In compliance with EU General Data Protection Regulation 2016/679, please find here all information regarding personal data processing. This statement is given in accordance with art. 13 of Regulation (EU) 2016/679 on personal data protection, and under the provisions of Directive 2002/58/EC, as revised by Directive 2009/136/EC, on Cookies and in accordance with the provision of the Authority for the protection of personal data of 08/05/2014 concerning cookies. Personal data you process: “personal data” is any information that relates to an identified or identifiable individual; an identifiable person is one who can be identified, directly or indirectly, by reference to a name, identification number, location data, online identification or one or more factors specific to their physical, physiological, mental, economic, cultural or social identity; (C26, C27, C30). Navigation data Personal data whose transmission is caused by Internet communication protocols are acquired as part of the normal routine by the computer systems and software procedures used to operate this website. Data provided by the personal subject The optional, explicit and voluntary sending of messages to our contact addresses entail the collection of the user’s contact information as well as the personal data included in the communication in order to respond. Cookies Please visit our Cookie Policy for more information about the cookies used by this website. 1. Data controller In accordance with art. 4 and 24 of Regulation (EU) 2016/679, the DATA CONTROLLER is LA MISOLET with registered office in VIA VERBANO, 8 – 20139 MILANO (MI). Please find poihere below the owner’s contact details: Tel. 0377.437125, email info@misolet.it 2. Data Protection Officer DATA PROTECTION OFFICER (DPO) according to art. 37 – 39 of Regulation (EU) 2016/679, has NOT been appointed. Purpose, legal framework of the treatment and duration of data retention or criteria to determine the duration The personal data provided by users will be processed in accordance with the lawfulness conditions former art. 6 of Regulation (EU) 2016/679 for the purposes below. This process will be carried out in automatic or manual mode, with methods and tools aimed at guaranteeing maximum security and confidentiality, by individuals specifically appointed. In compliance with art. 5 (1) (e) of Regulation (EU) 2016/679, personal data collected will be retained to consent the identification of the concerned person for a period of time enough to fulfil all purposes personal data are processed for. Storage of personal data provided depends on the purpose of the processing, as follows. Purpose A) Website browsing · LEGAL BASIS: Legitimate interest art. 6 (f) and recital 47: data processing is necessary to pursue the legitimate interest of the data controller or third part, provided that the interests or rights and fundamental freedoms of the data subject requiring personal data protection do not prevail, taking into account the reasonable expectations of the interest party based on their relationship with the data controller. Activities strictly necessary for the website operation and the provision of the browsing service on the platform. · DATA RETENTION PERIOD: up to the duration of the browsing session. For information on navigation, please refer to cookie policy. 1. Personal data recipients or categories of recipients Personal data provided will be shared with entities that will process the data as controllers (art. 28 of Regulation (EU) 2016/679) and/or individuals acting under the authority of the Data Controller and Processor (art. 29 of Regulation (EU) 2016/679, for the reasons listed above. These data may be communicated to public entities due to regulatory reasons, in particular to the following recipients groups and to their duly appointed processors: – Banks and credit institutions, insurance companies and financial corporates, limited to receipts, payments, legal and/or contractual guarantees; – Interchange system – SDI, managed by the Revenue Agency, for electronic invoicing; – Verification company for financial standing and debt recovery; statistics; trading; – Post offices, carriers and shippers; – Tax advisory firms; – Accounting and data processing firms; – System administration; – As part of the process carried out by the bodies listed above, your data will not be transferred to third countries. – Authorities responsible for fulfilling legal obligations and/or public bodies’ requirements, upon request. The list of appointed Processors is constantly updated and available at LaMisolet offices in Strada Provinciale 142, 4C – 26867 Somaglia (LO) and can be consulted by sending an e-mail to info@misolet.it. 2. Data transfer to third countries The personal data you provide will NOT be transferred to EU countries and non-EU countries. 3. Provision of data and refusal Except as stated about browsing data (necessary for browsing the website), users are free to provide their personal data. 4. Rights of data subjects You can enforce your rights as defined by articles 15, 16, 17, 18, 19, 20, 21 of Regulation (EU) 2016/679 by addressing the in-house Privacy Consultant and emailing info@misolet.it. As data subject, you are entitled at any time to access, rectification, erasure, restriction of processing and data portability with regards to your personal data. Moreover, you have the right to object at any time to the use of your data based on consent and/or legitimate interest. If you wish to stop receiving marketing communications, you only need to send an e-mail to info@misolet.it with “cancellation from marketing” in the subject line. You have the right to file a complaint to the Data Protection Authority (supervisory authority www.garanteprivacy.it) if you deem that the processing of your data is in breach of Regulation (EU) 2016/2017, pursuant to art. 15(f) of the abovementioned Regulation (EU) 2016/679, without prejudice to any other administrative or legal appeal. 5. Changes to the Privacy Policy The Data Controller reserves the right to change, update, add or remove parts of this privacy policy at their discretion, at any time. In order to facilitate the verification process, this policy shall include the date of its latest update. This Privacy Policy was last updated on: 05/04/2022