INFORMATION NOTICE ON THE PROCESSING OF PERSONAL DATA
(pursuant to Article 13 of Regulation (EU) 2016/679 – “GDPR”)
The website www.mikaanika.com (hereinafter the “Site”) is owned by Natali@ Srl, with registered office at Circonvallazione delle Merci 7, Block 22 bis, Centergross, Funo di Argelato, 40050 (BO), Italy.
Through this privacy notice on personal data protection, Natali@ Srl informs users about the processing of their personal data in relation to access to the Site and to the use of the services provided from time to time through the Site (hereinafter the “Services”).
Users’ personal data (hereinafter the “Data Subjects”) will be processed in compliance with applicable European and national provisions on the protection of personal data.
1. Data Controller
1.1 The Data Controller is Natali@ Srl, VAT No. 03702621206, with registered office at Circonvallazione delle Merci 7, Block 22 bis, Centergross, Funo di Argelato, 40050 (BO), Italy (hereinafter the “Controller”),
email: info@mikaanika.com.
1.2 The Data Processor is Ms. Svetlana Mantaluta,
email: info@mikaanika.com.
2. Nature / Categories of Data Processed
The Controller processes personal data of Data Subjects, generally adult users. “Personal data” means any information relating to an identified or identifiable natural person, directly or indirectly, by reference to any other information (the “Personal Data”).
Through the Site, Natali@ Srl also collects and records users’ browsing data that enable access to and navigation of the Site. Such data are used in anonymous and aggregated form for statistical purposes and to verify the correct functioning of the Site.
In particular, the following Personal Data may be collected:
- Contact data: first name, last name, tax code, physical address, email address, phone number, mobile phone number.
- Other Personal Data: if the user decides to provide them, place and date of birth.
- Economic and transaction data: payment instruments, information regarding purchases, orders, returns, etc.
- Geolocation and connection/browsing data.
- Use of the website: access and use methods, sending and reading communications, including information collected through cookies (please refer to our Cookie Policy).
3. Purposes of Processing
Personal Data are collected following Site registration, for product purchase, to reply to requests and enquiries, and to send advertising material. In particular, Personal Data are processed for the following purposes:
A. to allow access to and navigation of the Site, including any reserved areas;
B. to respond to users’ requests through the contacts indicated on the Site and by email at info@mikaanika.com;
C. to establish and perform contractual relationships and related obligations;
D. to send newsletters for informational and promotional purposes, upon subscription through the form in the footer of each Site page or by clicking the Newsletter link.
4. Voluntary or Mandatory Provision of Data and Consequences of Failure to Provide Data
Providing Personal Data is not mandatory. However, failure to provide data necessary for purchase makes it impossible to complete orders and/or to access reserved areas if the user chooses to register.
Therefore, the provision of Personal Data requested when activating the Services is necessary for purposes A, B, C and D, as it is strictly functional to the requested Services and to compliance with legal obligations. Refusal to provide such data makes it impossible for the Controller to provide the requested Services and/or comply with legal duties.
Providing data for marketing purposes (newsletter) is optional. Failure to give consent will prevent receipt of the newsletter and/or promotional material.
For browsing data collected and recorded by the Site, please refer to the Cookie Policy.
5. Legal Basis for Processing
The legal bases for processing are:
- the user’s consent;
- performance of a contract and pre-contractual measures;
- compliance with applicable legal obligations.
6. Recipients of Personal Data
Personal Data processed for the above purposes may be communicated and/or disclosed to:
- persons authorised to process data under the direct authority of the Controller (hereinafter “Authorised Personnel”), duly trained to prevent loss, destruction, unauthorised access or unlawful processing;
- entities entitled to access data by law, or to whom data must be provided to comply with legal or regulatory obligations, as well as entities whose activity is necessary for performance of contracts to which the user is a party or for pre-contractual requests;
- third parties entrusted by the Controller with activities connected to processing and the above purposes, such as administrative, accounting, tax and auditing activities, IT system management, credit recovery, mass storage and call centre services. These third parties process data on behalf of the Controller and are appointed as Data Processors pursuant to Article 28 GDPR.
Personal Data are not transferred abroad.
7. Data Retention Period
Personal Data are retained only for the time necessary to achieve the purposes for which they were collected or any other legitimate connected purpose, plus any additional period required by civil and tax laws.
Retention periods by purpose are:
- for access to and navigation of the Site: no later than 5 years from the last activity and/or access;
- to respond to users’ requests through the “Contact us” form: for the time necessary to fulfil the request;
- for contractual relationships and related obligations: for the entire duration of the contract and in any case no longer than 10 years, for tax and contractual purposes;
- for CVs sent through the “Work” section: 6 months from receipt;
- for newsletters for informational/promotional purposes: 24 months from the date of the last consent, unless opposed.
At the end of the retention period, data will be deleted or permanently anonymised.
8. Processing Methods
Processing of Personal Data is carried out through manual, IT and telematic tools, with logic strictly connected to the above purposes and in any case ensuring security and confidentiality.
Documents are stored both electronically and on paper. Data stored electronically are kept on servers located in Italy; paper records are kept in dedicated archives at the Controller’s registered office at Circonvallazione delle Merci 7, Block 22 bis, Centergross, Funo di Argelato, 40050 (BO), Italy.
Personal Data are processed by MikaAnika collaborators and/or employees acting as Data Processors or Authorised Personnel within their functions and according to the Controller’s instructions. Personal Data are not disseminated.
9. Data Subjects’ Rights
Users may exercise the rights provided by Articles 15, 16, 17, 18, 19, 20, 21 and 22 GDPR by contacting the Controller or the Data Processor.
In particular, users have the right at any time to request from the Controller at info@mikaanika.com:
- access to their Personal Data;
- rectification;
- erasure;
- restriction of processing;
- withdrawal of consent.
Users also have the right to object at any time to processing of their Personal Data (including automated processing such as profiling, if carried out) and to data portability.
Without prejudice to any other administrative or judicial remedy, if users believe that processing violates GDPR, they may lodge a complaint with the Italian Data Protection Authority (Garante per la Protezione dei Dati Personali) using the contacts available on www.garanteprivacy.it. Users may also withdraw consent at any time.
In case of data portability requests, the Controller will provide Personal Data in a structured, commonly used and machine-readable format, without prejudice to paragraphs 3 and 4 of Article 20 GDPR.
10. Updates to the Privacy Policy
This Privacy Policy may be subject to occasional revisions. If changes are made to processing activities, Natali@ Srl will inform users accordingly. Where required by law, users will be asked to provide consent for new processing activities. If consent is refused, users’ data will not be processed under the new terms.