Information on the protection of personal data
Under European Regulation no. 679 of 2016 (the “Privacy Regulation”), MDF ITALIA SRL SOCIETA’ UNIPERSONALE – Tax code and VAT IT 09683280961, Operating headquarters at via Fratelli Cervi, 4/A, 22066 Mariano Comense (CO), Registered office at Via della Posta 10, 20123 Milan, e-mail info@mdfitalia.it, the Data Controller (hereinafter, the “Controller” or the “Company”), wishes to inform you that your personal data will be processed to manage your request for information.
In the “Configurator” area you can select a partner shop and send a message containing information about the configuration of a product. The message will be sent both to the Company and, subject to your express and optional consent, to the selected partner shop.
The message must not include any special categories of data within the meaning of Article 9 of the Privacy Regulation (e.g. data concerning your health, religious beliefs, etc.). Should this information be included, the message will be immediately cancelled and left unanswered.
The request for information from the Company will be answered to in a different manner depending on the profession and place of origin of the data subject and the type of request selected from those indicated therein. For this reason the Company, in order to answer the Request for Information, will ask you to provide and will process the following data: Name and Surname, Email, Profession (Architect / Designer, Retailer, Press, Private Person, Supplier / Partner, Other), and data on your origin (town, province and country).
The legal basis of data processing is:
i) with respect to the Company: the supply of a service under Article 6(1) b) of the Privacy Regulation;
ii) with respect to the selected partner shop: your express and optional consent under Article 6(1) a). Should you not give your consent, your data cannot be sent to the selected partner shop and therefore it will not be possible to provide you with a complete and comprehensive response.
The data you provide will be processed mainly on paper and/or computer under the authority of the Controller, by persons specifically authorised and trained to process data (under Article 2-quaterdecies of the Privacy Code and Articles 28 and 29 of the Privacy Regulation). Please note that suitable security measures have been taken, also in accordance with Articles 5 and 32 of the Privacy Regulation, to prevent any data loss, unlawful or incorrect use and unauthorised access.
The data may be communicated, within the EU, in full compliance with the provisions of the Privacy Regulation, to the following entities: to public entities and/or authorities, where required by law or at their request; to external structures, entities and companies used by the Controller to perform activities connected with, instrumental to or ensuing from performance of the “Configurator” service; to external consultants, except where they are designated in writing as Data Processors. The updated list of designated Data Processors may be supplied at the request of the data subjects.
Without prejudice to any legal obligations, your personal data will be stored for the time strictly necessary to answer your request for information.
You may enforce your rights under Article 15 et seq. of the Privacy Regulation at any time, to access, rectify, transform, block, erase and restrict processing.
Should the Company fail to provide a timely reply or should it provide an inadequate response, or should you believe there has been a breach of the Privacy Code and/or the Privacy Regulation, you may lodge a compliant with the Personal Data Authority, using the following details: www.gpdp.it – www.garanteprivacy.it, Email: garante@gpdp.it, Fax: (+39) 06.69677.3785, Switchboard: (+39) 06.69677.1.