INFORMATION ON THE PROCESSING OF PERSONAL DATA
In fulfillment of the obligations laid down in art. 13 and 14 of EU Reg. 2016/679 (GDPR) and the national legislation in force on the protection of individuals with regard to the processing of personal data, as well as the free movement of such data, the Data Controllers, Fashion District Mantova S.r.l., Fashion District Molfetta S.r.l., Frankie Retail Holdco S.r.l., Palmanova Propco S.r.l. and Valdichiana Propco S.r.l. (companies with the availability of the areas and properties that host, respectively, the Village of Mantua, Molfetta, Franciacorta, Palmanova and Valdichiana, with their respective legal offices indicated below) and Multi Outlet Management Italy S.r.l. (management company of the services of the same) with registered office in Via Melchiorre Gioia, 26 – 20124 Milan, disjunctly between them (hereinafter, unitarily “the Owner”), inform you that the personal data provided by the subjects to whom such data are related (interested), directly or indirectly, will be treated in accordance with the principles of lawfulness, correctness, transparency, minimization, accuracy, integrity and confidentiality, collected for specified purposes, explicitly and lawfully and subsequently treated in such a way that it is not incompatible with those purposes, and kept in a form that allows the identification of data subjects for a period of time not exceeding the achievement of the purposes for which they are processed, except where conservation is required for a longer period, either by law or by order of an authority.
The User of the service (from now on, in terms of GDPR, understood as “Interested”), adhering to the initiative, accepts the following in full:
PROCESSING OF PERSONAL DATA ADDITIONAL TO THE PURPOSES OF THE SERVICE
Upon registration, the User will be asked to provide the personal data necessary for the execution of the service (name, surname, email and password) at the end of which they will be anonymized.
In addition to the necessary data, the User may provide other data, useful for the improvement of the service and/ customization of their purchases, the optimal management of the provision of services rendered by the Owner, for example for the collection of tastes, preferences, habits and/or the degree of customer satisfaction, or for sending commercial information and/or advertising material, for “direct” marketing campaigns.
The provision of such data is optional but in case of refusal the Data Controller will not be able to provide the above services and in particular specified in the purpose for which the consent of the interested party is required, revocable free of charge and at any time, without affecting the processing carried out before the revocation.
In both cases, the processing of such data will be carried out manually and/or automated, by means of computer systems and/or on paper medium, by employees expressly designated and/or authorized to process personal data and in this sense instructed by the Data Controller and/or by Data Processors appointed by the latter, in compliance with all the security measures and provisions in force in this regard.
In no case the personal data provided by the interested party are intended for dissemination, and may be disclosed to third parties in collaboration with the Owner and/ or for the fulfilment of legal obligations, bound to the strictest confidentiality regarding any information that may come to their attention.
In the event that some of these third parties are located outside the EU, compliance with all the requirements and security measures provided for in the context of the processing of personal data shall be ensured. Data subjects have the possibility to exercise the right to access and receive a copy of the personal data provided, obtaining the rectification and/or integration where incomplete, cancellation, limitation of processing when certain conditions are met, transfer them to another holder, in a structured, commonly used and readable format if technically feasible, not be subjected to a fully automated decision-making process unless there is a compelling need, lodge a complaint with the supervisory authority (Privacy Authority) or to act in court, as well as to object to processing on grounds relating to its particular situation, in this case preventing further processing that will remain strictly limited to the possible and proven existence of legitimate compelling and prevalent reasons of the Owner.
The exercise of these rights may take place within the limits and under the conditions provided for in Articles. 15-22 of the GDPR (fully available on the website www.garanteprivacy.it/regulamentoue), by writing to the e-mail address of the Data Controller: firstname.lastname@example.org, or by contacting its registered office, at the addresses below, or the Data Protection Officer (DPO), Inprivacy Srl: email@example.com.