Privacy Policy

Privacy Policy

We inform you that pursuant to articles 13 and 14 of European Regulation 679 of 2016 (GDPR), you have the right to be informed about the purposes and methods with which the data you provide to the company Monica Bianco S.r.l., Data Controller, will be processed.

For this reason, to comply with the obligations of the Regulation regarding your data, we invite you to review the following information.

Purpose of data processing and legal basis.

By registering on the website www.Miabag.com through a personal account, the processing of personal data will be aimed at:

- the execution of purchases by the user;

- effective management of contractual and communication relationships with the user;

- related administrative, accounting, and tax compliance.

It is specified that data processing may be carried out without your specific consent, as well as in a judicial context, pursuant to Article 6, paragraph 1, in the following cases:

a) the data subject has given consent to the processing of their personal data for one or more specific purposes;

b) processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract;

c) processing is necessary for compliance with a legal obligation to which the controller is subject;

d) processing is necessary in order to protect the vital interests of the data subject or of another natural person;

e) processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller;

f) processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data, in particular where the data subject is a child.

Only with your specific consent, however, Monica Bianco S.r.l. may process your personal data (personal details and contact data) for further purposes such as subscribing to the newsletter, to receive updates and information on products, promotions, or events.

Data processing methods.

Processing is carried out by means of the operations or set of operations indicated, such as the collection, recording, organization, storage, consultation, processing, modification, selection, extraction, comparison, use, blocking, communication, cancellation, and destruction of data. In compliance with legal provisions (GDPR), data will be processed in written form and/or on magnetic, electronic, or telematic support, even when data is communicated to the subjects indicated in this policy, who in turn are committed to processing it using only methods and procedures strictly necessary for the specific purposes expressed above.

Your data is processed by adequately trained employees appointed as persons in charge of processing common and particular data.

Data provision.

The provision of common personal data is strictly necessary for the performance of the activities expressed above. Any refusal by the data subject to provide personal data makes it impossible to fulfill the described purposes.

Data communication.

For the performance of some of the activities related to the processing of personal data, the Company may communicate your data to the following categories of external subjects:

a) Companies, entities, consortia, professionals who, on behalf of the Controller, provide specific processing services or carry out activities connected, instrumental or supportive to those of the Controller (such as, for example: accountant, IT administrator, IT technicians, legal consultants).

b) subjects to whom the transfer of your Personal Data is necessary or in any case functional to the performance of our Company's activity;

c) other subjects to whom the right to access your personal data is recognized by provisions of law or secondary or community legislation (such as Public Authorities).

Our list of External Processors is updated and available for consultation at our registered office.

Profiling and similar processing

The European Data Protection Regulation requires data subjects to be informed if data processing is carried out using automated procedures. If such processing is carried out, the Company must also provide significant information on the logic used, as well as the importance and the foreseen consequences of such processing for the data subject. The Company specifies that no automated decision-making processing is carried out.

Retention Period.

Data will be processed for the entire duration of the contractual relationships established, for the duration necessary for the implementation of the agreements deriving from the contract and subsequently for the fulfillment of all legal obligations. Regarding the newsletter, contact data will be stored until the user expresses disinterest in receiving promotional material.

Transfer of data abroad.

Personal data may be transferred to countries of the European Union and to third countries outside the European Union within the scope of the indicated purposes, but only after verifying the existence of an adequacy decision by the Commission or based on standard contractual clauses as provided for by the Regulation in Article 46. Currently, the Company does not foresee data transfer to Third Countries.

Data subject's rights.

We also inform you that pursuant to articles 15 to 22 of Regulation 679 of 2016, the data subject may exercise, at any time, the rights indicated in these articles and in particular the right of access to data, of rectification, to erasure, of restriction, to data portability, of opposition, and to be informed about processing carried out through automated decision-making processes relating to natural persons, including profiling) by writing to the email address amministrazione@monicabianco.com

Right to lodge a complaint: pursuant to Article 77 of the GDPR, the data subject may submit a report or a complaint by contacting the Garante della Privacy Authority, located in Piazza Venezia, 11 00186 ROME e-mail: urp@gpdp.it.