This Privacy Policy aims to inform users ("Users") of this site ("Site") about the collection, processing and storage of their personal data ("Personal Data") carried out by the data controller (" Data Controller ") in relation to the management of the Site.

In particular, the Privacy Policy provides the following information:

1 The categories of personal data collected and processed;

2 The purposes of the processing of personal data;

3 The identity of the Data Controller;

4 The retention period of the Personal Data and / or the criteria used to determine this period;

5 Any communication and / or dissemination of personal data;

6 The rights relating to the protection of Users' personal data.

The Privacy Privacy has been drawn up in full compliance with EU Regulation no. 2016/679 ("GDPR"), the Personal Data Protection Code (Legislative Decree 196/2003) and any other applicable law provision.

All Users are invited to read the Privacy Policy carefully. If they do not agree with the content of the latter, Users should promptly stop browsing the Site. People under the age of 16 (sixteen) cannot give valid consent to the processing of personal data without authorization from parents or guardians.

Holder of the treatment

The owner of the processing of personal data ("Data Controller") is:

MAGRIFFE srl

Via Manzoni, 42

20121 Milan

VAT number 10432010154

The personal data collected by the Site are processed by the staff in charge of processing in the exercise of their duties under the direct authority of the Data Controller or service providers acting as data processors ("Data Processors").

Retention of Personal Data

Personal data are stored and processed in a manner and for a proportional and congruous duration with respect to the purposes for which the data are collected and subsequently processed. Personal data are used only where necessary with respect to the purposes for which they were collected and subsequently processed.

In particular, the Site retains Personal Data for a period of time sufficient to provide the services requested by Users, as well as to fulfill legal or tax obligations or on the basis of other legal provisions.

To determine the appropriate time frame for the retention of Personal Data, the Site considers various factors, especially to ensure that Personal Data is not kept for a longer period than is necessary or appropriate. These factors also include the purposes for which the Site processes Personal Data and the type of relationship established with the User (how often the User connects to the Site, if he continues to receive commercial communications, the frequency of his purchases on the Site, etc. .).

The Data Controller will delete or make anonymous in a timely manner the Personal Data for which the processing or storage is no longer legitimate according to the applicable legislation.

Communication of personal data

The Data Controller communicates part of the Personal Data to subjects, including third parties, involved in the execution of purchase orders for products on the Site, both during the sale phase and after the sale. In this circumstance, the communication of personal data to suppliers is necessary to fulfill the contractual obligations resulting from the conclusion by the Users of purchase orders on the Site.

Users can ask the Data Controller for an updated list of Data Processors via email at the following address: magriffemilano@gmail.com

In all other cases, the communication or dissemination of Personal Data is subject to the prior express and unambiguous consent of the interested party.

This is without prejudice to the communication or dissemination of Personal Data when requested by the judicial authority, by other public entities for purposes of defense or security of the State or for the prevention, detection or repression of administrative or criminal offenses, and in any case in cases where the communication o disclosure of Personal Data is required by law.

The Data Controller does not transfer personal data to places and territories located outside the European Economic Area (EEA) without an adequate level of protection of personal data without the prior, specific and univocal consent of the interested parties.

Rights of Users

According to the provisions of the GDRP, each User has the right to obtain from the Data Controller confirmation as to whether or not personal data concerning him is being processed.

The User also has the right to obtain from the Data Controller:

1 The correction of inaccurate personal data concerning him without undue delay. Taking into account the purposes of the processing, the User has the right to obtain the integration of incomplete personal data, also by providing an additional declaration.

2 The deletion of personal data concerning him without undue delay within the limits established by law ("right to be forgotten"), or the transformation into anonymous form or the blocking of personal data processed in violation of the law, including those which are not conservation is necessary in relation to the purposes for which they were collected and subsequently processed;

3 The attestation that the operations referred to in the previous letters have been brought to the attention, also as regards their content, of those to whom the data have been communicated or disseminated, except in the case in which this fulfillment proves impossible or involves a use of means manifestly disproportionate to the protected right;

4 The suspension of the processing of personal data, in the cases provided for by law;

5 The portability of personal data, i.e. the right to receive in a structured format, commonly used and readable by an automatic device, the personal data concerning him provided to the data controller and has the right to transmit such personal data to another holder of the processing without impediments by the Data Controller, within the limits established by law.

The User has the right to object, in whole or in part, to the processing of personal data, for legitimate reasons, both in the event that the processing is relevant to the purpose of the collection, and in the event that the data are used for purposes advertising, communication or marketing.

Within the limits established by law, the User has the right not to be subjected to a decision based solely on automated processing, including profiling, which produces legal effects concerning him or which significantly affects his person in a similar way.

The User also has the right to lodge complaints in relation to the collection and processing of personal data with the Privacy Guarantor or with any other competent supervisory authority.

For any communication on the collection or processing of personal data and to exercise their rights, the User can contact the Data Controller at the email address: magriffemilano@gmail.com

This Privacy Policy is subject to periodic updates. Users are invited to review them periodically to verify.