Privacy and Cookie Policy
This information has been prepared pursuant to art. 13 of Regulation (EU) 2016/679 "on the protection of natural persons with regard to the processing of personal data, as well as the free circulation of such data" (GDPR) and Legislative Decree 196/2003 (Privacy Code) as amended by Legislative Decree 101/2018.
We inform you that
This privacy policy applies exclusively to the online activities of the site www.mymurano.it and is valid for users of the site. It does not apply to information collected through channels other than this website. In compliance with the obligations deriving from national and EU legislation on the protection of personal data, this site respects and protects the privacy of users.
The collection and processing of your personal data will be carried out in accordance with the following:
1. Data controller of personal data
The data controller is: Vecchia Murano V.M. srl., with registered office in Castello 4392/a, 30122 Venice (VE). Telephone: 041 830 6669
You can contact the Data Controller for questions relating to the processing of your personal data at the following address: info@vecchiamurano.it.
2. Types of personal data processed
The personal data collected and processed through this website are the following:
Navigation data
Like all websites, this site also acquires some personal data whose transmission is implicit in the use of Internet communication protocols. Navigation data is acquired by the computer systems and software procedures of this website for its normal operation. This information is not collected to be associated with identified interested parties, but by its very nature could, through processing and association with data held by third parties, allow users to be identified.
This category of data includes IP addresses or domain names of computers used by users who connect to the site, URI (Uniform Resource Identifier) addresses of requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters relating to the operating system and the user's IT environment.
Data provided by the user
This is data entered voluntarily by the user when using the site and its services: name and surname, email address, telephone number, tax code, delivery address, billing address (if different from the delivery address), date of birth (optional), payment data in relation to the chosen means, content of orders placed on the site, content of the request for assistance.
Cookies
For the cookies processed by www.mymurano.it, please refer to the relevant cookie policy.
3. Purpose of processing and related legal basis
The data collected from the user are processed for the achievement of specific purposes and only in the presence of a specific legal basis provided for by the applicable law on privacy and personal data protection, specifically:
when the processing is necessary for the provision of a service provided by the data controller as requested by the user (execution of the contract to which the data subject is a party or execution of pre-contractual measures adopted at the request of the same);
in the presence of a legitimate interest of the data controller;
the data controller is required by law to process personal data;
with the user's consent.
The following table lists the purposes for which the user's personal data are processed by the data controller and the legal basis on which the processing is based.
Browsing data
Allow the use of all the features of the site (purpose of processing). Execution of a contract (legal basis).
Obtain anonymous statistical information on the use of the site and to check its correct functioning (purpose of processing). Execution of a contract (legal basis).
Ascertainment of liability in the event of hypothetical computer crimes to the site data (purpose of processing). Legitimate interest of the owner to protect company assets and prevent the commission of crimes, as well as guarantee users. Legal obligation (legal basis).
Data provided by the user
Creation and subsequent operational, technical and administrative management of the account created by the user during registration (purpose of processing). Execution of a contract (legal basis).
Purchase products on the site (purpose of processing). Execution of a contract (legal basis).
Filling out forms to contact customer service (purpose of processing). Execution of a contract (legal basis).
Fulfilling legal, contractual, accounting and/or tax obligations related to the use of the site services by the user (purpose of processing). Legal obligation (legal basis).
Protecting your rights in the event of disputes arising from the use of the site services by the user (purpose of processing). Legitimate interest of the owner to defend his rights (legal basis).
Carrying out statistical analyses in anonymous and/or aggregate form to provide and improve services – for this purpose, some aggregate data will be combined with similar information collected from other users with the purpose of creating functions such as “Best Sellers” (purpose of processing). Legitimate interest of the owner to carry out his business activity and improve the site and related services (legal basis).
Send commercial communications via email only to users who have already purchased products on the site and relating to the products purchased, in order to collect opinions and reviews from users on the same products and the service (purpose of processing). Legitimate interest of the owner to carry out its business activity and improve the site and related services (legal basis).
Carry out security checks in relation to the use of the site and related services (purpose of processing). Legitimate interest of the owner to protect the security of the site and ascertain any violations and/or technical problems by allowing intervention (legal basis).
Profiling activities via cookies (purpose of processing). Consent (legal basis).
Sending informative newsletters related to the activity of the owner (purpose of processing). Consent (legal basis).
4. Nature of the provision of data and consequences of any refusal to respond
With regard to the provision of a service offered by the site and requested by the user (the legal basis of which is identified in the execution of a contract) and the fulfillment by the owner of legal obligations, connected to the use of the site's services by the user (the legal basis of which is identified in the legal obligation), the related data processing is necessary. Therefore, any opposition by the user to the processing of his/her personal data for such purposes (provision of services and fulfillment of legal obligations) will make it impossible for the data controller to fulfill his/her obligations.
With regard to the purposes pursued by the data controller on the basis of his/her legitimate interest, as promptly identified in the table above, the related data processing is necessary. Therefore, any opposition by the user to the processing of his/her personal data for such purposes will make it impossible for the data controller to pursue the aforementioned purposes.
The provision of personal data is voluntary for the sending of informative newsletters related to the company's activity and for profiling via cookies. Failure to provide the same will not have any repercussions on the other activities carried out by the data controller and will only result in the failure to send, to the interested party, commercial communications via newsletters and/or profiling of the interested party via cookies.
For completeness, please note that, pursuant to Article 7 of the GDPR, the interested party has the right to withdraw his/her consent at any time, without prejudice to the lawfulness of the processing based on the consent given before the withdrawal.
5. Method of processing
The processing will be carried out using manual, computerized and telematic tools with logic strictly related to the purposes for which they were collected in compliance with the principle of limitation of purposes as well as all the other principles present in Article 5 of the GDPR. In particular, in compliance with the principles of integrity and confidentiality, pursuant to which specific security measures are adopted to prevent data loss, illicit or incorrect use and unauthorized access. The data will not be transferred to countries outside the European Economic Area.
6. Personal data retention periods
The user's data is retained by the owner for the period strictly necessary to provide the service requested by the user (see services listed in the table in paragraph 3), in compliance with applicable legislation. In particular, where the data is linked to an account created by the user on the site and to purchases made there, the owner will proceed to automatically delete the data from the site in the event that the user independently deletes his/her account.
The data relating to the invoices of purchases made by the user on the site will be deleted by the owner after 10 years from the fiscal year of issue of the invoice, in compliance with the obligations set forth by the applicable legislation.
Furthermore, for marketing purposes (newsletter), the data will be retained for 2 years starting from the collection of consent.
The user is also invited to consult the cookie policy regarding the terms of retention of the individual cookies used by the website and possibly authorized by the user.
The data transmitted to any service providers will be processed by them for the time strictly necessary to carry out the tasks entrusted to them.
7. Scope of communication and dissemination
In addition to the data controller, categories of persons involved in the organization of the site (administrative staff, marketing, system administrators) may have access to the data, as well as third parties, external service providers (i.e. 7Pixel, Feedaty and Awin who manage promotional pages and advertising services affiliated with the site, Mailup which manages the sending of the newsletter and Tesecom Srl which takes care of the maintenance of the site), duly appointed as Data Processors and who will process the data in accordance with the purpose for which the data were originally collected.
The data may also be communicated to all subjects to whom communication is due by virtue of legal obligations.
8. Rights of interested parties
Users (interested parties to the processing) have a series of rights under the GDPR. These are:
the right to access their personal data (once they have had confirmation that their data is being processed by the controller);
the right to obtain the rectification and integration of their data;
the right to obtain the erasure of your data;
the right to obtain the restriction of the processing of your personal data under certain conditions;
the right to receive the personal data you have provided to the controller in a structured, commonly used and machine-readable format and to transmit them to another controller if technically feasible;
the right to object to the processing of your personal data where there are reasons relating to your particular situation;
the right not to be subject to an automated decision-making process;
the right to obtain communication in the event that your data has been subject to a serious breach, likely to result in a high risk to the rights and freedoms of natural persons;
the right to withdraw consent to the processing at any time;
the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged breach. For Italy, the supervisory authority is the Guarantor for the protection of personal data, Piazza Venezia 11, 00187, Rome, telephone: +39 06.696771, e-mail: protocollo@gpdp.it, pec: protocollo@pec.gpdp.it.
Requests should be addressed to the data controller, who undertakes to make it as easy as possible for interested parties to exercise their rights, at the contact details indicated in point 1.
9. Updates
This Site Privacy Policy is updated as of November 10, 2024 and may be subject to periodic updates. Any substantial changes will be published at this address and it is the user's responsibility to periodically monitor this website to find out about the validity or modification of these conditions.