Contents

• Data Controller
• Types of Data collected
• Methods and place of processing of the collected Data
• Purposes of processing of the collected Data
• Details on the processing of Personal Data
• Information on how to disable interest-based advertisements
• Cookie Policy
• Further information for users in the European Union
• Further information on processing
• Definitions and legal references

Data Controller

Mialica S.r.l.s., with registered office at Via Monte Napoleone 8, 20121 Milan, tax code (C.F.) and VAT number (P. IVA) 04934580236

Owner’s email address: customer@mialica.com

Types of Data we collect

Among the Personal Data collected by this Website, either independently or through third parties, are:

• Usage Data
• Trackers
• number of Users
• session statistics
• first name
• last name
• email
• payment information
• browsing history
• clicks
• page views
• device information
• phone number
• Data communicated while using the service
• answers to questions
• user content
• message or email content
• profile picture
• message date
• time the message was sent
• message sender

Complete details on each type of Personal Data collected are provided in the dedicated sections of this privacy policy or by means of specific information texts displayed prior to the collection of the Data themselves.
Personal Data may be freely provided by the User or, in the case of Usage Data, collected automatically when using this Website.
Unless otherwise specified, all Data requested by this Website are mandatory. If the User refuses to communicate them, it may be impossible for this Website to provide the Service. In cases where this Website indicates some Data as optional, Users are free to refrain from communicating such Data, without this having any consequence on the availability of the Service or on its operation.
Users who have doubts as to which Data are mandatory are encouraged to contact the Owner.
Any use of Cookies - or of other tracking tools - by this Website or by the owners of third-party services used by this Website has the purpose of providing the Service requested by the User, in addition to the further purposes described in this document and in the Cookie Policy.

The User assumes responsibility for the Personal Data of third parties obtained, published or shared through this Website.

Methods and place of processing of the collected Data

Methods of processing

The Owner adopts appropriate security measures aimed at preventing unauthorised access, disclosure, modification or destruction of the Personal Data.
The processing is carried out by means of computer and/or telematic tools, with organisational methods and logic strictly related to the purposes indicated. In addition to the Owner, in some cases, the Data may be accessed by other persons involved in the organisation of this Website (administrative, sales and marketing personnel, legal staff, system administrators) or by external parties (such as third-party technical service providers, postal couriers, hosting providers, IT companies, communication agencies), also appointed, if necessary, as Data Processors by the Owner. The updated list of Processors can always be requested from the Data Controller.

Place

The Data are processed at the operating offices of the Owner and in any other place where the parties involved in the processing are located. For further information, contact the Owner.
The User’s Personal Data may be transferred to a country other than the one in which the User is located. To obtain further information on the place of processing, the User may refer to the section on the details of the processing of Personal Data.

Retention period

Unless otherwise indicated in this document, Personal Data are processed and stored for the time required by the purpose for which they were collected and may be stored for a longer period due to any legal obligations or on the basis of the Users’ consent.

Purposes of processing of the collected Data

The User’s Data are collected to allow the Owner to provide the Service, comply with legal obligations, respond to enforcement requests or actions, protect its rights and interests (or those of Users or third parties), detect any malicious or fraudulent activity, as well as for the following purposes:

• Handling payments
• Traffic optimisation and distribution
• Statistics
• Advertising
• Platform services and hosting
• Interaction with live chat platforms
• Managing support and contact requests

Details on the processing of Personal Data

Handling payments

Unless otherwise specified, this Website processes all payments by credit card, bank transfer or other means through external payment service providers. In general, and unless otherwise stated, Users are requested to provide their payment details and personal information directly to such payment service providers.
This Website is not involved in the collection and processing of such information: instead, it will only receive a notification from the relevant payment service provider that the payment has been made.

Managing support and contact requests

This type of service allows this Website to manage communications, support and contact requests with Users, received or sent via e-mail or other means (such as an e-mail client or the contact form). The Personal Data processed depend on the information provided by the User in the messages and on the means of communication used (e.g. e-mail address).

Interaction with live chat platforms

This type of service allows interaction with live chat platforms managed by third parties, directly from the pages of this Website, in order to contact and be contacted by the support service of this Website.
If a service for interaction with live chat platforms is installed, it is possible that, even if Users do not use the service, it collects Usage Data relating to the pages on which it is installed. Furthermore, live chat conversations may be recorded.

Traffic optimisation and distribution

This type of service allows this Website to distribute its content through servers located in different places and to optimise its performance.
The Personal Data processed depend on the characteristics and the method of implementation of these services, which by their nature filter communications between this Website and the User’s browser.
Given the distributed nature of this system, it is difficult to determine the places to which the content, which may contain the User’s Personal Data, is transferred.

Advertising

This type of service allows the User’s Data to be used for commercial communication purposes. These communications are displayed on this Website in the form of banners and other forms of advertising, also in relation to the User’s interests.
This does not mean that all Personal Data are used for this purpose. Data and conditions of use are indicated below.
Some of the services listed below may use Trackers to identify the User, or use the behavioural retargeting technique, i.e. displaying advertisements personalised on the basis of the User’s interests and behaviour, or measure the performance of the advertisements.
For more information on this, we suggest that you check the privacy notices of the respective services.
Services of this kind usually allow Users to opt out of such tracking. Users may learn how to opt out of interest-based advertising by visiting the relevant opt-out section in this document.

Platform services and hosting

These services are intended to host and run key components of this Website, making it possible to deliver this Website from a single platform. These platforms provide the Owner with a wide range of tools such as, for example, analytical tools, tools for managing user registration, for managing comments and the database, for e-commerce, for payment processing, etc. The use of such tools involves the collection and processing of Personal Data.
Some of these services work through servers geographically located in different places, making it difficult to determine the exact place where the Personal Data are stored.

Statistics

The services contained in this section enable the Data Controller to monitor and analyse traffic data and serve to keep track of the User’s behaviour.

Information on how to disable interest-based advertisements

In addition to any opt-out feature provided by any of the services listed in this document, Users may read more about how to disable interest-based advertisements in the dedicated section of the Cookie Policy.

Cookie Policy

This Website uses Trackers. To learn more, Users may consult the Cookie Policy.

Further information for users in the European Union

Legal basis of processing

The Owner processes Personal Data relating to the User if one of the following conditions applies:

• the User has given consent for one or more specific purposes.
• the processing is necessary for the performance of a contract with the User and/or for the performance of pre-contractual measures;
• the processing is necessary for compliance with a legal obligation to which the Owner is subject;
• the processing is necessary for the performance of a task carried out in the public interest or for the exercise of official authority vested in the Owner;
• the processing is necessary for the pursuit of the legitimate interest of the Owner or of third parties.

In any case, it is always possible to ask the Owner to clarify the specific legal basis of each processing operation and in particular to specify whether the processing is based on law, provided for by a contract or necessary to enter into a contract.

Further information on retention time

Unless otherwise indicated in this document, Personal Data are processed and stored for the time required by the purpose for which they were collected and may be stored for a longer period due to any legal obligations or on the basis of the Users’ consent.

Therefore:

• Personal Data collected for purposes related to the performance of a contract between the Owner and the User will be retained until the performance of such contract has been completed.
• Personal Data collected for purposes attributable to the legitimate interest of the Owner will be retained until such interest has been satisfied. The User may obtain further information regarding the legitimate interest pursued by the Owner in the relevant sections of this document or by contacting the Owner.

Where the processing is based on the User’s consent, the Owner may retain the Personal Data for longer, until such consent is withdrawn. Furthermore, the Owner may be obliged to retain the Personal Data for a longer period in order to fulfil a legal obligation or upon order of an authority.

At the end of the retention period, the Personal Data will be deleted. Therefore, upon expiry of that period, the right of access, erasure and rectification and the right to Data portability can no longer be exercised.

The User’s rights under the General Data Protection Regulation (GDPR)

Users may exercise certain rights with regard to the Data processed by the Owner.

In particular, within the limits provided for by law, the User has the right to:

• withdraw consent at any time. The User may withdraw the previously given consent to the processing of their Personal Data.
• object to the processing of their Data. The User may object to the processing of their Data when it is carried out on a legal basis other than consent.
• access their Data. The User has the right to obtain information on the Data processed by the Owner, on certain aspects of the processing and to receive a copy of the Data processed.
• verify and seek rectification. The User may verify the accuracy of their Data and request that they be updated or corrected.
• obtain restriction of processing. The User may request the restriction of the processing of their Data. In this case, the Owner will not process the Data for any purpose other than storing them.
• obtain the erasure or removal of their Personal Data. The User may request the erasure of their Data by the Owner.
• receive their Data or have them transferred to another controller. The User has the right to receive their Data in a structured, commonly used and machine-readable format and, where technically feasible, to have them transferred to another controller without hindrance.
• lodge a complaint. The User may lodge a complaint with the competent personal data protection supervisory authority or take legal action.

Users are entitled to obtain information on the legal basis for the transfer of Data abroad, including to any international organisation governed by international law or set up by two or more countries, such as the UN, as well as on the security measures taken by the Owner to protect their Data.

Details on the right to object

Where Personal Data are processed in the public interest, in the exercise of official authority vested in the Owner or to pursue a legitimate interest of the Owner, Users have the right to object to the processing on grounds relating to their particular situation.

Users are informed that, where their Data are processed for direct marketing purposes, they may object to the processing at any time, free of charge and without providing any justification. Where Users object to processing for direct marketing purposes, the Personal Data are no longer processed for such purposes. To find out whether the Owner processes Data for direct marketing purposes, Users may refer to the relevant sections of this document.

How to exercise your rights

Any requests to exercise the User’s rights may be addressed to the Owner through the contact details provided in this document. The request is free of charge and the Owner will respond as soon as possible, in any event within one month, providing the User with all the information required by law. Any rectification, erasure or restriction of processing will be communicated by the Owner to each of the recipients, if any, to whom the Personal Data have been transmitted, unless this proves impossible or involves disproportionate effort. The Owner informs the User of such recipients if the User so requests.

Further information on processing

Defence in legal proceedings

The User’s Personal Data may be used by the Owner in legal proceedings or in the stages preparatory to their possible commencement, for defence against abuse in the use of this Website or of the related Services by the User.
The User declares that they are aware that the Owner may be required to disclose the Data upon order of public authorities.

Specific information notices

At the User’s request, in addition to the information contained in this privacy policy, this Website may provide the User with additional and contextual information notices concerning specific Services, or the collection and processing of Personal Data.

System logs and maintenance

For needs related to operation and maintenance, this Website and any third-party services used by it may collect system logs, i.e. files that record interactions and that may also contain Personal Data, such as the User’s IP address.

Information not contained in this policy

Further information in relation to the processing of Personal Data may be requested from the Data Controller at any time using the contact details.

Changes to this privacy policy

The Data Controller reserves the right to make changes to this privacy policy at any time by notifying Users on this page and, if possible, on this Website as well as, where technically and legally feasible, by sending a notification to Users via one of the contact details in its possession. Please therefore consult this page frequently, referring to the date of last modification indicated at the bottom.

Should the changes affect processing operations whose legal basis is consent, the Owner will collect the User’s consent again, if necessary.

Definitions and legal references

Personal Data (or Data)

Personal data means any information that, directly or indirectly, also in connection with any other information, including a personal identification number, makes a natural person identified or identifiable.

Usage Data

Information collected automatically through this Website (also by third-party applications integrated into this Website), including: the IP addresses or domain names of the computers used by the User connecting to this Website, the addresses in URI (Uniform Resource Identifier) notation, the time of the request, the method used to submit the request to the server, the size of the file received in response, the numerical code indicating the status of the response from the server (successful outcome, error, etc.), the country of origin, the features of the browser and operating system used by the visitor, the various time details of the visit (for example, the time spent on each page) and the details of the path followed within the Application, with particular reference to the sequence of pages consulted, to the parameters relating to the operating system and to the User’s IT environment.

User

The individual using this Website who, unless otherwise specified, coincides with the Data Subject.

Data Subject

The natural person to whom the Personal Data refer.

Data Processor (or Processor)

The natural or legal person, public administration and any other body that processes personal data on behalf of the Owner, as set out in this privacy policy.

Data Controller (or Owner)

The natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data and the tools adopted, including the security measures concerning the operation and use of this Website. The Data Controller, unless otherwise specified, is the owner of this Website.

This Website (or this Application)

The hardware or software tool by means of which the Personal Data of Users are collected and processed.

Service

The Service provided by this Website as defined in the relevant terms (if any) on this site/application.

European Union (or EU)

Unless otherwise specified, every reference to the European Union contained in this document is to be understood as extending to all current member states of the European Union and of the European Economic Area.

Cookie

Cookies are Trackers consisting of small portions of data stored within the User’s browser.

Tracker

Tracker means any technology - e.g. Cookies, unique identifiers, web beacons, embedded scripts, e-tags and fingerprinting - that enables Users to be tracked, for example by collecting or saving information on the User’s device.

---

Legal references

Unless otherwise specified, this policy relates exclusively to this Website.

How can we help?

iubenda hosts this content and only collects the Personal Data strictly necessary for it to be provided.