Privacy notice
This privacy notice applies to personal data processing by M.B.S. Srl (hereinafter referred to as “MBS”) of users (hereinafter referred to as “Data subject”) visiting our Website www.emmebiesse.net according to EU Regulation 679/2016 (hereinafter referred to as the “GDPR”).
1 – Data Controller
The M.B.S. Srl, whose registered office is at Via Giacomo Peroni, 386, 00131, Rome, Italy, is the data controller who is responsible for your personal data. If you wish to exercise your rights or ask for more details just get in touch with our team at info@emmebiesse.net.
2 – What data we collect
2.1 Browsing data
The IT systems and procedures for browsing websites typically acquire, during regular operations, some personal data whose transmission is implicit in the use of Internet communication protocols. This information is not collected in order to be associated to identified data subjects, but due to its nature can allow users to be identified.
This category includes a wide variety of browsing data such as:
(i) the user IP addresses
(ii) the uniform Resource Identifier (URI) form addresses of the resources requested
(iii) the time of the request
(iv) the method used to submit the request to the server
(v) the size of the file obtained in response
(vi) the numerical code indicating the status of the response from the server
(vii) other parameters concerning the user operating system and computer environment
2.2 Cookies
A cookie is a small text file that is stored by a computer when a website is visited by a user. Some of these cookies are necessary to the site to work properly, while others are useful to the visitor as they can safely store information such as user name or language settings. For further details see our Cookie Policy.
2.3 Data supplied voluntarily by the user
The optional, explicit and voluntary dispatching of electronic mail to the addresses indicated in this website causes the subsequent acquisition of sender personal data contained in the message (such as name, surname, addresses etc;).
3 – Data processing purposes
3.1
The data provided for in paragraphs 2.1 and 2.2 are collected in order to make the website to work properly and to optimize the user experience.
3.2
The data supplied voluntarily by the user provided for in paragraph 2.3 is processed, lawfully, fairly and in a transparent manner in order to reply to the received requests, and in addiction in order to pre-contractual measures taken in response to the data subject requests.
4 – Legal basis for the data processing and data transfer nature
Personal data processing for the purpose stated at 3.1 is made by the web site browsing as conclusive action: in this case, visitors and users agree to the hereby Privacy Notice for the processing of personal data provided for in paragraphs 2.1 and 2.2 exclusively for the purpose stated at 3.1.
With reference to the purpose 3.2 the legal basis is typically:
• the data subject consent which is it is realized by the sended request.
• The pre-contractual measure fulfilment
Data transfer is not mandatory while is necessary during the website browsing. Furthermore, an eventual denial of consent makes impossible, in some cases, to reply to your requests.
5 – Process mode
Data is processed by electronic/automatized means by mode and procedure only for the purposed stated above as long as necessary and not more. In addiction, the personal data of data subject are processed, according by Article 32 GDPR, only by identified subjects duly authorised to carrying out specific tasks and anyway in order to ensure confidentiality, integrity and availability.
Data transfer
MBS does not transfer your personal data to parties established outside the European Economic Area (EEA) except in the cases provided for in the GDPR (Articles 44-49) and only for the purposed stated in the paragraph 3.
Data subjects have the right, at any time, to exercise their rights in accordance to paragraph 9.
6 – Data retention
Personal data will be stored in a form that allows for identification only for as long as the personal data is necessary in connection with the purposes for a period related to the purposes and within 12 months from the last written communication with the data subject, or within the cancellation request.
7 – Communication and diffusion
MBS informs you that the collected data will not be shared with third parts without your explicit consent except that this transfer is needed for the purposes of carrying out the obligations and exercising specific rights for MBS in the field of employment, social security and social protection law.
8 – Data subject rights
At any time, according to Articles 15-22 GDPR, data subjects have the right to:
• ask for confirmation of whether or not your personal data have been processed (GDPR 2016/679, Article 15 – Right of access by the data subject)
• ask for having information about processing purposes, the recipients or categories of recipient to whom your personal data have been or will be disclosed and, when possible, the data retention (GDPR 2016/679, Article 15 – Right of access by the data subject)
• ask for the rectification of your personal data (GDPR 2016/679, Article 16 – Right to rectification)
• ask for the data processing restriction (GDPR 2016/679, Article 18 – Right to restriction of processing)
• ask us to supply you with some of the personal data we hold about you in a machine-readable format to another organization (GDPR 2016/679, Article 20 – Right to data portability)
• object to the personal data processing also concerning marketing purposes (GDPR 2016/679, Article 21 – Right to object)
• object to automated processing, including profiling, which produces legal effects concerning you (GDPR 2016/679, Article 22 – Automated individual decision-making, including profiling).
MBS points out that, if you are not satisfied, you have the right to lodge a complaint with a supervisory authority, such as the Italian Data Protection Authority, “Garante per la Protezione dei Dati Personali“ (www.garanteprivacy.it).