“INFORMATION FOR THE PROCESSING OF PERSONAL DATA – PRIVACY POLICY”

*Information and consent pursuant to Legislative Decree No. 196/2003 – Personal data protection code and subsequent amendments pursuant to EU Reg. No. 2016/679

“Object of Processing”

Pursuant to and for the purposes of the provisions of Legislative Decree no.196 of 30 June 2003, Personal Data Protection Code (hereinafter referred to as “Code”) and in implementation of EU Reg. no. 2016/679 (hereinafter GDPR), we inform you that your personal data, supplied and/or acquired subsequently, will be processed by “Il Marchio D’Oro srl”, in Italy and abroad, on the occasion of the conclusion of contracts for the services of the Owner, through electronic and manual means in compliance with the Code and GDPR force regarding privacy.
“Purpose of Processing”

The collected data is processed for the following purposes:
a) to subscribe to the service;
b) to conclude purchase contracts and carry out their provision for the services of the Data Controller;
c) to carry out the obligations necessary to execute the contractual relationship in place;
d) to fulfill regulatory obligations including accounting, administrative and tax obligations;
e) to resolve any reports after ascertaining them;
f) to send commercial information – by e-mail, text message, post, call-center and other communication systems – advertising, informational and promotional material including for products similar to those subject to the Contract;
g) to carry out – by e-mail, text message, post, call-center and other communication systems – market research,
economic and statistical data analysis in order to verify the correct functioning of the services and their satisfaction;
h) to elaborate personalised information regarding consumer habits and orientation of the interested parties;
i) to communicate the data to third-party companies for direct marketing purposes.
In the case of a third-party other than the Contractor, “Il Marchio D’Oro Srl” will contact the subject in order to provide them with due information regarding the processing of their personal data.
While pending, such data will be used only for the purposes referred to in letters a), b), c), d) and e).
We inform you that the provision of data is necessary only for the purposes a), b), c), d) and e): the failure to provide data makes it impossible to register on the site and purchase products.

“Rights of the Interested Party”

You maintain the power to exercise at any time the rights referred to in Article 7 (the right to access to personal data and other rights) of the Code and art. 15 of GDPR, in particular: the right of access of the interested party, right of rectification, updating and cancellation (right to be forgotten) if incomplete, incorrect, or collected in violation of current legislation, right to limitation of treatment, as well as to oppose their treatment for legitimate reasons, to data portability, to revoke the consent by sending a written request to “Il Marchio D’Oro Srl” via di Porto 22/a, 50010 Badia a Settimo – Scandicci – FI – Italy – and possibly to lodge a complaint with the supervisory authority (Privacy Guarantor), and also precisely the following rights:

1. The interested party has the right to obtain confirmation of the existence or non-existence of personal data concerning them, even if still unregistered, and their communication in intelligible form.
2. The interested party has the right to be informed of:
a) the origin of personal data;
b) the purposes and methods of treatment;
c) the logic applied in case of treatment carried out with the aid of electronic instruments;
d) the identity of the owner, manager and the representative appointed pursuant to article 5, paragraph 2 and art. 3, paragraph 1 of GDPR;
e) the subjects or categories of subjects to whom the personal data may be communicated or who may know about them as appointed representatives in the territory of the Government, either in the form of managers or agents.
3. The interested party has the right to obtain:
a) updating, rectification or, when interested, integration of data;
b) the cancellation, transformation into anonymous form, or blocking of data processed in violation of the law, including those whose retention is unnecessary for the purposes for which the data was collected or subsequently treated;
c) certification that the operations referred to in letters a) and b) have been brought to the attention, also in regards the
their content, of those to whom the data have been communicated or disseminated, except in the case where this fulfillment is revealed impossible or involves the use of means manifestly disproportionate to the protected rights.
4. The interested party has the right to object, in whole or in part:
a) for legitimate reasons, to the processing of personal data concerning him, even if pertinent to the purpose of the collection;
b) to the processing of personal data concerning them for the purpose of sending advertising materials or direct selling or for
carrying out market research or commercial communication. ”
Where applicable, they also have the rights referred to in articles 16-21 of GDPR, as well as the right of complaint to the Guarantor Authority.

“Procedures for Exercising Your Rights”
You may exercise your rights in any moment by:
• Sending a registered letter with return address to “Il Marchio D’Oro Srl” via di Porto 22/a, 50010 Badia a Settimo – Scandicci – FI, Italy;
• Sending an email to the address susanna@ilmarchiodoro.it

“Categories of Subjects to Whom Data Will Be Transmitted”

The processing of the personal data in question, for the purposes set out above and on the basis of art. 6 lett. b) and c) of GDPR, may also be carried out by physical or legal persons, in Italy or abroad, who on behalf and/or in the interest of “Il Marchio D’Oro Srl” provide specific processing services or carry out related, instrumental, or support activities. The data of the Contractors and/or Third Party Users may be communicated for the aforementioned purposes, as well as by “Il Marchio D’Oro Srl “, also to:

– anyone who is a legitimate recipient of communications required by law or regulations (such Public Authorities or offices, for example);
– anyone who is the recipient of communications necessary in fulfillment of the obligations deriving from the Service;
– third-party companies specialised in the management of commercial and credit-related information (such as, for example, credit centres, data processing, banks, etc.).
Furthermore, the data of the Contractors and/or Third Party Users will be processed for the same purposes also by:
– companies and/or collaborators for the management of administrative services used to fulfill their legal or contractual obligations;
– other subjects (enterprises, companies, physical persons) who collaborate in the fulfilment of the Service.
These subjects – in Italy, the EU, or outside the EU – operate as appropriately appointed and educated Managers or Officers.
The data will not be disclosed.
“Transfer of Data”

The data is stored on servers located within the European Union. In any case, it is understood that the Data Controller, wherever necessary, will reserve the right to move servers outside of the EU. In this case, the Data Controller ensures as of now that the transfer of non-EU data will take place in accordance with the applicable legal provisions, subject to stipulation of standard contractual clauses provided by the European Commission.
“Conservation of Data”

The processing of personal data is carried out by means of the operations indicated in art. 4 of the Code and art. 4 no. 2 of GDPR, namely: collection, registration, organisation, conservation, consultation, elaboration, modification, selection, extraction, comparison, use, interconnection, blocking, communication, cancellation, and destruction of data. The personal data is subject to both paper and electronic and/or automated processing.
All the categories of data indicated in this statement and the data acquired by the Data Controller cannot be used for other purposes other than those indicated above, and will be kept for the period necessary for realisation of the same. After this deadline, the data will be deleted or transformed into an anonymous form. For the data relating to details on purchases and services, storage times will not exceed those established by current legislation.
“Public Registry of Oppositions (RPO)”

We inform you that – pursuant to the Presidential Decree 178/2010 – the Public Registry of Oppositions (RPO) is activated, to which it is possible to subscribe free of charge if you no longer wish to receive unwanted calls.
Subscribing to the RPO service prevents the extraction of your telephone number from the telephone directory precluding any treatment for advertising, direct sales, market research, or commercial communication purposes via telephone, without distinction of the business sector or product category. The companies that carry out telemarketing services will therefore no longer be able to contact you.
Registration for the RPO service lasts indefinitely until revoked.
At any time, you can update the data communicated at the time of registration. You can access the RPO service in 5 ways: electronic form on the website, e-mail, phone call, registered letter, and fax. You can find all the details on the website http://www.registrodelleopposizioni.it/en.
In any case, your consent to the processing of personal data expressed at the bottom of this privacy statement is valid – even if you have subscribed to the RPO service – except in the case of expressed request for cancellation pursuant to art. 7 of the Code in the manner indicated above in the section “Rights of the Interested Party”.
“Owner and Data Controller Responsible for Processing”
The Data Controller is “Il Marchio D’Oro Srl” via di Porto 22/a, 50010 Badia a Settimo – Scandicci – FI – (Pec:
ilmarchiodoro@pec.it, Fax. 055.7310721, Tel. 055.791079).
The updated list of data processors and appointees is kept at the registered office of the Data Controller.

English