Only the data provided by the interested party in accordance with this information, collected through the website, will be processed.

Recipients and any categories of recipients of personal data
The recipients of the data subject’s personal data may be:

communications companies that carry out commercial communication activities and profiling activities on behalf of the Data Controller, who hold the position of data processors;
companies offering information society services, including, in particular, those offering hosting services.
Data categories
The personal data of the interested party will be processed.

Data transfer
The Data Controller intends to transfer personal data to a third country or to an international organization. These subjects could be represented, by way of example, by:

communications companies that carry out communication activities on behalf of the Data Controller;
companies offering information society services, including, in particular, those offering hosting services;
communication company service providers.
The transfer of personal data to these subjects, if established in a third country or an international organization, is carried out in the presence of an adequacy decision by the European Commission, which has verified how the third country, the territory or one or more specific sectors within the third country, or the international organization in question ensure an adequate level of protection of your rights. In any case, the Data Controller – if he deems it appropriate in any case – reserves the right to conclude specific separate agreements that oblige such subjects to adopt adequate security measures, including organizational ones, aimed at offering appropriate guarantees regarding their rights. Google Inc., in particular, is contractually bound to ensure adequate protection of the rights of the data subject. The data may thus be transferred to the following countries: UK, United States of America. To obtain a copy of such data or the place where they were made available, simply send the relative request to the email address privacy@muschieri.com.

Period of retention of personal data
Personal data processed for marketing purposes are processed and stored until the data subject revokes consent or cancels it.

Personal data processed for the purpose of determining preferences are processed and stored for a period of time not exceeding 12 months starting from collection.

The Data Controller reserves the right, in any case, to request the interested party to renew his consent to the processing and/or to verify the consents already expressed.

Optional nature of consent and consequences of non-consent
In relation to personal data processed for marketing purposes, the communication of personal data is not a contractual obligation. You are entitled to provide personal data; in case of failure to communicate such data, however, it will not be possible to carry out any marketing activity;

In relation to personal data processed for profiling purposes, the communication of personal data is not a contractual obligation. You are entitled to provide personal data; in case of failure to communicate such data, however, it will not be possible to carry out any profiling activity.

Rights of the interested party
12.1 Right to object

In relation to personal data processed through technical cookies in order to allow correct use of the website, the communication of personal data is not a contractual obligation, but based on the legitimate

interest of the owner, as without this treatment the fully functional website could not be made available.

Consent is to be considered optional in relation to non-technical cookies. In the latter case, failure to provide such data will only make it impossible to provide a personalized service. In relation to the data provided voluntarily via email, consent is to be considered optional. However, failure to communicate such data will make it impossible to respond to the interested parties;

In relation to the data communicated for contractual and pre-contractual purposes, the communication of personal data is a contractual obligation and a necessary requirement for the performance of the pre-contractual negotiations and for the conclusion of the contract. The interested party has the right to provide personal data; in case of failure to communicate such data, however, it will not be possible to conclude any contract or carry out any contractual negotiation;

In relation to the data provided voluntarily by email, failure to communicate them will make it impossible to respond to the requests of the interested party.

12.2 Other Rights

The Data Controller also intends to inform the interested party of the existence of the following rights:

Right of access of the interested party: the interested party has the right to obtain from the Data Controller confirmation as to whether or not personal data concerning him is being processed and, in this case, to obtain access to personal data and specific information, in compliance with the art. 15 of the GDPR.
Right of rectification: the interested party has the right to obtain from the Data Controller the rectification of inaccurate personal data concerning him without unjustified delay. Taking into account the purposes of the processing, the interested party has the right to obtain the integration of incomplete personal data, also by providing a supplementary declaration, in accordance with art. 16 of the GDPR.
Right to data cancellation, including the right to withdraw consent: the interested party has the right to obtain from the Data Controller the cancellation of personal data concerning him without unjustified delay and the Data Controller has the obligation to cancel the data without unjustified delay personal data, or to revoke your consent, if the reasons defined by art. 17 of the GDPR. As regards the right to withdraw, the interested party also has the right to withdraw the consent at any time without prejudice to the lawfulness of the processing based on the consent given before the revocation.
Right to limitation of treatment: the interested party has the right to obtain from the Data Controller the limitation of treatment when the hypotheses defined by art. 18 of the GDPR.
Right to data portability: the interested party has the right to receive, in a structured format, commonly used and readable by an automatic device, the personal data concerning him provided to the Data Controller and has the right to transmit such data to another data controller without impediments by the Data Controller in the cases and under the conditions specified by art. 20 of the GDPR.
Exercise of rights
Requests to exercise the rights indicated in this information, including, in particular, the right to cancellation and the right to withdraw the consent given, must be addressed directly to the Data Controller at the email address privacy@muschieri.com. Alternatively, it is possible to exercise one’s rights by sending the relative communication by registered letter with return receipt to the address LMA BRANDS S.r.l. at Banchina dell’Azoto 15 Venice (VE) Italy

Accessibility of information
The information is accessible at the address https://muschieri.com/privacy-policy, as well as at the Data Controller. If expressly requested by the interested party, the information can also be provided orally, provided that the identity of the interested party is proven, by means of a telephone request addressed to the addresses of the Data Controller.