PRIVACY POLICY

This Privacy Policy is provided pursuant to art. 13 of European Regulation no. 679/2016 and applies exclusively to all Data collected through the Website www.mina-mina.it This Privacy Policy is subject to updates that will be published on the Website from time to time. This Privacy Policy, together with the Terms and Conditions , any other documents referred to in it and the Cookie Policy , establish the basis on which the Personal Data of the Data Subject will be processed.

Data Controller

The Data Controller of the Data collected by this Website is Mina Mina di Marianna Randazzo - Via Maria Bricca 14 - 10131 Torino To - email info@mina-mina.it

Personal Data

Personal Data means any information relating to an identified or identifiable natural person (Data Subject). An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier, or one or more factors specific to his or her physical identity.

Category of Personal Data processed

Among the Personal Data processed by this Website, independently or through third parties, there are Common Data such as: Cookies, Usage Data, name, surname, email, telephone, Tax data useful for the purchase (including tax code) and Personal Data useful for the delivery of the purchased Product.

Personal Data Processing Methods

The Personal Data provided or acquired will be subject to Processing based on the principles of correctness, lawfulness, transparency and protection of confidentiality in accordance with current legislation. The Data Controller processes the Personal Data of Users by adopting appropriate security measures to prevent unauthorized access, disclosure, modification or destruction of Personal Data. Processing is carried out using computer and/or telematic tools, with organizational methods and logic strictly related to the purposes indicated.

Purpose of the Processing of Personal Data and Legal Basis

Personal Data may be collected independently by the Data Controller or through third parties. In this case, the computer systems and software procedures used to operate this Website acquire some Personal Data of Users, of a technical-IT nature (e.g. IP address, type of browser used, operating system, domain name and website addresses from which access or exit was made, etc.), the transmission of which is inherent to the normal functioning of the Internet. Such Data may be processed for the sole purpose of obtaining anonymous statistical information on the use of the site and/or to check its correct functioning and will be deleted immediately after processing. The Data that the Data Subject chooses to provide spontaneously will be processed in compliance with the conditions of lawfulness pursuant to art. 6 GDPR and will be processed to allow the Website to provide its services, as well as for the Purposes indicated below and will be retained for the time necessary to fulfill the aforementioned Purposes.

The purposes of the processing are:

a) Pre-contractual information and obligations

The Data will be processed in order to be contacted again or to follow up on specific requests addressed to the Data Controller by the Interested Party for communications of an informative nature and/or for the interest in purchasing the Products of the same Data Controller, via email messages or by filling out the contact form and other communication tools such as, for example, telephone.

Legal basis : this processing is optional and based on the consent of the interested party, however the provision of the Data is necessary for the pursuit of the indicated purpose.

Data retention period : until the interested party revokes their consent.

b) Processing necessary within the framework of a contract

The Data will be processed in order to fulfill the obligations arising from the contract stipulated between the Interested Party and the Owner for the sale of the Products present on the Website, to contact the Interested Party in relation to the Contract and for the management of the same, for the management of requests for legal guarantees, assistance, requests for withdrawal, management and resolution of the Contract itself.

Legal basis : this processing is necessary for the performance of a contract to which the Data Subject is party, for the performance of pre-contractual measures or for compliance with a legal obligation to which the Data Controller is subject.

Data retention period : 10 (ten) years or different legal obligation.

c) Fulfilment of any obligations required by applicable laws

The Data will be processed to fulfill any type of obligation contemplated and provided for by current laws, regulations, related regulations, commercial practices and tax/fiscal matters, including for the purposes provided for by the anti-money laundering legislation Legislative Decree 231/2007 and subsequent amendments.

Legal basis: this processing is necessary to fulfill a legal obligation to which the Data Controller is subject.

Data retention period : 10 (ten) years or different legal obligation.

d) Soft spam

The Data will be processed to allow the Data Controller to send commercial and promotional communications to the Interested Party by email regarding Products and/or Services similar to the Products/Services being sold without the need for the express and prior consent of the Interested Party, as provided for by art. 130, paragraph 4, of the Privacy Code as amended by Legislative Decree no. 101 of 2018, and on condition that the Interested Party does not exercise the right to object.

Legal basis: this processing is based on the legitimate interest of the Data Controller pursuant to art. 6, letter F and Recital no. 47 of the GDPR.

Data retention period: until the interested party objects.

e) Direct marketing

The Data will be processed for direct sales of Products/Services, market research, sending communications and promotional, commercial and advertising material or relating to initiatives and events, via newsletters, e-mails, SMS, WhatsApp, Chat, Direct Messaging from social media, social networks or via telephone calls, paper mail and other information material.

Legal basis: this processing is based on the consent freely expressed by the interested party pursuant to art. 6, par. 1, lett. A of the GDPR.

Data retention period: until the interested party revokes their consent.

f) Statistics

The Data will be processed to perform statistical analyses on aggregate and anonymous data to analyse the behaviour of the interested party to improve the products and services provided by the Data Controller as well as satisfy the expectations of the interested party.

Legal basis: this processing is based on the consent freely expressed by the interested party.

Data retention period : until the interested party revokes their consent.

g) Profiling

The Data will be processed for the analysis and evaluation of interests, habits, consumer choices, including the creation of profiles in order to be able to send personalized information and promotional material on the Services/Products offered by the Data Controller.

Legal basis: this processing is based on the consent freely expressed by the interested party pursuant to art. 6, par. 1, lett. A of the GDPR.

Data retention period : until the interested party revokes their consent.

h) Satisfaction of the interested party

The Data will be processed for sending surveys to verify the level of Customer satisfaction in order to improve the offer on the Owner's Products/Services and without marketing purposes.

Legal basis: this processing is based on the legitimate interest of the Data Controller pursuant to art. 6, letter F and Recital no. 47 of the GDPR.

Data retention period: until the interested party objects.

Data Communication

In addition to the Owner, in some cases, the following may have access to the Data:

a) categories of specifically trained Persons in Charge involved in the organisation of the Website (administrative, commercial, marketing, legal, system administrators);

b) external parties (such as third-party technical service providers, hosting providers, IT companies, communications agencies) also appointed as Data Processors by the Data Controller pursuant to art. 28 GDPR. The updated list of Data Processors, if appointed, may always be requested from the Data Controller;

c) public or private entities that can access the Data in compliance with legal obligations;

d) subjects who carry out tasks that are accessory and instrumental to the Data Controller's activity;

Treatment Times

As expressly provided for by art. 5, co. 1, lett. e) of the GDPR, the Data are stored for the time necessary for the Processing of the same in relation to the performance of the service requested by the Interested Party, or required by the Purposes described above in this document.

At the end of the retention period, the Personal Data will be deleted and therefore, the rights of access, deletion, rectification and portability of the Data can no longer be exercised.

Cookie

This website uses cookies. Cookies are small text files that can be used by websites to make the experience more efficient for the Data Subject and to personalize content and advertisements, provide social network functions and analyze traffic. Cookie Policy

Place of Processing and Transfer of Data Abroad

The Data is processed at the Data Controller's operational headquarters. For further information, please contact the Data Controller. The Data may be processed by natural persons and/or legal entities operating on behalf of the Data Controller and under specific contractual obligations and having their registered office in EU or non-EU member countries. In the event that the Data is transferred outside the EEA, the Data Controller will adopt any contractual measures suitable to guarantee adequate protection of the Data.

Exercise of the rights of the interested party

The interested party has the right to exercise the rights provided for in articles 7, 15-22 of the European Regulation 679/2016. In particular, he/she has the right to withdraw his/her consent at any time and, upon simple request to the Data Controller, he/she may request access to the Personal Data, receive the Personal Data provided to the Data Controller and, where possible, transmit them to another Data Controller without impediments (so-called portability), obtain the updating, the limitation of the processing, the rectification of the Data and the cancellation of those processed in breach of the current legislation. He/she has the right, for legitimate reasons, to oppose the Processing of Personal Data concerning him/her and to the Processing for the purposes of sending advertising material, direct sales and for carrying out market research. He/she also has the right to lodge a complaint with the Privacy Guarantor as the supervisory authority in matters of personal data protection or to take appropriate legal action. The interested party may exercise his/her rights by contacting the Data Controller by email at the address: info@mina-mina.it

Tools used for the Processing of Personal Data

CONTACT FORM

By filling in the contact form with their data, the interested party consents to their use to respond to requests for information, or for any other purpose indicated by the form header. Personal data collected through the contact form: Email, Name and Telephone.

EMAIL ADDRESS MANAGEMENT

These services allow you to manage a database of email contacts, telephone contacts or contacts of any other type, used to communicate with the Data Subject. These services may also allow you to collect Data relating to the date and time the messages are viewed by the Data Subject, as well as the interaction of the Data Subject with them, such as information on clicks on links inserted in messages.

NEWSLETTER

By registering for the newsletter, the interested party's email address is automatically added to a list of contacts to which email messages containing information, including commercial and promotional information, relating to this Website may be transmitted. The interested party's email address may also be added to this list as a result of registering for this Website or after making a purchase. The interested party may choose at any time to unsubscribe from the newsletter by clicking on a specific button that will be found in the emails. After clicking on the unsubscribe button, the interested party's data will be immediately deleted from the "email marketing" software. Personal data collected: email and name. This website uses the newsletter service provided by:

MAILCHIMP (The Rocket Science Group)

Mailchimp is a service that organizes and analyzes the distribution of newsletters. If an Interested Party does not want their Data to be managed by Mailchimp, they will need to unsubscribe from the newsletter. For this purpose, a link is provided in each newsletter sent. Personal Data collected: email and name. Place of Processing: USA – Privacy Policy

SAFETY MEASURES ADOPTED

This Website, to secure the moment in which Personal Data is entered, has an SSL certificate and uses the HTTPS protocol. With the use of this protocol, transactions and data that are transmitted on the websites occur with maximum security and the content of the communication is not read or manipulated in any way by third parties.

reCAPTCHA

This website uses reCAPTCHA which is a service subject to the Privacy Policy .

and the Terms and Conditions.

of Google usage.

WEBSITE REGISTRATION

With the registration service, the interested party allows the Site to identify him/her and give him/her access to dedicated services.

Registration and authentication services may also be performed with the help of third parties. In this case, the application may access some Data stored by the third-party service used for registration and identification.

Simple Direct Registration

The interested party registers directly on the site by filling out the Form and providing his/her Data.

Indirect registration

The interested party accesses the website via:

1. Facebook Connect (Meta Platforms, Inc.)

Facebook Connect is a service provided by Meta Platforms, Inc. that facilitates and integrates the connection of the site with the social network. This Website may request some permissions from Facebook that allow it to perform actions with the Facebook account of the Data Subject and to collect information, including Personal Data, from it. For more information on the permissions that follow, the Data Subject may refer to the Privacy Policy of Facebook.

2.Login to your Google account (Google Ireland Limited)

This service, offered by Google Ireland Limited, allows this Website to connect with the Data Subject's Google account. Personal Data collected: Various types of Data as specified in the Privacy Policy of the service. Place of Processing: Ireland – Privacy Policy.

3. Apple ID (Apple Inc)

This service, offered by Apple Inc., allows this Application to connect with the Apple account of the Data Subject. Personal Data collected: various types of Data as specified in the Privacy Policy of the service. Place of Processing: California - Privacy Policy.

STATISTICS

Statistics services allow the Data Controller to exclusively monitor and analyze traffic data and are used to track the behavior of the Data Subject. This Website uses the following services:

1. Google Analytics (Google Ireland Limited)

Google Analytics is an analytics service provided by Google Ireland Limited. Google uses the Personal Data collected for the purpose of tracking and examining the use of this Website, compiling reports and sharing them with other services developed by Google. Google may use the Personal Data to contextualise and personalise the advertisements of its own advertising network. Google may also transfer this information to third parties where required to do so by law or where such third parties process the information on Google's behalf. The IP address anonymisation function is active on this site. The IP address transmitted by the browser for purposes related to Google Analytics will not be incorporated into other data already held by Google.

At the following link https://tools.google.com/dlpage/gaoptout?hl=it Google has made available the browser add-on for deactivating Google Analytics. Personal Data collected: Cookies and Usage data. Place of processing: Ireland – Privacy Policy.

2. Facebook pixel conversion tracking (Meta Platforms, Inc.)

Facebook conversion tracking (Facebook pixel) is a statistics service provided by Facebook. The Facebook pixel tracks conversions that can be attributed to Facebook ads. Personal Data collected: Cookies; Usage data. Place of processing: Ireland – Privacy Policy.

 

INTERACTION WITH SOCIAL NETWORKS

These services allow interaction with social networks directly from the pages of this Website. The interactions and information acquired from this Website are in any case subject to the privacy settings of the interested party relating to each social network. If a service for interaction with social networks is installed, it is possible that, even if the Users do not use the service, it collects traffic data relating to the pages in which it is installed.

1. Facebook (Meta Platforms, Inc.)

Facebook buttons are services of interaction with the social network Facebook, provided by Meta Platforms, Inc. Personal Data collected: Cookies and Usage data. Place of processing: Ireland – Privacy Policy.

2. Instagram (Meta Platforms, Inc.)

Instagram buttons are services of interaction with the social network Instagram, provided by Meta Platforms, Inc. Personal Data collected: Cookies and Usage data. Place of processing: Ireland – Privacy Policy.

3. Youtube (Google Ireland Limited)

Youtube buttons are services of interaction with the video content viewing service managed by Google. Personal Data collected: Cookies and Usage Data. Place of Processing: Ireland – Privacy Policy.

REMARKETING AND RETARGETING

These services allow this Website to communicate, optimize and serve advertisements based on the past use of this Website by the Data Subject. This activity is performed by tracking Usage Data and using Cookies. This Website uses the following services:

1. Facebook Remarketing (Meta Platforms, Inc.)

Facebook Remarketing is a Remarketing and Behavioral Targeting service provided by Facebook, which connects the activity of this Website with the Facebook advertising network. This Website uses the Facebook Pixel tool to measure conversions. Thanks to the Facebook Pixel, it is possible to understand the actions that people perform on the Website. The Data collected can be used to:

- ensure that your ads are shown to the right people;

- create audience groups to target ads to;

- take advantage of the additional advertising tools of the platform on which you advertise

The information collected is anonymous to the operators of this Site and cannot be used to identify the identity of a single Interested Party. However, the information is saved and analyzed by Facebook, which could link the action to a single profile and use this information for internal advertising purposes on Facebook, as outlined in the Facebook privacy policy. This will allow Facebook to show ads both on Facebook and on third-party sites. The Owner of the Site has no control over how this data is used. For more information on how users can protect their privacy, please refer to the Facebook Privacy Policy.

2. Google ADS

Google ADS is a service provided by Google Ireland Limited that connects this Website with the Google advertising network. This Website uses the Remarketing features of Google Analytics combined with the possibility of adaptation to different devices of Google ADS. This feature makes it possible to connect the target groups for promotional campaigns created by the Marketing function of Google Analytics with the adaptability to different devices of Google ADS. This allows to show advertising based on the personal interests of the Data Subject, identified through an analysis of the behavior of the Data Subject on the web, be it on a mobile device or on other devices. It is possible to permanently disable the targeting and remarketing functions by disabling the "personalized advertising" function in the Google account. To do so, simply follow this link: https://www.google.com/settings/ads/onweb/ Personal Data collected: Cookies and Usage data. Place of processing: Ireland – Privacy Policy.

CONTENT ON EXTERNAL PLATFORMS

These services allow you to view content hosted on external platforms directly from the pages of this website and interact with them.
In the event that a service of this type is installed, it is possible that, even if the Users do not use the service, it collects traffic data relating to the pages on which it is installed.

This website uses

1. Google Maps

Google Maps is a map viewing service managed by Google that allows this Website to integrate such content within its pages. Personal Data collected: Cookies and Usage Data. Place of Processing: Ireland - Privacy Policy.

2. Youtube (Google Ireland Limited)

Youtube is a video content viewing service managed by Google that allows this Website to integrate such content within its pages. Personal Data collected: Cookies and Usage Data. Place of Processing: Ireland – Privacy Policy.

3. Google Fonts

Google Fonts is a typeface visualization service provided by Google Ireland Limited that allows this Website to integrate such content within its pages. Personal Data collected: Usage data; various types of Data as specified in the privacy policy of the service. Place of processing: Ireland – Privacy Policy.

PAYMENT MANAGEMENT

Payment management services allow this Website to process payments by credit card, bank transfer or other means. The Data used for payment are acquired directly by the manager of the requested payment service without being in any way processed by this Website. Some of these services may also allow the scheduled sending of messages to the Data Subject, such as emails containing invoices or notifications concerning the payment. This Website uses the following services:

1. PayPal (Paypal Europe S.à.rl et Cie, SCA Inc.)

PayPal is a payment service provided by PayPal Europe S.à.rl et Cie, SCA Inc., which allows the Data Subject to make online payments using their PayPal credentials. Personal data collected: Cookies and various types of Data as specified in the privacy policy of the service. Place of processing: Luxembourg - Privacy Policy.

2. Apple Pay (Apple Inc.)

Apple Pay is a payment service provided by Apple, which allows the Data Subject to make online payments on websites and Apps that support it using an iPhone 6 and above, an Apple Watch, Mac and iPad Air 2 and above. Personal data collected: Cookies and various types of Data as specified in the privacy policy of the service. Place of processing: California USA - Privacy Policy.

3. Setefi MonetaWeb 2.0 (Mercury Payment Services SpA, now Nexi Payments SpA)

Moneta Web is a software for online payment transactions that uses a Virtual POS developed by Mercury Payment Services SpA (subsequently absorbed by Nexi Payments) that allows the Data Controller to perform online payment transactions. Personal data collected: Cookies and various types of Data as specified in the privacy policy of the service. Place of processing: Italy - Privacy Policy.

Changes to this Privacy Policy

The Data Controller reserves the right to make changes to this Privacy Policy at any time by giving notice to Users on this page. Therefore, please consult this page often, taking as a reference the date of the last modification indicated at the bottom. In the event of non-acceptance of the changes made to this Privacy Policy, the Data Subject is required to cease using this Website and may request that the Data Controller remove their Personal Data. Unless otherwise specified, the previous Privacy Policy will continue to apply to Personal Data collected up to that point. The Data Controller is not responsible for updating all the links that can be viewed in this Privacy Policy, therefore whenever a link is not functioning and/or updated, Users acknowledge and accept that they must always refer to the document and/or section of the websites referred to by that link.

Privacy Policy updated March 2023