PRIVACY policy

This information (hereinafter, the “ Privacy Policy ”) relates to the processing of your personal data while browsing the website www.maisonclavie.it (hereinafter, the “ Website ”) carried out by Impresa Novara Srl, Via Treviso no. 36 - Turin, VAT number10750500018, Email: info@maisonclavie.it (hereinafter, the “ Data Controller ”), in compliance with current legislation on the protection of personal data, including EU Regulation 2016/679 (“GDPR”).

1. IDENTITY AND CONTACT DETAILS OF THE REPRESENTATIVE

The Data Controller is Impresa Novara Srl.

Since the Data Controller is established within the EU, no representative has been appointed.

2. MEANS OF PROCESSING

To complete the connection to the Website, we collect some personal data from you. The data we collect includes, for example:

  • the IP address of the device you are using;
  • the date and time of access;
  • the type of browser used;
  • the operating system used.

To subscribe to the newsletter, the following will be processed:  

  • name, surname;
  • email address.

To complete the 'contact form' request, the following will be processed:  

  • name, surname;  
  • email address;
  • Telephone number

3. Purpose of the processing and legal basis of the processing

Your personal data will be processed for the following purposes:

  1. Personal data processed during browsing of the Website: the provision of such personal data is a contractual obligation, without which the Website's services cannot be properly provided or function correctly.
  1. Personal data processed through newsletter subscription: the provision of such personal data is optional and based on your consent, without which you would not be able to complete your subscription to the newsletter service offered by the Data Controller.  
  1. Personal data processed via contact forms: the provision of such personal data is optional and is based on the Data Controller's legitimate interest in following up on your contact requests via the appropriate form on the Website. Without this, the Data Controller will not be able to respond to such requests.  

4. Source of personal data  

Only personal data provided in accordance with the Privacy Policy will be processed. The Data Controller will not process personal data from publicly accessible sources.  

5. Recipients and categories of recipients of personal data

The following may be recipients of personal data:

  • companies offering information society services, including, in particular, those offering hosting and newsletter services;  
  • companies providing commercial and marketing services on behalf of the Data Controller;

6. Categories of personal data

We will process necessary personal data to complete your connection to the Website, subscription to the newsletter, and the sending of requests via the contact form. Under no circumstances will special categories of personal data, as defined in Article 9 of the GDPR, be processed.

7. Data transfer  

The Data Controller intends to transfer Personal Data to entities established in a third country outside the European Union or to an international organisation. These entities include, by way of example:

  • communications companies that carry out communication activities on behalf of the Data Controller;  
  • companies offering information society services;
  • companies offering hosting services;
  • the communication company's service providers;

The transfer of personal data to such entities, where established in a third country, or to an international organisation, takes place in the presence of an adequacy decision by the European Commission, which has determined that the third country, the territory or one or more specified sectors within that third country, or the international organisation in question ensure an adequate level of protection for your rights. In the absence of such decisions, where deemed appropriate, the Data Controller reserves the right to enter into specific and separate agreements obliging these entities to adopt adequate security measures, including organisational measures, intended to provide appropriate safeguards for your rights.  

Google Inc., in particular, is contractually bound to ensure adequate protection of the rights of data subjects. Data may thus be transferred to the following countries: United States of America.  

To obtain a copy of such data or the location where these have been made available, simply send the relevant request to the Data Controller, at the addresses shown above.

8. Retention period of personal data  

  • The personal data processed and stored for the purposes referred to in point 3.a (contractual purposes) are processed and stored by the Data Controller in accordance with the provisions of current legislation, and in any event for a period of no more than 10 years from the termination of the effects of the contract, should it be concluded, unless otherwise required by law.
  • Personal data processed and stored for the purposes referred to in point 3.b (marketing purposes) are processed and stored by the Data Controller until consent is revoked, unless otherwise required by law.
  • Personal data processed for the purposes referred to in point 3.c (purpose of responding to requests) provided voluntarily via email or form and processed to respond to your requests will be retained for a period of time strictly necessary to achieve this purpose and, in any event, for a period of no more than 12 (twelve) months from the date of the individual collection.  

9. Optional nature of consent and consequences of failure to provideconsent

  • In relation to personal data processed for the purposes referred to in point 3.a of this Privacy Policy (contractual purposes), the communication of personal data constitutes an obligation. If you do not provide such personal data, it will not be possible to provide connection and browsing services on the Website.
  • In relation to personal data processed for the purposes referred to in point 3.b of this Privacy Policy (consent), the communication of personal data is optional. If you do not provide this personal data, it will not be possible to provide the newsletter service.
  • In relation to personal data processed for the purposes referred to in point 3.c of this Privacy Policy (legitimate interest), the communication of personal data is optional. If you do not provide this personal data, it will not be possible to respond to requests via the contact form.

10. Right to object  

As a data subject, you have the right to object under the following terms:

  • the right to object at any time, for reasons relating to your particular situation, to the processing of Personal Data concerning you pursuant to Article 6, paragraph 1, letters e) or f) of the GDPR. The Data Controller will refrain from further processing your personal data unless the latter demonstrates compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or for the establishment, exercise, or defence of legal claims;
  • where personal data are processed for direct marketing purposes, you have the right to object at any time to processing of personal data concerning you for such marketing, including profiling to the extent that it is related to the direct marketing;
  • if you object to processing for direct marketing purposes, your personal data will no longer be processed for such purposes. You may object to the processing of your personal data for direct marketing purposes, even only partially, for example by objecting to the sending of promotional communications via automated and/or digital tools, or to the sending of paper communications and/or the receipt of telephone communications;
  • where your personal data are processed for scientific or historical research purposes or statistical purposes pursuant to Article 89(1) of the GDPR, you have the right, on grounds relating to your particular situation, to object to the processing of personal data, unless the processing is necessary for the performance of a task carried out for reasons of public interest.

11. Other rights

The Data Controller also wishes to inform you that you have the following rights:

  • Right of access: you have the right to obtain confirmation from the Data Controller as to whether personal data concerning you is being processed and to access your personal data and specific information, in accordance with Article 15 of the GDPR;
  • Right to rectification: you have the right to obtain from the Data Controller the rectification of inaccurate personal data concerning you without undue delay. Taking into account the purposes of the processing, you have the right to obtain the integration of incomplete personal data, including by providing a supplementary statement, in accordance with Article 16 of the GDPR;
  • Right to erasure, including the right to withdraw consent: You have the right to obtain from the Data Controller the erasure of your personal data without undue delay or to withdraw consent to the processing, if the reasons defined in Article 17 of the GDPR apply. You have the right to withdraw your consent at any time, without affecting the lawfulness of processing based on your consent before its withdrawal;
  • Right to restriction of processing: you have the right to obtain from the Data Controller the restriction of processing, where one of the reasons listed in Article 18 of the GDPR applies;
  • Right to data portability: you have the right to receive your personal data provided to the Data Controller in a structured, commonly used and machine-readable format and you have the right to transmit these data to another Data Controller without hindrance from the Data Controller indicated in this Privacy Policy, as provided for by Article 20 of the GDPR;
  • Right of the contracting party to object to commercial communications: in your capacity as contracting party, you have the right to object at any time, free of charge, to receiving commercial communications from the Data Controller;  
  • Right to lodge a complaint with the Data Protection Authority: you have the right to lodge a complaint with the Data Protection Authority, to complain about an infringement of the regulations on personal data protection, in accordance with Article 77 of the GDPR.  

12. How to exercise your rights  

You may exercise the rights indicated in the Privacy Policy by addressing your requests directly to the Data Controller at the email address info@maisonclavie.it, or by sending the relevant communication by registered mail with return receipt to the address Via Treviso no. 36 - Turin. You may lodge a complaint with the Italian Data Protection Authority using the methods and contact details provided on the official website https://www.garanteprivacy.it/home/footer/contatti.  

13. Accessibility of the Privacy Policy

The Privacy Policy is available on the Website or at the Data Controller's offices. If requested specifically, subject to proof of your identity, the Data Controller can provide you with the information orally by telephone on: +39 011 33.58.145.  

14. Amendments  

The Data Controller reserves the right to amend the Privacy Policy, including to comply with changes in Italian and/or European Union legislation, or in response to technological innovations. Any new versions of the Privacy Policy will be posted on the Website. Please consult the Privacy Policy periodically. You will be notified of any amendments via a pop-up on the Website or through different methods and/or IT tools.  

In the event of substantive amendments to the Privacy Policy, which introduce new processing purposes and/or categories of personal data processed, the Data Controller will inform you and request the necessary consent via a pop-up on the Website or through different methods and/or IT tools.