Who is the owner?
What data do we process and why?
Who will treat your data?
How long do we keep your data?
What are your rights?
1. Purpose of processing and consequences in case of refusal to provide your personal data
2. Methods and legal bases of processing
3. Communication of your personal data to third parties
4. Transfers of personal data outside the European Union
5. Retention of personal data
6. Data Controller and Data Protection Officer
7. Your rights
WHO IS THE OWNER?
The Website www.mepishop.it is managed by MEPI S.r.l. , company based in via Enrico Mattei, n. 1 - 61026 Piandimeleto (PU), acting as autonomous data controller for all activities related to the sale such as registration of orders and their evasion, the management of payments, any returns and assistance services after-sales customers.
MEPI S.r.l., with offices in Via E. Mattei, n. 1 61026 Piandimeleto (PU) Italy acts as an independent data controller for the purposes of marketing, profiling and sharing your data, if you provide your express consent to such processing. Below are the main information on the processing of your personal data carried out by MEPI S.r.l ..
For any clarification, question or requirement related to your privacy and the processing of your personal data, you can contact us at any time by sending a request to our Customer Service or by writing to the address of MEPI S.r.l. .. If you wish, you can also contact our Data Protection Officer (DPO), by writing to the above address, or by e-mail at DPO@mepi.eu.
WHAT DATA DO WE TRACE AND WHY?
Personal data that MEPI S.r.l. treats are those that you provide when you complete an order and purchase goods, and those that we collect while you surf or when you use the services offered on www.mepishop.it MEPI S.r.l. can then collect data about you such as personal data such as name and surname, shipping address and billing address, payment details and navigation data. MEPI S.r.l. deals with, with your consent, the data you provide us when you wish to receive communications or promotional information from MEPI S.r.l. , such as name and surname, email address, date of birth, preferences (eg man or woman, interest in receiving communications of our clothing products, accessories, etc.). MEPI S.r.l. it also deals with the data related to your purchases, when you express your consent to the registration of your consumption habits, preferences and lifestyle to use them for the creation of group and individual profiles ("profiling") that are used for the sending personalized communications and for conducting market research and statistical research with anonymous data, organized in aggregate form. Your personal data are processed for the following purposes:
In the aforementioned cases, the processing of your personal data is legitimate as it is necessary to execute a contract with you or to provide you with the service you have specifically requested. Only with your express consent, however, we process your personal data for:
WHO WILL TREAT YOUR DATA?
Your personal data are processed by properly instructed staff of our MEPI S.r.l. and, for organizational and functional requirements related to the provision of services on www.mepishop.it, from our suppliers. The latter have been evaluated and chosen by MEPI S.r.l. for their proven reliability and competence. Some of these subjects may also be based in non-EU countries and, in these cases, the transfer of your personal data in these countries is carried out in compliance with the guarantees provided by law.
HOW LONG DO WE STORE YOUR DATA?
WHAT ARE YOUR RIGHTS?
At any time, depending on the specific treatment, you can: revoke your consent to the treatment, know what your personal data are in our possession, their origin and how they are used, request the update, correction or integration as well, in the cases provided for by the current provisions, the cancellation, the limitation of treatment or oppose their treatment. If you wish, you can request to receive personal data held by MEPI S.r.l. that concern you in a format readable by electronic devices and, where technically possible, we can transfer your data directly to a third party indicated by you. If you believe that the processing of your personal data has been carried out illegitimately, you can file a complaint with one of the supervisory authorities responsible for compliance with the rules on personal data protection. In Italy, the complaint can be presented to the Guarantor for the Protection of Personal Data (http://www.garanteprivacy.it/). This information may undergo changes and additions over time, so we invite you to periodically check the contents. Where possible, we will try to inform you promptly of any changes made.
The company MEPI S.r.l. ("MEPI") as data controller informs you of the following on the processing of your personal data pursuant to art. 13 of EU Regulation 2016/679 on the protection of personal data ("Regulation").
1. PURPOSE OF THE TREATMENT AND CONSEQUENCES IN CASE OF REFUSAL TO SUPPLY ITS PERSONAL DATA
a) Purposes necessary for the performance of a requested service MEPI processes the personal data you provide to enable you to use the services of the Site, including information on our products and their availability, request assistance, be contacted. For these purposes MEPI processes your data such as title, name and surname, email, data on the place of residence (city, country), date of birth. For the purposes indicated above, giving your personal data is necessary and a refusal would prevent you from using the service requested. b) Further aims: marketing - profiling - sharing of data with MEPI S.rl. . With your consent, which is optional, MEPI uses your personal data for marketing purposes, ie to send you promotional newsletters, commercial or advertising messages about events, promotional and commercial initiatives of MEPI, market research and surveys for the satisfaction survey, as well as to perform statistical analysis with anonymous data, organized in an aggregated form. The marketing activities are carried out by email, newsletter, telephone calls by operator, text message, MMS, chat, instant messaging, social networks and traditional mail, including sending invitations to events organized by MEPI. You can at any time indicate the preferred mode of contact among those listed above and may object to receiving promotional communications through all or only some of the communication channels indicated above. With your consent, which is optional, MEPI in the online site through Internet sites or MEPI accounts on social media, collects information related to your preferences, habits, lifestyle and the details of purchases made to use them for creating profiles of group and individual ("profiling") that are used for sending personalized communications and for conducting market research and statistical research with anonymous data, organized in an aggregated form. The personalized marketing activities are carried out by email (newsletter), telephone, text message, MMS, chat, instant messaging, social networks and traditional mail, including the invitation to events. You can at any time indicate the preferred mode of contact among those listed above and may object to receiving promotional communications through all or only some of the communication channels indicated above. With your consent, which is optional, MEPI uses your personal data for purposes of sharing them with the group companies, for the carrying out of marketing activities on their part, that is to say to send you promotional newsletters, commercial communications or advertising on the events, the promotional and commercial initiatives of the MEPI group companies, market research and surveys for the survey of satisfaction, as well as to perform statistical analyzes with anonymous data, organized in aggregate form. The marketing activities are carried out by email, newsletter, telephone calls by operator, text message, MMS, chat, instant messaging, social networks and traditional mail, including the sending of invitations to events organized by the MEPI group companies or to the MEPI group participate. You can at any time indicate the preferred mode of contact among those listed above and may object to receiving promotional communications through all or only some of the communication channels indicated above. For the marketing, profiling and sharing of your data MEPI uses data such as title, name and surname, email, data relating to the place of residence (city, country), date of birth, data related to the interaction with our digital initiatives (Internet sites, social media), products displayed, requested and / or purchased, participation in events organized by MEPI. Conferring your personal data for the purposes of marketing, profiling and sharing of your data above is optional and any refusal will not have any consequence on your registration to the website.
2. METHODS AND LEGAL BASIS OF TREATMENT
MEPI processes your personal data with and without the aid of electronic tools, based on the logic and procedures consistent with the purposes indicated below and in compliance with the Regulations, including the profiles of confidentiality and security. The data may be provided by you at the time of registration on the website www.mepishop.it, acquired during visits to interact with our digital initiatives (websites, social media), or during events organized by MEPI. In compliance with the Regulations, the personal data concerning you from time to time acquired by you or authorized third parties are used to update and correct the information previously collected. MEPI processes your personal data on the basis of the following legitimacy criteria:
Personal data are accessible to our staff duly authorized on the basis of need criteria and are disclosed to third parties in the following cases:
(i) when the communication is required by applicable laws and regulations with respect to third parties who are legitimate recipients of communications, such as authorities and public bodies for their respective institutional purposes;
(ii) communication to third parties in the case of extraordinary transactions (eg mergers, acquisitions, sale of companies, etc.).
Your personal data are also shared with our service providers, e.g. for services of a technical and organizational nature that are functional to the purposes indicated above as independent collaborators, also in an associated form - for ex. companies that manage our website, companies specialized in market research and data processing, advertising companies, etc. We provide these entities with only the data necessary to perform the agreed services and they act as Data Processors, based on the instructions received from MEPI. MEPI does not communicate its data to third parties so that they can use it for marketing or profiling purposes.
4. TRANSFERS OF PERSONAL DATA OUTSIDE THE EUROPEAN UNION
Some of the aforementioned subjects may also be established outside the European Union, in countries that do not guarantee an adequate level of protection to personal data according to the standards established by the Regulations. MEPI takes the necessary precautions for a legitimate data transfer (eg through the implementation of the Standard Contractual Clauses approved by the European Commission). You can request information on the transfer of your personal data abroad at any time by contacting MEPI or the Data Protection Manager of MEPI at the addresses indicated below.
5. CONSERVATION OF PERSONAL DATA
Personal data processed to respond to a specific request is kept for the time necessary to perform the requested service. For marketing, profiling and data sharing purposes with the company MEPI S.r.l. , the data are kept for the time strictly necessary for the pursuit of said purposes, within the limits allowed by the Regulation, in particular its data will be processed for a period of 12 months for profiling purposes and for 24 months for marketing purposes. You can at any time request the deletion of data for these purposes and object to the processing of data for marketing purposes.
6. HOLDER OF THE TREATMENT AND RESPONSIBLE OF DATA PROTECTION
The data controller is MEPI S.r.l. , based in Via E. Mattei, n. 1 - 61026 - Piandimeleto (PU), Italy. The Data Protection Officer is domiciled at the registered office of the Data Controller and available at the following email address: DPO@mepi.eu.
7. YOUR RIGHTS
You can contact MEPI S.r.l. as Data Controller or Data Protection Officer at the above addresses to get an updated list of our data processors (that is, our service providers), the subjects to whom the data are communicated and to exercise at any time the following rights as per art. 15 ss. of the Rules; obtain confirmation of the existence or otherwise of your data, verify its content, origin, accuracy, request integration, updating, rectification, cancellation, anonymity, request data portability, limitation of processing, opposition to processing for legitimate reasons, es. opposition to marketing activities, submit an application to the Supervisory Authority (the Guarantor for the Protection of Personal Data).