Privacy Policy

WEB PRIVACY POLICY - Information document pursuant to and for the purposes of Article 13, Reg. (EU) 2016/679.

Pursuant to Regulation (EU) 2016/679 (hereinafter "GDPR"), this page describes how we process personal data. This information is provided pursuant to Article 13 GDPR. The information does not apply to other third-party websites that may be consulted via links on this website, for which no liability is accepted.

Personal data that can be processed

Personal data: any information relating to an identified or identifiable natural person ('data subject'); an identifiable person is one who can be identified, directly or indirectly, by reference in particular to an identifier such as a name, an identification number, location data, an online identifier or to one or more features of his physical, physiological, genetic, mental, economic, cultural or social identity (C26, C27, C30 GDPR).

Contractor/user data

Navigation data

The computer systems and software procedures used to operate this site acquire, in the course of their normal operation, certain personal data whose transmission is implicit in the use of Internet communication protocols.

This category of data includes the IP addresses or domain names of the computers and terminals used by users, the URI/URL (Uniform Resource Identifier/Locator) notation addresses of the resources requested, the time of the request, the method used in submitting the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters relating to the user's operating system and computer environment.

Data communicated voluntarily

The optional, explicit and voluntary sending of messages to the contact addresses indicated on this site and/or the filling in of data collection forms entails the subsequent acquisition of the sender's address, which is necessary to reply to requests, as well as any other personal data entered.

Information on the processing of personal data through social media platforms

With regard to the processing of personal data carried out by the managers of the Social Media platforms used by the Controller, please refer to the information provided by them through their respective privacy policies. The Owner processes the personal data provided by users through the pages of the dedicated Social Media platforms, in order to manage interactions with users (comments, public posts, etc.) and in compliance with the regulations in force.

Specific disclosures: Specific notices may be present on the pages of the Site in relation to particular services or processing of the data provided.

COOKIES

For Cookies and other tracking systems see the cookies policy in the footer of the site and at the following LINK.

SUBJECTS OF TREATMENT

The data controller pursuant to Articles 4 and 24 of EU Reg. 2016/679 is MANDELLI SRL, with registered office in Via Tommaso Grossi 5, Carate Brianza (MB) in the person of the pro-tempore Legal Representative.

	PURPOSE OF PROCESSING	LEGAL BASIS	DATA RETENTION PERIOD	NATURE OF CONTRIBUTION
A)	Browsing this website Activities strictly necessary for the operation of the site and the provision of the navigation service on the platform. The data required for the use of web services will also be processed for the purpose of: · obtain statistical information on the use of the services (most visited pages, number of visitors per time slot or per day, geographical areas of origin, etc.); · monitor the proper functioning of the services offered.	Legitimate interest \| rights of the data subject Art.6(f) and recital 47 GDPR: processing is necessary for the pursuit of the legitimate interests of the data controller or a third party.	Up to the duration of the browsing session and up to a maximum of a further 7 days (without prejudice to any need for investigation of offences by the judicial authorities)	Necessary to ensure navigation
B)	Analysis of navigation through the use of cookies and similar technologies. More information in the cookie policy	For necessary non-technical cookies and similar technologies, processing is based on consent to the processing of personal data (Art. 6 para. 1 lit. a and C42, C43 GDPR). Consent is given through the site's banner and cookie policy	More information in the cookie policy	More information in the cookie policy
c)	Contact or information request via telephone contact or dedicated form	Contract - pre-contractual measures Art.6(b) and recital 44 GDPR: Processing is necessary for the performance of a contract to which the data subject is party or for the performance of pre-contractual measures taken at the request of the data subject	1 year	Required. Failure to provide this data will result in the impossibility of receiving a reply to your request.
D)	Direct marketing for sending advertising or direct sales material or for carrying out market research, approval or commercial and promotional communication, newsletters, by automated means (e-mail). There will be no transfer of personal data. For a complete list of group companies and partners, please write to info@mandelli.net . The Controller, in order to compare and possibly improve the results of automated communications, uses systems with reports. Thanks to the reports, the owner will be able to know, for example: the number of readers, openings, and clicks; the devices and operating systems used to read the communication; details of the activity of individual users; details of e-mails sent, e-mails delivered and not delivered, and e-mails forwarded; All this data is used for the purpose of comparing, and possibly improving, the results of communications.	Consent of the person concerned Art. 6(a) and recitals C42, C43 GDPR: the data subject has consented to the processing of his or her data for one or more specific purposes.	Until consent is revoked (opt - out)	Optional, but necessary to obtain the newsletter service. Failure to provide it will prevent the Controller from sending you direct marketing communications
E)	Non-automated profiling Personal data will be entered in company data bases/CRMs/platforms, in order to carry out analyses, evaluations and to divide interested parties into homogeneous groups according to specific characteristics of the company's activities for better management of services and to send targeted promotional communications.	Consent of the person concerned Art. 6(a) and recitals C42, C43 GDPR: the data subject has consented to the processing of his or her data for one or more specific purposes.	Until consent is revoked (opt - out), but no longer than 12 months	Optional. Failure to provide the necessary data will result in the impossibility of carrying out analyses and sending targeted communications.
F)	Handling of requests by data subjects to exercise their rights under Art. 15 et seq. of the GDPR (data subject rights)	The processing is necessary for compliance with a legal obligation to which the data controller is subject Art. 6 para. 1(c) and (C45) GDPR	5 years from the closing of the application, subject to litigation	The provision of personal data is compulsory, as it is indispensable to be able to fulfil legal obligations

RECIPIENTS OR CATEGORIES OF RECIPIENTS OF THE DATA

Personal data will be communicated, also on the basis of the purposes envisaged in specific areas, to subjects who will process the data as autonomous Data Controllers or Data Processors (art. 28 GDPR) and processed by natural persons (art. 29 GDPR) acting under the authority of the Data Controller and Data Processors on the basis of specific instructions given regarding the purposes and methods of processing, for specific purposes on the basis of the area of reference.

The data will be communicated to recipients belonging to the following categories:

Parties based in Italy that provide services for the website and communication networks, including e-mail, hosting and platform management;
Subjects based in Italy, with which the Controller has signed agreements and prior consent, where applicable;
For direct marketing, subject to prior consent;
For third-party marketing, with prior consent, to the categories of third parties listed above in the specific purpose (list on request);
For collaboration requests, to parties for the management of selection activities;
Competent authorities for the fulfilment of legal obligations and/or provisions of public bodies, upon request

The list of data processors is available by writing to: info@mandelli.net.

DATA TRANSFER TO A THIRD COUNTRY AND/OR INTERNATIONAL ORGANISATION

Personal data may be transferred to countries outside the EEA. In this case, the Controller ensures that personal data is properly protected by checking:

That the European Commission has made specific agreements with these countries
The implementation of additional measures for non-EEA countries that require it

For further information, the user may contact the owner at the following address: help@eleveit.it

AUTOMATED PROCESSES

Personal data will be subject to traditional manual, electronic and automated processing. Please note that no fully automated decision-making processes are carried out.

With reference to the profiling activity, which may be carried out with the express consent of the person concerned as indicated in the purposes, it will be carried out through the intervention of the operator who will process the profile of the person concerned and analyse his/her habits and consumption choices, in order to improve the commercial offer and services of the owner (non-automated profiling).

RIGHTS OF THE DATA SUBJECT

You may assert your rights as expressed in Art. 15 et seq. GDPR by contacting the Data Controller at the above e-mail address. You have the right, at any time, to request access to your personal data (Art. 15), rectification (Art. 16), deletion of the same (Art. 17), restriction of processing (Art. 18). The data controller shall inform (art. 19) each of the recipients to whom the personal data have been transmitted of any rectification or erasure or restriction of processing carried out. The data controller shall inform the data subject of these recipients if the data subject so requests.

In the cases provided for, you have the right to the portability of your data (Art. 20), in which case they will be provided to you in a structured, commonly used and machine-readable format. You have the right to object (Art. 21), at any time, to the processing of your data based on legitimate interest, and in cases where the legal basis is consent, you have the right to revoke the consent given without prejudice to the lawfulness of the processing based on the consent before revocation.

To stop receiving automated direct marketing communications (e-mail, instant messaging) or to revoke your consent to (non-automated) profiling, please contact the data controller at: info@mandelli.net .

If the data subject considers that the processing of personal data carried out by the Data Controller is in breach of the provisions of Regulation (EU) 2016/679, he/she has the right to lodge a complaint with the Supervisory Authority, in particular in the Member State in which he/she normally resides or works or in the place where the alleged breach of the Regulation occurred (Garante Privacy https://www.garanteprivacy.it/), or to take appropriate legal action.

The Controller reserves the right to amend, update, add or remove parts of this notice