Privacy policy
This page describes the website's management procedures regarding the processing of users' personal data. This information is also provided pursuant to Article 13 of Legislative Decree 196/2003 and EU Regulation 679/2016 to those who interact with the web services accessible electronically from the address: www.mafel.it.
This information applies only to this website and not to other websites that may be accessed through our links, for which Mafel srl is in no way responsible.
Data Controller:
Following consultation of this site, data relating to identified or identifiable individuals may be processed. The "Data Controller" is Mafel srl, represented by its legal representative at the time , with registered office at Via Grecia, 37/3 41122 Modena (MO).
Data processing
related to the web services on this site takes place at EDYSMA sas di Marco Gallerani & C., with registered office at Via Emilia 357, 40011 Anzola Emilia (Bologna), and at ARUBA BUSINESS srl (formerly WIDESTORE srl), Via Gulinelli, 21/a, 44122 Ferrara, both of which are jointly responsible for data processing. Data processing operations are carried out only by employees, collaborators, or persons in charge of data processing, or by persons in charge of occasional maintenance operations. No data deriving from the web service is communicated or disseminated. Personal data provided by users who request informational material is used only to perform the requested service or performance and is disclosed to third parties only if necessary for this purpose (see the section "Optional nature of data provision").
Purpose of processing:
The collected data is processed in compliance with the GDPR, in order to perform the service requested by the user and fulfill the obligations undertaken towards the user, such as, for example, responding to requests for information or requests to receive the newsletter and subscribe to the mailing list, containing informational messages and commercial and promotional communications relating to the Data Controller's activities, in full compliance with the principles of lawfulness and fairness and with the provisions of law. However, depending on the service requested and the type of website, the data may be used for promotional activities or to enable contact with other customers. In any case, the data subject will always be asked for consent for each type of data processing.
TYPES OF DATA PROCESSED
Browsing Data
The computer systems and software procedures used to operate this website acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols. This information is not collected to be associated with identified data subjects, but by its very nature could, through processing and association with data held by third parties, allow users to be identified. This category of data includes the IP addresses or domain names of computers used by users connecting to the site, the URI (Uniform Resource Identifier) addresses of requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response from the server (successful, error, etc.), and other parameters relating to the user's operating system and computer environment. This data is used solely to obtain anonymous statistical information on site usage and to verify its proper functioning, and is deleted immediately after processing. The data could be used to ascertain responsibility in the event of hypothetical computer crimes against the site.
Data provided voluntarily by the user.
The optional, explicit, and voluntary sending of emails to the addresses indicated on this site entails the subsequent acquisition of the sender's address, which is necessary to respond to requests, as well as any other personal data included in the message.
Specific summary information will be progressively reported or displayed on the site pages dedicated to particular services upon request.
Optional Data Provision.
Aside from what is specified for navigation data, the user is free to provide personal data in the request forms or otherwise indicated in contact details to request informational materials or other communications. Failure to provide such data may make it impossible to obtain what is requested. For the sake of completeness, it should be noted that in some cases (not covered by the ordinary management of this site), the Authority may request information pursuant to Art. 157 of Legislative Decree No. 196/2003, for the purposes of monitoring the processing of personal data. In these cases, compliance is mandatory under penalty of administrative sanctions. Username and password: If you are asked to choose a user name and password to access restricted sections of the site, it is your responsibility to keep such data confidential and to notify us immediately if it is used by unauthorized persons.
Processing Methods:
Personal data is processed using automated tools for the time strictly necessary to achieve the purposes for which it was collected. Specific and adequate security measures are adopted to prevent data loss, illicit or incorrect use, and unauthorized access, in compliance with the obligations to comply with minimum security measures. We inform you that, in order to provide a complete service, our portal contains links to other websites not managed by us. We are not responsible for errors, content, cookies, publications of unlawful content, advertising, banners, or files that do not comply with current regulations, nor for compliance with the Privacy Policy by the sites managed by us to which reference is made. To improve the service offered, we appreciate immediate reporting of malfunctions, abuse, or suggestions by emailing us at info[@]mafel.it.
Data subject rights
Data subjects have the right to access their personal data at any time to obtain confirmation of the existence or otherwise of such data and to know its content and origin, verify its accuracy, request its integration or updating, or rectification (Article 13 of EU Regulation 679/2016).
- The data subject also has the right to object to data processing for legitimate reasons, in particular those indicated in Art. 21 of the GDPR, to request the restriction of processing, and to request data portability. The data subject may request the deletion of their data if one of the reasons indicated in Art. 17 of EU Regulation 679/16 applies, which is reproduced in full below:
- the personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed;
- the data subject withdraws consent on which the processing is based according to Article 6, paragraph 1, letter a), or Article 9, paragraph 2, letter a), and where there is no other legal ground for the processing;
- the data subject objects to the processing pursuant to Article 21, paragraph 1, and there are no overriding legitimate grounds for the processing, or the data subject objects to the processing pursuant to Article 21, paragraph 2;
- personal data have been unlawfully processed;
- the personal data must be erased for compliance with a legal obligation in Union or Member State law to which the controller is subject;
- the personal data have been collected in relation to the offer of information society services referred to in Article 8, paragraph 1.
- Taking into account available technology and the cost of implementation, the controller shall take reasonable steps, including technical measures, to inform controllers who are processing the personal data that the data subject has requested the erasure by such controllers of any links to, or copy or replication of, those personal data.
- Paragraphs 1 and 2 shall not apply to the extent that processing is necessary:
- for the exercise of the right to freedom of expression and information;
- for compliance with a legal obligation which requires processing by Union or Member State law to which the controller is subject or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller;
- for reasons of public interest in the area of public health in accordance with Article 9(2)(h) and (i) and Article 9(3);
- for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes in accordance with Article 89(1) in so far as the right referred to in paragraph 1 is likely to render impossible or seriously impair the achievement of the objectives of that processing; or
- for the establishment, exercise or defense of a right in court.
The interested party may withdraw consent at any time if it was given for one or more specific purposes, without affecting the lawfulness of the processing based on the consent given before the withdrawal.
Furthermore, in the event of a violation of their personal data, the interested party may lodge a complaint with the competent supervisory authority.
Requests should be addressed to Mafel srl, Via Grecia, 37/3 41122 Modena (MO) or to the e-mail address: info[@]mafel.it .
Changes to this Policy:
Mafel srl reserves the right to update this Privacy Policy to reflect changes in the law, as well as to take into account suggestions from employees, customers, collaborators, and users. If Mafel srl makes changes to this Privacy Policy, the word "update" will appear next to the Privacy Policy link on the main privacy page of www.mafel.it.
In the event of substantial changes to the Privacy Policy, Mafel srl will publish such changes in a visible manner.