PRIVACY AND COOKIES POLICY
PURSUANT TO EU REGULATION 2016/679.
The data controller is:
MTO by Ottaviani Marco and Tonti Cristian SNC.
Browsing this Website - https://www.mtonauticastore.it - represents a flow of information; therefore, this information and, in general, the Privacy rules (in particular the EU Regulation 2016/679) allows you to better understand what data we collect, why we collect them and how we use them. This is very important information, which we need to have your free and express consent to the processing of the data you communicate to us and, therefore, this information must be read and understood with the utmost attention.
Regarding the use of our services by users, this information is intended to clarify how we use the information and illustrate the ways in which users can protect their privacy. This disclosure illustrates:
Type of data collected and purpose
How to use the collected data
Rights of the interested party (methods of accessing and updating information)
METHOD OF DATA COLLECTION
A - Data provided by the user: some of the services offered by our Website require the creation of an account and subsequent authentication as Registered Users; during registration, personal information is requested (such as name, surname, e-mail address, telephone number and / or credit cards / paypall to be associated with the user's account).
B - Data collected from the use of our services by the User: we can collect information on the services displayed and / or used by the User, as well as on how they are used (for example when the User interacts with our content); such information includes:
Device information: specific information about the device is collected (such as the model of the computer, the version of the operating system, the unique identifier of the device, etc.);
Log information: when the User uses the services of the Website or viewing the contents therein, we automatically collect and store some information in the server logs (such as data on how our service is used, Internet protocol address, cookies that could uniquely identify the user's browser or account, etc.);
Location data: when a registered User uses the services of the Website we may collect and process information on their location (IP addresses, GPS and / or other sensors that could provide information on the devices);
Unique application numbers - some services have a unique application number; the number and information on the installation (for example the type of operating system and the version number of the application) can be sent to the Website at the time of installation / uninstallation of the product or when, for example, updates are made automatic;
Local storage: the Website may collect and store data (including personal data) locally on the device using mechanisms such as web storage via browser and application data cache;
Cookies and similar technologies: our Website uses various technologies to collect and store information when one of our services is visited, which may involve the use of cookies and / or similar technologies to identify the user's browser or device; we also use these technologies to collect and store information when the User interacts and / or purchases our services and / or the services of our partners
PURPOSE AND METHOD OF TREATMENT TO WHICH THE DATA ARE INTENDED
User data collected by all our services will be processed for the following purposes:
A - Provide, sell, manage, protect and improve services;
B - Develop new services and protect the Website and its Users;
C - Offer personalized content;
When Users contact the Website, the same keeps track of such communications to resolve any problems that may arise; therefore, we may use the User's e-mail address to provide information about our services (for example to communicate changes and / or improvements).
The Website uses the data collected through cookies and other technologies to improve the User experience and the general quality of the services offered; when the Website displays personalized advertisements for the Registered User, no identifiers from cookies or similar technologies relating to sensitive data (such as race, religion, sexual orientation or health) are associated.
In the event that the Website uses personal information for purposes other than those established in this statement, the User will be asked for specific consent.
The treatment is carried out by the owner and / or by the persons in charge of the treatment and will take place, in any case, using suitable tools to guarantee security and confidentiality, through the use of suitable procedures that avoid the risk of loss, unauthorized access, illicit use and diffusion.
REGISTRATION TO THE WEBSITE
Registration on the Website takes place by creating a Profile (associated with a User name and a password chosen by the User) linked to the User's e-mail address; the provision of data is not mandatory, but it is strictly essential for the conclusion of the registration and to be able to use the services reserved for Registered Users, therefore, any refusal to communicate such data is equivalent to the impossibility of completing the registration. The personal data communicated and not strictly necessary for registration will be used for statistical analysis and profiling, as well as to improve the service offered by the Website.
NEWSLETTER
The Website allows the User to remain constantly updated on new products offered, promotions and / or offers through the User's e-mail communication (correlated by the relative consent to the processing for marketing purposes). The personal data communicated and not strictly necessary for registration will be used for statistical analysis and profiling, as well as to improve the service offered by the Website. Only with the express consent of the User, the Website may use the personal information provided not mandatory to send personalized promotional communications. The provision of data for Marketing purposes is optional: it may, therefore, decide not to provide any data or subsequently deny the possibility of processing data already provided; in this case, you will not be able to receive newsletters, commercial communications and advertising material relating to the services offered by the Data Controller.
COOKIES
Cookies allow you to create a connection between the User's computer, the navigation on the Website and the profile created by the User: in themselves they are not personal in nature but can be linked to personal information (since cookies represent a short text file that is inserted by the Website on the hard disk of the User's computer).
The Cookies used by the Website are temporary in nature, i.e. they do not remain on the User's hard disk once the session has ended, in fact when the User connects and enters the identified codes in his possession (User and Password), the Cookies make its recognition is possible, allowing access to the Service according to the personalized profile created by the User.
The Website also uses Cookies for statistical purposes of using the services (in an absolutely anonymous form).
The User can choose to disable the reception of Cookies (by setting his browser), however, if the User decides not to accept the Cookies, it will be possible for him to continue to visit the Website but may not use, in whole or in part. , of the services offered there (for example, it will not be possible to access it as a Registered User).
Furthermore, the following technical cookies (which do not require consent) are automatically installed following access to the Site:
Cookies relating to the saving of preferences and optimization;
Statistical cookies used directly by the site operator to collect information in aggregate form.
ACCESS TO PERSONAL DATA COMMUNICATED AND UPDATE
When a registered User uses and / or purchases the services of the Website, we want him to have access to his personal information: if the information is not correct, we offer the User methods to quickly update it or to delete it (unless it is necessary to keep it for legitimate purposes. commercial and / or legal).
The Website manages the services offered in such a way as to protect data from accidental or malicious destruction; for this reason, after the User has deleted the information from the Website services, the Website may not immediately delete the remaining copies from the servers and back-up systems.
INFORMATION SHARED BY US
The Website provides personal data to third parties in the following cases:
A - With the User's consent: the Website, in the event of the need to share sensitive personal data, with companies, organizations and persons unrelated to the Website itself, requires the User's authorization;
B - To domain administrators: the domain administrator and / or third party resellers who provide assistance to the use of the service to the User have access to personal data and can:
View statistics relating to the User's account;
Suspend and / or close the User's account;
Access information stored in the User's account and / or keep it;
Receive information from the User's account to comply with a law or regulation in force, a legal process or a mandatory government request C - For external processing: the Website provides personal information to its affiliates and / or companies and / or trusted persons so that indent on the basis of the instructions provided and in compliance with the Privacy rules applied by the Website itself (as well as in compliance with any other appropriate measures relating to confidentiality and security);
D - For legal reasons: the Website provides personal information to companies, organizations and / or people who are not part of the Website team if the same believes that access, use, protection or disclosure of such information is necessary for:
Comply with applicable laws or regulations, a judicial process and / or a mandatory government request;
Apply the current terms of service, including investigations regarding potential violations;
Detect, prevent or manage fraudulent activities or problems relating to security or of a technical nature;
Protect the rights, property and / or safety of the Website, our Users or the public, as required and permitted by law.The Website may share information that does not allow personal identification with its partners, for example to show trends related to the general use of our services and / or purchasing preferences.
Should the Website Owner be involved in a merger, acquisition and / or sale, the same will continue to guarantee the confidentiality of personal information and will communicate to the Users concerned the transfer of personal information or the application of privacy rules other than those. adopted here.
INFORMATION SECURITY
The Website endeavors to protect its Users from unauthorized access to the information in its possession and / or from the unauthorized alteration, disclosure, destruction of such data; in particular the Website:
Adopts an encryption procedure for the services offered;
Provides Users with verification when logging into their account, as well as a Safe Browsing feature;
Examine data collection, storage and processing practices, including physical security measures, to prevent unauthorized access to systems;
It allows access to personal information only to employees and / or suppliers who must be aware of such information in order to be able to process it (for example when purchasing a service): these subjects comply with strict contractual obligations regarding confidentiality and may be subject to sanctions and / or termination of the existing contract if they fail to comply with these obligations.
THE MANDATORY OR OPTIONAL NATURE OF DATA CONFERENCE
The provision of personal data is necessary for the conclusion of the registration on the Website.
The provision of data for Marketing purposes is optional: it may, therefore, decide not to provide any data or subsequently deny the possibility of processing data already provided; in this case, you will not be able to receive newsletters, commercial communications and advertising material relating to the services offered by the Data Controller.
CONSEQUENCES OF ANY REFUSAL
Any refusal to provide personal data or to consent to their processing will make it impossible to complete the registration process and / or purchase the services requested on the Website.
THE SUBJECTS TO WHOM THE DATA MAY BE COMMUNICATED
Where necessary, the communication of the data will eventually be made only to competent authorities, trusted subjects appointed by the Website Owner for the performance of technical and / or organizational tasks (provision of legal, accounting, tax, consultancy services, etc. .).
The data may be processed by specifically appointed personnel (administrative staff, persons in charge of relations with the public, persons in charge of the management of information systems including external to the company, personnel of the Marketing sector also external to the company, interns, data processors and their collaborators, persons in charge specific sector, management personnel) only if the processing is necessary for the correct use of the service offered by the Website to the User.
Personal data are not subject to disclosure.
RIGHTS OF THE INTERESTED PARTY art. 7
1. The interested party has the right to obtain confirmation of the existence or not of personal data concerning him, even if not yet recorded, and their communication in an intelligible form.
2. The interested party has the right to obtain
A - the indication:
- of the origin of the personal data;
- the purposes and methods of the processing;
- of the logic applied in case of treatment carried out with the aid of electronic instruments;
- of the identification details of the owner, of the managers and of the designated representative pursuant to article 5, paragraph 2 of the Privacy Code and art. 3, paragraph 1 GDPR 2016/679;
- of the subjects or categories of subjects to whom the personal data may be communicated or who can learn about them as appointed representative in the State, managers or agents.
B - updating, rectification or, when interested, integration of data;
C - the cancellation, transformation into anonymous form or blocking of data processed in violation of the law, including those that do not need to be kept for the purposes for which the data were collected or subsequently processed;
D - the attestation that the operations referred to in letters a) and b) have been brought to the attention, also as regards their content, of those to whom the data have been communicated or disseminated, except in the case in which this fulfillment is proves impossible or involves the use of means that are manifestly disproportionate to the protected right.
3. The interested party has the right to object, in whole or in part:
a) for legitimate reasons, to the processing of personal data concerning him, even if pertinent to the purpose of the collection;
b) to the processing of personal data concerning him for the purpose of sending advertising or direct sales material or for carrying out market research or commercial communication, through the use of automated call systems without the intervention of an operator , by email and / or through traditional marketing methods. It should be noted that the right of opposition of the interested party (set out in the previous point "THE MANDATORY OR OPTIONAL NATURE OF DATA PROVISION") for direct marketing purposes through automated methods extends to traditional ones and that, in any case, the possibility remains for the interested party to exercise the right to object, even if only partially. Therefore, the interested party can decide to receive only communications using traditional methods, or only automated communications, or neither of the two types of communication.
4. Where applicable, the interested party also has the rights referred to in art. 16-21 GDPR 2016/679 (right of rectification, right to be forgotten, right to limitation of treatment, right to data portability, right to object), as well as the right to lodge a complaint with the supervisory authority (Privacy Guarantor).
