Privacy Policy
INFORMATION RELATING TO THE PROCESSING OF PERSONAL DATA PURSUANT TO REGULATION (EU) 2016/679 (“GDPR”)
B2B sales platform (the “Site”)
1. DATA CONTROLLER:- To purchase “Mesauda” or “MNP” brand products: Mesauda Beauty Srl, Piazza Generale Armando Diaz 7- 20123 Milan, VAT number: 12691340967, e-mail address: support@mesaudabeauty.com;
- For the purchase of “Mesauda Nail Pro” brand products: MNP Labs Srl, with registered office in Via Massimo D'Antona 28 - 23893 - Cassago Brianza (LC)
- Personal data (name, surname, residential address, tax code);
- Contact data (email address and telephone number);
- Data relating to purchases made on the Site;
- Billing data and payment data;
- Browsing data
(also collectively referred to as the “Data”).
3. COLLECTION OF PERSONAL DATABrowsing data
The computer systems and software procedures used to operate this Site acquire, during their normal operation, some personal data, including the IP addresses or domain names of the computers used by users who connect to the Mesauda Site, the addresses in URI (Uniform Resource Identifier) notation of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful , error, etc.) and other parameters relating to the operating system and the user's IT environment.
These data are collected by means of cookies and metadata described in the Cookie Policy of the Mesauda Site and are used for the sole purpose of obtaining anonymous statistical information on the use of the site and to check its correct functioning, and are deleted immediately after processing.
The data could be used to ascertain responsibility in case of hypothetical computer crimes against the site.
4. PURPOSE AND LEGAL BASIS OF THE PROCESSINGIn some sections of the Site or in the context of commercial relations with the interested party, some of the Data listed above are requested, which will be processed by the Data Controller for the purposes and legal bases indicated below.
- To send the Owner a commercial collaboration proposal;
- For the execution of pre-contractual measures and/or a contract of which you are a party:
- for the purposes of registering a user on the Site (“Account”);
- for the management and technical administration of the Site;
- to proceed with the purchase of the products offered on the Site;
- On the basis of a legitimate interest of the Owner (soft spam pursuant to art. 130 paragraph 4 of Legislative Decree 196/2003 as updated by Legislative Decree 101/2018 - Code regarding the protection of personal data), for the promotion via and -emails of services similar to those of sales, without prejudice to the possibility of objecting at any time.
In any case, your personal data may be processed, where necessary, also for the following purposes:
- For the need to fulfill legal obligations, and in particular to fulfill obligations established by regulations and applicable national and supranational legislation (fiscal, administrative obligations, etc.);
- Based on a legitimate interest (judicial protection), to ascertain, exercise or defend the rights of the Data Controller in judicial and/or extrajudicial proceedings.
- For a period of one year for treatments relating to a collaboration proposal which is not followed by a negotiation for the establishment of a continuous commercial collaboration,
- For the entire contractual duration and, after termination, for the ordinary limitation period of 10 years, for processing whose legal basis is the execution of pre-contractual measures and/or a contract of which the interested party is a party;
- For the duration established by law (10 years for administrative-accounting obligations) for the processing of fulfillment of legal obligations;
- In the event of a judicial dispute, for the entire duration of the same, until the expiration of the terms for the possibility of appeal actions, for the treatment of judicial protection of the Data Controller on the basis of his legitimate interest.
The personal data in question, once the retention periods indicated above have expired, will be destroyed, deleted or made anonymous compatibly with the technical cancellation and backup procedures and with the accountability needs of the Data Controller.
6. MANDATORY PROVISION OF DATAThe provision of the Data processed for the purposes of the execution of pre-contractual measures and/or a contract and the fulfillment of legal obligations is necessary for the stipulation of the various contractual relationships, the execution of the orders and services requested and the fulfillment of legal obligations.
Therefore, any refusal by the interested party will make it impossible for the Owner to provide the requested service.
In relation to any optional processing, such as marketing and profiling, the provision of data is entirely optional and the interested party may express their right to opt-out at any time.
Regarding navigation data, see Cookie Policy which can be accessed from the link in the sidebar at the bottom of the page.
7. RECIPIENTS OF THE DATAThe Data may be known and processed by employees of the company functions responsible for pursuing the purposes indicated above, who have been expressly authorized for processing and who have received adequate operating instructions.
Furthermore, the Data may be processed by external parties operating as autonomous data controllers such as, by way of example, supervisory and control bodies, Public Authorities who expressly request it for administrative or institutional purposes and in general all subjects legitimated by the legislation. national and European legislation to request such data.
The Data may also be processed, on behalf of the Company, by external parties qualifying as data controllers (pursuant to art. 28 of the GDPR). These subjects, by way of example, can be:
- companies that offer email sending services;
- companies that carry out the management and/or maintenance service of the Site;
- companies that offer support in carrying out market studies;
- companies that offer services for the management of the information system and telecommunications networks, including email;
- companies that offer services for sending documentation and/or material (post offices, freight forwarders, couriers, etc.);
- banking institutions for the management of receipts and payments deriving from the execution of contracts.
- Companies that offer shipping services
The complete list of data controllers can be consulted upon request to be sent to the Data Controller using the contact details indicated in Paragraph 9 below.
8. TRANSFER OF PERSONAL DATA TO COUNTRIES NOT BELONGING TO THE EUROPEAN UNIONYour personal data will not be transferred outside the European Union.
Should this happen, in reference to the data collected using cookies, the Data Controller, to the extent of its competence, will adopt appropriate guarantees, including the adequacy decisions in force and the Standard Contractual Clauses adopted by the European Commission.
9. RIGHTS OF INTERESTED PARTIESInterested parties may ask the Data Controller for access to the Data concerning them, their cancellation, the rectification of inaccurate data, the integration of incomplete data, the limitation of processing in the cases provided for, as well as the opposition to processing, for related reasons. to your particular situation, in the cases of legitimate interest of the Data Controller:
- by contacting the Privacy Office, by post to the address via A. Diaz, N° 7 - Milano 20123, to the kind attention of the Privacy Contact;
or
- via e-mail to privacy@mesaudacosmetics.it
Furthermore, the interested parties, in the event that the processing is based on consent or on the contract and is carried out with automated tools, have the right to receive the data in a structured, commonly used and machine-readable format, as well as, if technically feasible , to transmit them to another owner without impediments (so-called right to portability).
Finally, interested parties always have the right to lodge a complaint with the competent Supervisory Authority in the Member State in which they habitually reside or work or in the State in which the violation is believed to have occurred.