Privacy Policy

Privacy notice pursuant to Article 13 of EU Regulation 2016/679

Pursuant to Regulation (EU) 2016/679 (hereinafter the "Regulation"), this page describes how the personal data of users who visit the website www.mussini.com are processed.
This notice does not apply to other websites, pages or online services that may be reached through hypertext links published on the site but referring to resources outside the mussini.com domain.

1. DATA CONTROLLER

The data controller is Mussini sas di Alessandro Mussini & C., hereinafter referred to as MUSSINI SAS, represented by its Legal Representative, with registered office at Frazione Filia 92/1, 10081 Castellamonte (TO), Italy — P.IVA (VAT no.) 06628220011.
Contact details for data processing matters: info@mussinisas.it, certified email (PEC) certificata@pec.mussinisas.it.
The Company is not required to appoint a Data Protection Officer (DPO) under art. 37 of the Regulation and has not made such an appointment.

2. TYPES OF DATA PROCESSED

As a result of visiting the site, data relating to identified or identifiable natural persons may be processed.

2.1 Data provided by users

Within the website operated by the Company there are different options and ways for the user to contact it.

While the sending of data by the user is voluntary and optional, the user has various opportunities for interaction which cannot be established without the collection of personal data.

Below is an up-to-date list of the various means of contact provided by the site:

Contact by telephone: the user may contact the Company at the telephone numbers shown on the site; establishing contact may involve providing the personal data needed to handle the request;
Contact by email: the site allows the user to submit requests on a wide range of items through the email contacts, reachable via direct links, within the web page. In this way the Company collects the user’s email address and, where they are contained in the text of the correspondence, further personal data;

Purchase on the site: in order to fulfil an order the Company processes identification, contact, billing and shipping data. Payment data are processed directly by the payment service providers and are not stored by the Company;
Newsletter subscription: the user may voluntarily provide their email address in order to receive commercial communications, which may be withdrawn at any time;
Reviews: after a purchase the user may be invited to leave a review; the data provided on that occasion are processed in order to publish the review;

Contact through social networks: the website contains direct links to the social media pages managed by the Company (Instagram and Facebook); by using the social pages the user may contact the Company for various purposes, including the possibility of posting comments or reactions on them.
Social interaction involves the collection of personal data voluntarily provided by users;

2.2 Browsing data

The computer systems and software procedures used to operate this site acquire, in the course of their normal operation, certain personal data whose transmission is implicit in the use of internet communication protocols.

This category of data includes the IP addresses or domain names of the computers and terminals used by users, the URI/URL addresses of the resources requested, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters relating to the user’s operating system and computer environment.

Such data, which are necessary in order to use the web services, are processed for the purpose of:

obtaining statistical information on the use of the services (most visited pages, number of visitors by time slot or by day, geographical areas of origin, etc.);
checking that they work correctly and improving Users’ browsing experience.
This information could also be used to establish liability in the event of hypothetical computer crimes against the Site.

Browsing data are deleted immediately after processing (save for any need for crimes to be investigated by the Judicial Authority).

2.3 Information collected through cookies

The site uses web tracking systems such as cookies. These are computer records of information transmitted by a web server to the user’s computer so that the computer can be identified on future visits to the same website. These tools help to facilitate the analysis of web traffic, allow the site to operate correctly and enable web applications to send information to individual users.

On first access to the site a banner is shown that makes it possible to accept or refuse non-necessary cookies, broken down by purpose (statistics and marketing). Technical cookies, which are essential for the operation of the site and of the cart, are always active. The user may change their choices at any time by recalling the preferences banner from the same page.

3. PURPOSES OF THE PROCESSING

In particular, MUSSINI SAS may collect and process Users’ data for the following purposes:

the establishment and performance of contractual relationships and the resulting obligations, including communications relating to the services (for example to fulfil purchase orders or to respond to any requests for information and services);
marketing purposes, advertising communications, the sending of periodic informational newsletters carried out by automated means of contact (email) and the possible sending of gifts for purposes connected with user loyalty;
promotional/advertising purposes through the sharing on social networks of photographs and videos taken during events organised by the Company;
in compliance with legally binding requests, in order to fulfil a legal obligation, regulations or measures of the judicial authority, as well as to defend a right in court.
for the possible sending of communications concerning the organisation of events, presentations and other activities arranged for advertising purposes;
to provide the data to our commercial partners, in order to broaden the range of services and communications offered;
carrying out market studies and research.

4. METHODS OF PROCESSING

Personal data will be processed in full compliance with the principles of confidentiality, fairness, necessity, relevance, lawfulness and transparency required by the GDPR.

Personal data will be processed by automated means (e.g. using electronic procedures and media) and/or manually (e.g. on paper), in accordance with the legal provisions in force. Appropriate security measures will be observed to prevent the loss of personal data, unlawful or incorrect use of the data or unauthorised access.

5. MANDATORY OR OPTIONAL NATURE OF PROVIDING THE DATA

Purpose a:

the provision by the user of their personal data is necessary in order to deal with the user’s requests and questions or to supply the goods and services requested.

Failure to provide such data therefore prevents the user from receiving the information, goods and/or services requested.

The processing of the data in question, being intended to deal with the data subject’s requests and/or to conclude and perform contracts entered into with the data subject, does not require the user’s express consent (legal basis: performance of contractual obligations).

Purpose b:

the provision by the user of personal data for marketing purposes is, on the other hand, optional and the related processing may take place only with the user’s express consent.

Failure to provide personal data for such purposes does not prevent the user from receiving the information or the supply of the goods and/or services requested.

Consent may be withdrawn at any time.

Purpose c:

the provision by the user of personal data (images and/or videos) for promotional purposes is optional and the related processing may take place only with the user’s express consent.

Failure to provide personal data for such purposes does not prevent the user from receiving the information or the supply of the goods and/or services requested.

Consent may be withdrawn at any time.

Purpose d:

the Company collects your contact Data in order to fulfil a legal obligation and/or to defend one of its rights in court (legal basis for the processing: legal obligations with which the Company is required to comply).

Purpose e:

the Company asks for your consent to the use of the personal data in our possession, in particular your identification and contact data, in order to send you invitations and information regarding events organised for commercial and advertising purposes, at which your participation would be welcome.

We remind you that giving your consent is optional and that you may exercise your right to withdraw it from the processing at any time.

Purpose f:

following your express consent to the use of your data for this particular marketing purpose, in order to guarantee you a wider range of services and commercial communications and to increase the information available to you about what the market offers, the Company provides the personal data you have supplied to our commercial partners.

We remind you that giving your consent is optional and that you may exercise your right to withdraw it from the processing at any time.

Purpose g:

in order to constantly improve the services offered by the Company on the basis of the customer’s interests and requests, following your voluntary consent, we will process your personal data to carry out market analyses and studies, carefully assessing your preferences and inclinations.

We remind you that giving your consent is optional and that you may exercise your right to withdraw it from the processing at any time.

6. SCOPE OF COMMUNICATION AND DISSEMINATION OF THE DATA

In pursuit of the purposes referred to above and within the limits of what is strictly necessary for that, the user’s personal data may be made known to employees and collaborators of MUSSINI SAS appointed as processors and/or as persons authorised to carry out the processing, by reason of and within the limits of the duties and tasks assigned to them.

Apart from the persons authorised to carry out the processing within the Company, the user’s personal data may also come to the knowledge of parties carrying out activities connected with, instrumental to and/or in support of the activities of MUSSINI SAS and to which the latter may turn – after appointing them as processors – for the performance of those activities, within the limits of what is strictly necessary for that and in compliance with the purposes set out above.

Finally, MUSSINI SAS may communicate the user’s personal data – following their express consent – to Businesses and Companies acting as commercial partners for the purpose of providing additional services and commercial communications.

More detailed information on the names of the Processors and on the commercial partners involved in the processing of the user’s personal data may be requested by sending an email to the following address: info@mussinisas.it

6-bis. TRANSFER OF DATA OUTSIDE THE EUROPEAN UNION

The site is built on the Shopify platform and some of the suppliers used by the Company to manage the shop, commercial communications and reviews are based outside the European Economic Area. Where this involves a transfer of personal data to third countries, the transfer takes place on the basis of an adequacy decision of the European Commission or of the standard contractual clauses approved by it. An up-to-date list of the suppliers and of the safeguards adopted may be requested by writing to info@mussinisas.it.

7. DATA RETENTION

The data you provide will be processed for the entire duration of the contractual relationship in place and thereafter retained solely for the period required to fulfil legal obligations, unless it proves necessary to retain them further in order to defend or assert a right or to comply with any further legal obligations or orders of the Authorities.

In particular: data relating to orders and invoicing are retained for ten years from the conclusion of the contract, in accordance with civil law and tax obligations; data processed for marketing purposes are retained until consent is withdrawn and in any case for no longer than twenty-four months from the last contact; browsing data are deleted immediately after processing, save where crimes need to be investigated by the Judicial Authority.

8. THE RIGHTS OF DATA SUBJECTS

In relation to the processing of your personal data, you have the right to ask MUSSINI SAS for:

access: you may ask for confirmation as to whether or not data concerning you are being processed, as well as for further clarification about the information set out in this Privacy Notice, and to receive the data themselves, within the limits of reasonableness;
rectification: you may ask to have the data you have provided to us, or that are otherwise in our possession, corrected or supplemented, if they are inaccurate;
erasure: you may ask for your data to be erased, where they are no longer necessary for our purposes or where there are no pending claims or disputes, in the event of withdrawal of consent or of your objection to the processing, in the event of unlawful processing, or where there is a legal obligation to erase them;
restriction: you may ask for the processing of your personal data to be restricted, where one of the conditions set out in art. 18 of the GDPR applies; in that case, your data will not be processed, except for storage, without your consent, save as set out in paragraph 2 of that same article.
objection: you may object at any time to the processing of your data based on a legitimate interest of ours, unless we have legitimate grounds for the processing which override yours, for example for the exercise or defence of legal claims; your objection will always and in any case prevail over our legitimate interest in processing your data for marketing purposes;
portability: you may ask to receive your data, or to have them transmitted to another controller indicated by you, in a structured, commonly used and machine-readable format.
Furthermore, pursuant to art. 7(3) of the GDPR, we inform you that you may exercise your right to withdraw consent at any time, without affecting the lawfulness of the processing based on the consent given previously.

We also inform you that you have the right to lodge a complaint with the Supervisory Authority, which in Italy is the Garante per la Protezione dei Dati Personali (the Italian Data Protection Authority).

To exercise your rights, or for questions or information about the processing of your data and the security measures adopted, you may in any case contact our Company by making a request in the following ways:

registered letter with return receipt to the address: MUSSINI SAS - Frazione Filia 92/1 10081 Castellamonte TO
communication by certified email (PEC) to the address: certificata@pec.mussinisas.it