Privacy Policy

Welcome to our web site (“metessi.com”). Please read our Privacy Policy carefully, as it applies each time you access the web site and decide to navigate through it and use its services, regardless of whether or not you purchase products. Please also read the Cookie Policy, Terms of Sales and Terms of Use on metessi.com, because they include important information about privacy and the security systems adopted by the web site.
METESSI is responsible for making decisions concerning the purposes, methods of processing your personal data and the tools used, including the security profile, pursuant to Legislative Decree No. 196 of 30 June 2003 (Privacy Code). This Privacy Policy provides you with all information that is useful for understanding how we collect and use the information identifying users of metessi.com. For any other information regarding the processing of your data, you may send a request via e-mail to our our Customer Service Centre at customer.service@metessi.com.

Information pursuant to Art. 13 of Legislative Decree 196/2003

Data owner

The owner of the data processed by this site is METESSI S.r.l.s, which has its registered office in Italy, at Via Toti 1, 20063 Cernusco Sul Naviglio, Milan. Our VAT Number and Tax ID number at the Companies’ Register of Milan is IT09183080960 and R.E.A. of Milan Number 2074657, having share capital of 6,000 Euro fully paid-up (hereinafter “METESSI”).

The owner independently decides on the purposes and methods of the processing, as well as on the security procedures to be applied to guarantee confidentiality, integrity and availability of the data.

Optional or mandatory provision of data

Providing METESSI with your personal data, which is requested at various collection times, may be necessary to carry out the purposes indicated in the appropriate information, or this may be optional.
The mandatory or optional nature of such provision is specified by the symbol (*) which is placed alongside information which is mandatory.
Any refusal to provide METESSI with such data when this is marked mandatory renders it impossible to pursue the main purpose of that collection: such refusal could, for example, make it impossible for METESSI to perform the purchase agreement, or to provide other services that are available on metessi.com (help through our Customer Service Centre). Supplying METESSI with subsequent data, other than data marked as essential, is conversely optional, and does not result in any consequences in terms of completing the main purpose of such collection.

Data controllers

At the present time, the data controllers who process your data is METESSI.

Your rights

According to Art. 7 of Legislative Decree 196/2003, you always have the right to obtain confirmation from METESSI as to whether or not personal data concerning you was processed, even if it has not yet been recorded, and to be communicated such data in an intelligible form.
You also have the right to obtain information from METESSI about the source of your personal data; the purpose and method of processing your personal data; the logic applied for processing performed with the aid of electronic tools, identification details of the data owner and controllers, an indication of the subjects or categories of subject for which personal data may be communicated or which could become known by people acting as, for example, data controllers. All of this information is contained in this Privacy Policy. Furthermore, you always have the right to obtain from METESSI:

a) an update, correction, addition of your personal data;
b) the cancellation, conversion to an anonymous form or blocking of any personal data that was processed in violation of the law, including data which it is not necessary to store for the purposes for which said data was collected or subsequently processed;
c) an attestation that notice of the operations indicated in letters a) and b) was given, including as concerns their content, to those people whose data was communicated or disseminated, except in the event that such measure proves to be impossible or entails using means which are clearly disproportionate with regard to the right protected.

You nevertheless have the right to object, in part or in full:
a) for legitimate reasons, to the processing of personal data concerning you, even if it is pertinent to the purpose for which it was collected;
b) to the processing of personal data concerning you for the purposes of sending advertising or direct marketing materials, or for completing market research or commercial communications activities.

You may exercise your rights freely and at any time, by sending a written request to METESSI at the mailing address of the headquarters, or by sending an e-mail to customer.service@metessi.com and we will promptly reply.

How and why we process your personal data

Your personal data is processed using primarily electronic and telematic means by METESSI.
The specific purposes for which data is processed are summarized on each occasion in the information pursuant to Art. 13, Legislative Decree 196/2003, which is presented to the user when s/he releases personal data.
Generally, the data is processed to perform the following services, which are available by accessing our site:

Data will not be passed on to any other third parties outside METESSI in a way that could be used to identify you without prior notification and consent.

1. registration or subscription to services offered by the METESSI, such as, for example, our newsletter;
2. order fulfillment and related activities;
3. management of payments, including anti-fraud control in case of payment by credit/debit card (in which case the data released during the purchase process will be sent to the person in charge of antifraud control);
4. management of your requests: technical, of a commercial nature, regarding the progress of your orders, as well as requests for information in the broader sense;
5. making contact with our service professionals (Customer Service Centre);
6. sending, upon your consent, and for marketing purposes, commercial communications through various channels, both electronic and telematic (e-mail, sms) as well as using traditional methods (paper-based mail, telephone). We remind you that, as prescribed by Art.130, Subsection 4 of Legislative Decree 196/2003, the owner may use data to send e-mails advertising its own products and services that are similar to those already purchased, unless such use is denied;
7. sending, upon your consent, for profiling purposes to improve your navigation experience on the site, commercial proposals which are in line with your interests. Profiling is carried out, for example, through the use of third party cookies. To that end, we ask that you read our Cookies Policy.

In processing data which could directly or indirectly identify you, we seek to follow a principle of strict necessity.
Therefore, we have configured the site in such a way that your personal data is reduced to a minimum: therefore, the processing of your data is excluded when the purposes pursued in the individual cases can be achieved through the use of anonymous data (such as, for example, market research aimed at improving services) or through other means which allow the person concerned to be identified only in case of necessity or at the request of the authorities or police forces (such as, for example, for data relating to traffic and to your presence on the web site, or to your IP address).

Your data will be communicated to third parties only with your express consent, except in cases where communication is mandatory by law or is necessary for the purposes prescribed by the law to pursue purposes for which the consent of the interested person is not requested; in these cases, data may be made available to third parties that will independently process it, and only for the aforementioned purposes (for example, in the case of a request made by the police or  judiciary, or other competent entities, or to perform obligations deriving from the contract entered with you, as is the case with communication for payments of purchased products).

Any processing purpose other than the one specified for which you have provided your personal data shall be demonstrated in the information and shall only be pursued by METESSI upon obtaining your express consent.

There are, moreover, processes for which the legislation provides for excluding consent: for example, we inform you that METESSI may process your personal data without obtaining your consent when this is needed to perform a legal obligation or when this is necessary to perform the obligations that have been contractually assumed towards you. We wish to inform you that Art. 130, Subsection 4 of Legislative Decree 196/2003 on personal data protection permits METESSI, without any obligation to obtain your express consent, to use your data for direct selling activities involving products similar to those you have already purchased and for opinion survey, unless you refuse to allow such use of the e-mail address you communicated to us.

METESSI may end up processing personal data of third parties which has been directly communicated to METESSI by its own users, for example in the case where a user has purchased a product to give to a friend, or when the party paying the price to purchase the product is different from the party for whom the product is intended, or even when the user intends to inform a friend of a service on metessi.com or of a sales offer of a particular product.

On these occasions, METESSI will take steps to deliver the information prescribed by Art. 13, Legislative Decree 196/2003 to the third party when it registers said party’s data in its own archives, but you are still responsible for obtaining the consent of the person whose data is indicated prior to communicating it to METESSI and to informing said party about this Privacy Policy, because you will be the sole party responsible for communicating information and data relating to third parties, without them having expressed their consent or for any use by them which is incorrect or contrary to law.
We inform you that these parties’ consent is not necessary when the data is communicated to METESSI to enter the contract, with METESSI, in favour of the third party.
METESSI reserves the right to eliminate My Accounts and all related data in the event that unlawful content, content that is damaging to METESSI’s image and/or its products or those of third parties, or content which is nevertheless offensive or which promotes illegal or defamatory activities, pornographic content, content which incites people to violence, which promotes discrimination with regard to race, sex, religion or sexual orientation, is detected.

Security measures

We adopt adequate security measures to reduce to a minimum the risks of destruction or loss, including accidental – of data, unauthorized access or unapproved processing or processing which does not conform to the purposes of collection indicated in our Privacy Policy.

However, METESSI may not guarantee to its users that the measures adopted for the security of the site and the transmission of the data and information on the site limit or exclude any risk of access without consent, or dissemination of data by devices belonging to the user: we advise you to make sure that your computer is equipped with adequate software to protect against the transmission in data networks, whether through input or output (such as updated antivirus systems) and that your Internet service provider has adopted suitable measures on network data transmission security (such as, for example, firewalls and spam filters). On metessi.com, every purchase is made with the utmost security thanks to the use of the most advanced technological and coding systems (SSL).

Contacts

If you wish to receive further information on how METESSI processes your personal data, please write an e-mail to the e-mail address customer.service@metessi.com.
To find out your rights and to always remain up-to-date on the legislation on personal protection with regard to the processing of personal data, please visit the web site of the Italian Data Protection Commissioner [Garante per la protezione dei dati personali] at the following address http://www.garanteprivacy.it/.

Applicable law

This Privacy Policy is regulated by Italian law and in particular by the Code on personal data protection (Legislative Decree No. 196 of 30 June 2003) which governs the processing of personal data, including data held abroad, that is carried out by anyone with a residence or registered office in Italy.
The Code guarantees that personal data will be processed in accordance with fundamental rights and freedoms, as well as with dignity for the person concerned, particularly as concerns confidentiality, personal identity and the right to protection of personal data.

Modification and updates to the METESSI Privacy Policy

METESSI may modify or simply update all or part of the site’s Privacy Policy, including in consideration of the modification of legal rules or regulations which govern this subject area and protect your rights. Changes and updates to the Privacy Policy will be notified to users on the Home Page as soon as they are adopted and will be binding as soon as they are published on the web site. Therefore, please access this section regularly to check on the publication of the most recent and updated Privacy Policy.

Last updated November 2015