PRIVACY POLICY

INFORMATION ON THE PROCESSING OF PERSONAL DATA OF USERS OF THE WEB SITE ACCORDING TO ART. 13 OF D.LGS. N. 196/2003 AND OF ART. 13 OF EU REGULATION 679/2016

This document was drafted pursuant to art. 13 of Legislative Decree no. 196/2003 (hereinafter, “Privacy Code”) and of EU Regulation 2016/679 (hereafter: “Regulations”) in order to let you know our privacy policy, to understand how its Personal information is handled when you use our site (https://milanforyou.com/, hereinafter “Site”) and, where appropriate, to consent to the processing of your personal data expressed and aware. The information and data provided by you or otherwise acquired as part of the use of navigation services and access to the reserved area of ​​the Site (hereinafter “Services”), will be processed in compliance with the provisions of the Regulations and obligations of confidentiality that inspire the activity of Milan For You.

According to the rules of the Privacy Code and the Regulations, the treatments carried out by Water Purifiers Lombardia will be based on principles of lawfulness, correctness, transparency, purpose limitation and conservation, data minimization, accuracy, integrity and confidentiality, as well as the principle of accountability pursuant to art. 5 of the Rules.

Data controller

Debora Zanotti, owner of Milan For You, with registered office in Piazza Camperio 4, 20852 Villasanta (MB), (hereinafter “Owner”) is constantly committed to protect the online privacy of its users. We invite you, therefore, before communicating any personal data to the Owner, to read carefully this information because it contains important information on the protection of your personal data.

Personal data object of the treatment

We inform you that the personal data subject to treatment may be made up of an identifier such as your name and surname, company email, company of belonging and role held within it, possibly telephone number and VAT number, an identification number, location data, an online identifier, depending on the type of services requested.

Furthermore, the personal data processed through the Website are as follows:

1. Navigation data

The computer systems and software procedures used to operate the Website automatically acquire, during normal operation, some information concerning web browsing, the transmission of which is implicit in the use of Internet communication protocols. This is information that is not collected to be associated with identified individuals, but which by their nature could, through associations and processing with data held by third parties, allow users or navigators to be identified. This category includes information on IP addresses, domain names of computers used by users connecting to the site, addresses in URI (Uniform Resource Identifier) ​​notation of the requested resources, time of request, the method used in submitting the request to the web server, the file size obtained in response, numerical code indicating the status of the response given by the web server (success, error, etc.) and other parameters related to the operating system and the user’s computer environment. These data are used for the sole purpose of obtaining anonymous statistical information on the use of this Website and to check its correct functioning, to identify anomalies and / or abuses, and are deleted immediately after processing. The data could be used to ascertain responsibility in case of hypothetical computer crimes against the site or third parties.

Specific information is given in the sections of the website set up for particular services, also accessible after registration, where personal data are requested from the site user.

2. Cookie

What are Cookies

Browsing this website involves the receipt of cookies, short strings of text that the websites visited send to the user’s browser (ie the program used to navigate such as, for example, Chrome, Explorer, Mozilla, etc.) where they are stored before being re-transmitted to the same websites during subsequent visits. During navigation on a site, the user can also receive on his computer cookies from websites or web servers other than the one he / she is visiting (c.d. “third party” cookies).

It is possible to distinguish technical cookies, which allow the carrying out of activities strictly related to the operation of the site and can be used freely, and profiling cookies, used in order to display advertisements to the user in line with the preferences expressed by the same in the course navigation and for which it is necessary to acquire the user’s consent.

Through this site the user’s browser can receive technical cookies and third-party profiling cookies.

Technical Cookies

In particular, technical navigation cookies are used, in order to store browsing preferences and improve navigation on the site, and analytical cookies (specifically Google Analytics provided by Google Inc. – later “Google”), which collect, in the form anonymous and aggregated, statistical information on the browsing methods of users (for example, number of pages visited and accesses, time spent on the site), useful for understanding in which aspects the website can be improved.

For more information about the processing of data by Google through the Google Analytics service, the user can visit the web page https://www.google.com/analytics/learn/privacy.html, and view the privacy policy of Google on the web page https://www.google.com/intl/it/policies/privacy/

The use of these cookies does not require the acquisition of the user’s consent, which can still decide to disable its use on your browser.
In addition, Google Analytics cookies can be specifically rejected using the appropriate tool provided by Google (https://support.google.com/analytics/answer/181881?hl=it&ref_topic=2919631&vid=1-635775549103353382-1182928194).

Third Party Profiling Cookies

Through some pages of this Website you can also receive in your browser even third-party profiling cookies, for example to allow the display of content hosted on external platforms and interact with them (eg YouTube) or connected to the Google AdWords service (aimed at displaying to the user, in the course of navigation, announcements based on the websites previously visited). For this reason, when accessing these pages is proposed a banner to inform the user and allow him to give their consent to the receipt of these cookies, closing the banner or clicking on any other element of the page, outside the banner same. the Owner does not have access to the information collected from third-party cookies, which are used independently by the operators of the aforementioned services. For more information on how to process the data collected through these cookies users are invited to consult the information notes on privacy provided by the parties who make available the services in question. In particular, the third-party cookies used on the site are as follows:

AdWords: https://support.google.com/adwordspolicy/answer/6008942?hl=it

Facebook: https://www.facebook.com/privacy

The user can disable the cookies affixed by the third parties listed above by clicking on the links indicated. If there are no links, you can refer to the following site www.youronlinechoices.com/it/ which allows you to manage user preferences in terms of cookies.

How to Manage Cookies in your Browser

The user can set his browser in such a way as to be warned of the presence of cookies and decide whether to accept a specific cookie or to automatically refuse all cookies. Here are the references to how to manage the activation / deactivation of cookies for the main browsers:

Google Chrome: https://support.google.com/accounts/answer/61416?hl=it

Mozilla Firefox: https://support.mozilla.org/it/kb/Attivare%20e%20disattivare%20i%20cookie

Apple Safari: https://support.apple.com/kb/PH19214?locale=it_IT

Opera: http://help.opera.com/Windows/10.00/it/cookies.html

Microsoft Internet Explorer e Microsoft Edge: https://support.microsoft.com/it-it/help/17442/windows-internet-explorer-delete-manage-cookies

However, if you decide to refuse cookies, it is possible that some interactive features offered by the Site may not be used, in whole or in part.

3. Purpose of the treatment

Your personal data will be processed by the Data Controller for the following purposes:

3.1 to allow the navigation of the Site and the provision of services made available by the Owner, including the management of the security of the Site;

3.2 fulfill any obligations required by applicable laws, regulations or Community legislation, or satisfy requests from authorities;

3.3 for the processing of statistics, without being able to trace back to your identity;

3.4 sending newsletters and promotional communications for the purpose of direct marketing through e-mails, text messages, mms, push notifications, faxes, paper mail, telephone with operator, whose promoted products may also be of other partner companies;

3.5 for the purpose of carrying out profiling activities, by collecting and analyzing information on the selections and choices made within the Site, in order to send personalized offers on other products and/or services;

3.6 to communicate/transfer personal data to third-party companies such as partner companies of the event for sending newsletters and promotional communications for marketing purposes via email, sms, mms, push notifications, fax, paper mail, telephone with operator.

Specific security measures are observed to prevent data loss, illicit or incorrect use and unauthorized access.

4. Legal basis and mandatory or optional nature of the processing

The legal basis for processing personal data for the purposes set out in section 3.1 is art. 6.1.b) of the Regulations as the processing is necessary for the provision of services or for the response of requests by the interested party. The legal basis for processing personal data for the purposes referred to in section 3.2 is, instead, art. 6.1.c) of the Rules (“the processing is necessary to fulfill a legal obligation to which the data controller is subject”). The provision of personal data for these purposes is optional, but failure to provide it would make it impossible to activate the services requested.

On the other hand, it is specified that the treatment referred to in section 3.3 is not performed on the basis of personal data and, therefore, can be freely performed by the Data Controller.

The legal basis for processing personal data for the purposes set out in sections 3.4, 3.5 and 3.6 is art. 6.1.a) of the Regulations as the treatments are based on consent. The latter is optional and is free to revoke it at any time without any consequence (except for the fact that it will no longer receive marketing communications and / or profiling activities will no longer be carried out). The consent previously granted can be revoked following the instructions provided in Paragraph 8 of this statement.

For the processing carried out for the purpose of sending direct advertising material or direct sales or for carrying out market research or commercial communications in relation to products or services of the Data Controller similar to those used by you, the Data Controller may use e-mail addresses pursuant to and within the limits permitted by art. 130, paragraph 4 of the Code and the provision of the Authority for the protection of personal data of June 19, 2008 even in the absence of explicit consent. The legal basis for the processing of your data for this purpose is art. 6, paragraph 1, lett. f) of the Regulations. The possibility of opposing this treatment at any time, initially or in the event of subsequent communications, remains in an easy and free manner also by writing to the addresses indicated in the “Contact” section of this statement, as well as obtaining immediate confirmation that confirms the interruption of this treatment (Article 15 of the Regulations).

5. Recipients of Personal Data

Your personal data may be shared, for the purposes set out in section 3 of this statement, with:

5.1. subjects that typically act as data controllers pursuant to arts. 29 of the Code and 28 of the Regulations, that is, subjects that cooperate with the Data Controller for the pursuit of the aforementioned purposes, including those delegated to perform technical maintenance activities (collectively “Recipients”); the list of data processors who process data can be requested from the Data Controller by writing to the addresses indicated in the “Contact” section of this statement;

5.2. subjects, bodies or authorities to whom it is mandatory to communicate your personal data in accordance with the provisions of law or orders of the authorities;

5.3. persons authorized by the Owner, pursuant to articles 30 of the Code and 29 of the Regulations, to the processing of personal data necessary to carry out activities strictly related to the provision of services, whether they are committed to confidentiality or otherwise have an appropriate legal obligation of confidentiality.

The updated list of subjects that may process your personal data, as data controllers is available, by sending a written request to the Data Controller at the addresses indicated in the “Contacts” section of this statement.

6. Transfer of Personal Data

Regarding the possible transfer of Data to Third Countries, the Data Controller discloses that the processing will take place according to one of the methods permitted by the law in force, such as the consent of the interested party, the adoption of Standard Clauses approved by the European Commission, the selection of subjects adhering to international programs for free circulation of data (eg EU-USA Privacy Shield) or operating in countries considered safe by the European Commission. It is possible to have more information, upon request, from the Owner to the above contacts.

7. Data Retention

Personal data processed for the purposes set out in section 3.1 will be kept for the time strictly necessary to achieve those same purposes. In any case, since these are treatments carried out for the provision of services, the Data Controller will retain personal data for the period of time envisaged and permitted by Italian law to protect its own interests (Article 2946 of the Civil Code).

Personal data processed for the purposes set out in section 3.2 will be kept until the time required by the specific obligation or applicable law.

Further information about the data retention period and the criteria used to determine this period may be requested by sending a written request to the Data Controller at the addresses indicated in the “Contact” section of this statement.

In any case, the possibility is reserved for the Owner to keep your personal data for the period of time foreseen and allowed by Italian law to protect his own interests (Art. 2947 c.c.).

8. Rights of the Interested Parties

Pursuant to articles 7 of the Code and 15 et seq. of the Rules, you have the right to ask the Owner, at any time, access to your personal data, correction or cancellation of the same or to oppose their treatment, request the limitation of processing in the cases provided for by art. 18 of the Regulations, as well as obtaining, in a structured format, in common use and readable by automatic device, the data concerning it, in the cases provided for by art. 20 of the Rules.

Requests should be sent in writing to the Data Controller at the addresses indicated in the “Contacts” section of this statement.

In any case, he is always entitled to lodge a complaint with the competent Supervisory Authority (Guarantor for the Protection of Personal Data), pursuant to art. 77 of the Regulations, if you believe that the processing of your personal data is contrary to the law in force.

9. Changes

The Owner reserves the right to modify or simply update its content, in part or completely, also due to changes in the applicable legislation. The Owner therefore invites you to regularly visit this section to take cognizance of the most recent and updated version of this information in order to be always updated on the data collected and on the use made of it by the Owner.

10. Contacts

To exercise the above rights or for any other request, please write to the Data Controller at the address indicated above or through the dedicated contact info@milanforyou.com, preferably inserting the wording “Request exercise of privacy rights” in the subject line of the communication.

Document updated to 01 January 2019.