Information pursuant to Art. 13 of Legislative Decree 196/2003
The owner of the data processed by this site is METESSI S.r.l.s, which has its registered office in Italy, at Via Toti 1, 20063 Cernusco Sul Naviglio, Milan. Our VAT Number and Tax ID number at the Companies’ Register of Milan is IT09183080960 and R.E.A. of Milan Number 2074657, having share capital of 6,000 Euro fully paid-up (hereinafter “METESSI”).
The owner independently decides on the purposes and methods of the processing, as well as on the security procedures to be applied to guarantee confidentiality, integrity and availability of the data.
Optional or mandatory provision of data
Providing METESSI with your personal data, which is requested at various collection times, may be necessary to carry out the purposes indicated in the appropriate information, or this may be optional.
The mandatory or optional nature of such provision is specified by the symbol (*) which is placed alongside information which is mandatory.
Any refusal to provide METESSI with such data when this is marked mandatory renders it impossible to pursue the main purpose of that collection: such refusal could, for example, make it impossible for METESSI to perform the purchase agreement, or to provide other services that are available on metessi.com (help through our Customer Service Centre). Supplying METESSI with subsequent data, other than data marked as essential, is conversely optional, and does not result in any consequences in terms of completing the main purpose of such collection.
At the present time, the data controllers who process your data is METESSI.
According to Art. 7 of Legislative Decree 196/2003, you always have the right to obtain confirmation from METESSI as to whether or not personal data concerning you was processed, even if it has not yet been recorded, and to be communicated such data in an intelligible form.
a) an update, correction, addition of your personal data;
b) the cancellation, conversion to an anonymous form or blocking of any personal data that was processed in violation of the law, including data which it is not necessary to store for the purposes for which said data was collected or subsequently processed;
c) an attestation that notice of the operations indicated in letters a) and b) was given, including as concerns their content, to those people whose data was communicated or disseminated, except in the event that such measure proves to be impossible or entails using means which are clearly disproportionate with regard to the right protected.
You nevertheless have the right to object, in part or in full:
a) for legitimate reasons, to the processing of personal data concerning you, even if it is pertinent to the purpose for which it was collected;
b) to the processing of personal data concerning you for the purposes of sending advertising or direct marketing materials, or for completing market research or commercial communications activities.
You may exercise your rights freely and at any time, by sending a written request to METESSI at the mailing address of the headquarters, or by sending an e-mail to firstname.lastname@example.org and we will promptly reply.
How and why we process your personal data
Your personal data is processed using primarily electronic and telematic means by METESSI.
The specific purposes for which data is processed are summarized on each occasion in the information pursuant to Art. 13, Legislative Decree 196/2003, which is presented to the user when s/he releases personal data.
Generally, the data is processed to perform the following services, which are available by accessing our site:
Data will not be passed on to any other third parties outside METESSI in a way that could be used to identify you without prior notification and consent.
1. registration or subscription to services offered by the METESSI, such as, for example, our newsletter;
2. order fulfillment and related activities;
3. management of payments, including anti-fraud control in case of payment by credit/debit card (in which case the data released during the purchase process will be sent to the person in charge of antifraud control);
4. management of your requests: technical, of a commercial nature, regarding the progress of your orders, as well as requests for information in the broader sense;
5. making contact with our service professionals (Customer Service Centre);
6. sending, upon your consent, and for marketing purposes, commercial communications through various channels, both electronic and telematic (e-mail, sms) as well as using traditional methods (paper-based mail, telephone). We remind you that, as prescribed by Art.130, Subsection 4 of Legislative Decree 196/2003, the owner may use data to send e-mails advertising its own products and services that are similar to those already purchased, unless such use is denied;
7. sending, upon your consent, for profiling purposes to improve your navigation experience on the site, commercial proposals which are in line with your interests. Profiling is carried out, for example, through the use of third party cookies. To that end, we ask that you read our Cookies Policy.
In processing data which could directly or indirectly identify you, we seek to follow a principle of strict necessity.
Therefore, we have configured the site in such a way that your personal data is reduced to a minimum: therefore, the processing of your data is excluded when the purposes pursued in the individual cases can be achieved through the use of anonymous data (such as, for example, market research aimed at improving services) or through other means which allow the person concerned to be identified only in case of necessity or at the request of the authorities or police forces (such as, for example, for data relating to traffic and to your presence on the web site, or to your IP address).
Your data will be communicated to third parties only with your express consent, except in cases where communication is mandatory by law or is necessary for the purposes prescribed by the law to pursue purposes for which the consent of the interested person is not requested; in these cases, data may be made available to third parties that will independently process it, and only for the aforementioned purposes (for example, in the case of a request made by the police or judiciary, or other competent entities, or to perform obligations deriving from the contract entered with you, as is the case with communication for payments of purchased products).
Any processing purpose other than the one specified for which you have provided your personal data shall be demonstrated in the information and shall only be pursued by METESSI upon obtaining your express consent.
There are, moreover, processes for which the legislation provides for excluding consent: for example, we inform you that METESSI may process your personal data without obtaining your consent when this is needed to perform a legal obligation or when this is necessary to perform the obligations that have been contractually assumed towards you. We wish to inform you that Art. 130, Subsection 4 of Legislative Decree 196/2003 on personal data protection permits METESSI, without any obligation to obtain your express consent, to use your data for direct selling activities involving products similar to those you have already purchased and for opinion survey, unless you refuse to allow such use of the e-mail address you communicated to us.
METESSI may end up processing personal data of third parties which has been directly communicated to METESSI by its own users, for example in the case where a user has purchased a product to give to a friend, or when the party paying the price to purchase the product is different from the party for whom the product is intended, or even when the user intends to inform a friend of a service on metessi.com or of a sales offer of a particular product.
We inform you that these parties’ consent is not necessary when the data is communicated to METESSI to enter the contract, with METESSI, in favour of the third party.
METESSI reserves the right to eliminate My Accounts and all related data in the event that unlawful content, content that is damaging to METESSI’s image and/or its products or those of third parties, or content which is nevertheless offensive or which promotes illegal or defamatory activities, pornographic content, content which incites people to violence, which promotes discrimination with regard to race, sex, religion or sexual orientation, is detected.
However, METESSI may not guarantee to its users that the measures adopted for the security of the site and the transmission of the data and information on the site limit or exclude any risk of access without consent, or dissemination of data by devices belonging to the user: we advise you to make sure that your computer is equipped with adequate software to protect against the transmission in data networks, whether through input or output (such as updated antivirus systems) and that your Internet service provider has adopted suitable measures on network data transmission security (such as, for example, firewalls and spam filters). On metessi.com, every purchase is made with the utmost security thanks to the use of the most advanced technological and coding systems (SSL).
If you wish to receive further information on how METESSI processes your personal data, please write an e-mail to the e-mail address email@example.com.
To find out your rights and to always remain up-to-date on the legislation on personal protection with regard to the processing of personal data, please visit the web site of the Italian Data Protection Commissioner [Garante per la protezione dei dati personali] at the following address http://www.garanteprivacy.it/.
The Code guarantees that personal data will be processed in accordance with fundamental rights and freedoms, as well as with dignity for the person concerned, particularly as concerns confidentiality, personal identity and the right to protection of personal data.
Last updated November 2015