MSA - MULTI SERASS PRIVACY POLICY

pursuant to Article 13 of the GDPR relating to the processing of personal data

MSA - Multi Serass S.r.l., with registered office in Via Sangro, 15, Milano (MI), fiscal code/VAT n. 10116240960, Registration Number MI - 2506361 (“Company”), is committed to protecting the personal data of the users (“Users”) of this internet page (“Page”) and, as data controller, is required, pursuant to Article 13 of EU Regulation No. 679/2016 (General Data Protection Regulation, “GDPR”), to provide the Users with certain information regarding the processing of personal data.
This Privacy Policy does not apply to different websites (owned by other companies of the same group or by third parties) which can be reached through the Page.
If Users provide personal data on behalf of someone else, they must ensure, in advance, that the data subjects have read this Privacy Policy.
The Company asks Users to help it in keeping their personal data updated, informing it of any relevant changes.

1. WHAT DATA CAN BE PROCESSED

Through the Page, the following categories of Users’ data (hereinafter jointly also “Personal Data”) can be processed:
Personal Data provided to receive a specific service (e.g. name and contact details);
browsing data (e.g. approximate geolocation, browser and device information, session statistics, number of users).

2. PURPOSES FOR WHICH PERSONAL DATA CAN BE PROCESSED

A) Operating the Page, providing the Service and managing information requests.
The Company will process Data for operating the Page (“Service”).
Legal Basis: performance of a contractual obligation or execution of pre-contractual measures (pursuant to Article 6, paragraph 1, letter b) of the GDPR). The provision of Personal Data is necessary; otherwise, the Company will not be able to operate the Page and provide the Service.

B) Compliance with a legal obligation to which the Company is subject or with provisions/requests of authorities legitimized by law and/or by supervisory and control bodies..
The Company may process the Users’ Personal Data to comply with a legal obligation to which the Company is subject.
Legal Basis: compliance with a legal obligation (pursuant to Article 6, paragraph 1, letter c) of the GDPR). The provision of Personal Data for this purpose is necessary, otherwise the Company will not be able to comply with specific obligations.

C) Defence of rights during judicial, administrative or extra-judicial proceedings, and in the context of dispute arising in relation to the services/activities offered..
The Company may process Personal Data in order to defend its rights or to act or even to make claims against the Users or third parties.
Legal Basis: legitimate interest of the Company in protecting its rights (pursuant to Article 6, paragraph 1, letter f) of the GDPR). In this case, a new and specific provision of data is not required, since the Company will pursue this further purpose, where necessary, by processing the data collected for the aforementioned purposes, deemed compatible with this (also due to the context in which the data have been collected, the nature of the data and the adequate guarantees for their processing, as well as the link between the aforementioned purposes and this additional purpose).

3. HOW WE KEEP PERSONAL DATA SECURE AND WHERE

The Company takes appropriate security measures to ensure the protection, security, integrity and accessibility of Users’ Personal Data. Personal Data, processed in hardcopy, by automated or electronic means, are held on our secure computer systems (or appropriately stored hard copies) or those of our suppliers, in accordance with our standards and security policies (or equivalent standards for our suppliers).
The Personal Data are stored in Italy.
When the Company transfers Personal Data in countries that do not belong to the European Union (EU) or the European Economic Area (EEA) (“Third Countries”), it uses any appropriate measure to guarantee an adequate protection of the Personal Data including also the adoption of standard contractual clauses (SCC) issued by the EU Commission, possibly supplemented by additional technical/organizational/legal measures so that the safeguards contained in the transfer tool can ensure an essentially equivalent level of protection for Personal Data transferred in the Third Country.
The Users can write to the Company at any time to receive a copy of the safeguards adopted for the transfer.

4. HOW LONG WE RETAIN PERSONAL DATA

The Company retains Personal Data only for as long as it is necessary for the purposes for which they were collected or for any other related legitimate purpose. If the Personal Data are processed for two different purposes, we will keep such data until the purpose with the longer-term ceases.
In any case, we will no longer process Personal Data for that purpose whose retention period has expired. If Personal Data are no longer needed or if there is no longer a legal basis for their retention, they will be irreversibly anonymized or destroyed.
With particular reference to the judicial protection of our rights or in the event of requests by the authorities, Personal Data will be kept for the time required to process the requests or to pursue the protection of the rights involved.

5. LINK TO THIRD PARTY WEBSITES

Third party websites accessible from this Page are under the third-party responsibility. The Company declines all responsibility concerning requests and/or provision of Personal Data to third party’s websites. The Company declines all responsibility concerning requests and/or provision of Data to third party websites. This privacy notice refers only to the processing of Personal Data carried by the Company on the Page.

6. WITH WHOM WE MAY SHARE PERSONAL DATA

The Users’ Personal Data may be accessed by duly authorised employees of the Company, as well as by external suppliers (including consultants), appointed, if necessary, as data processors pursuant to Article 28 of the GDPR. You can always contact us using the details provided in the “Contacts” section below, if you would like to see the list of data processors and other subjects with whom we share Personal Data.

7. PERSONAL DATA PROTECTION RIGHTS

Users, subject to the existence of the legal basis for the request, have the right to obtain from the Company:
• the access to and the rectification of Personal Data;
• the erasure of Personal Data;
• the rectification of Personal Data;
• the limitation of the processing of Personal Data;
• the copy of Personal Data provided to the Company, in a structured, commonly used and machine-readable format (portability) and the transmission of such personal data to another data controller.

In addition, Users have the right to object, in whole or in part, to the use of their personal data processed by the Company, under the conditions provided for by the GDPR, for example if the legal basis for processing is the legitimate interest.
In the event that the Users exercise any of the above-mentioned rights, it will be the responsibility of the Company to verify that the Users are entitled to exercise such rights, and a feedback will normally be provided within one month. Users have the right to lodge a complaint with a supervisory authority if they consider that the processing of their personal data is in breach of the provisions of the GDPR.

8. CONTACTS

The contact details of the Company, as data controller, are as follows: MSA - Multi Serass S.r.l., with registered office in Via Sangro, 15, Milano (MI).
If Users have any questions regarding the Company's processing of their Personal Data or wish to exercise the aforementioned rights, they may write an email to federica@ziglioassociati.it and info@ziglioassociati.it.

9. AMENDMENTS

The Company reserves the right to partly or fully amend the Privacy Policy, or simply to update its content (e.g. as a result of changes in applicable law). The Company will publish any update on this Page.

Last update: 03.03.2023

MSA - MULTI SERASS COOKIE POLICY

This website (https://www.multiserass.com/) uses cookies.
Below we describe in detail which cookies, analysis tools and plugins we use, what data is processed in this context and how you can disable the analysis tools.
The term "cookie" can also be used as a generic term for plug-ins and analysis tools of any kind.

WHAT ARE COOKIES?

Cookies are sometimes used when using our website. Cookies are small files created automatically by the browser and stored on the end device (laptop, tablet, smartphone, etc.) of the user when he visits the website. Cookies do not cause any damage to the end device and do not contain viruses, Trojans or other malware. The cookie stores information about the specific end device used. Cookies can be recognized and read automatically during the current visit or during the next visit. This does not mean, however, that the website operator immediately becomes aware of the user’s identity.
Cookies make it easier to visit the website by remembering personal settings or serve the advertising interests of the website operator. Cookies allow, in particular, to determine the frequency of use and the number of users of the pages, to analyze patterns of behavior in the use of the pages, but also to make our offer more suitable for customers. So-called session cookies are used, inter alia, to recognise that the user has already visited individual pages of the website. These are automatically deleted after leaving the site.
If you leave our site and go to a third party site, the target site may also set cookies. We are not legally responsible for these cookies. Regarding the use of these cookies by third parties and the information stored in them, please see the Privacy Policy.

WHO IS THE DATA CONTROLLER

Pursuant to Article 24 of the GDPR, the Data Controller is MSA-Multi Serass S.P.A with registered office in Sangro, 15, Milan (MI), R.E.A Milano 2506361, Fiscal Code/VAT Number 10116240960.

DOES THE DATA CONTROLLER USE COOKIES?

Yes.

LEGAL BASIS FOR COOKIES, ANALYSIS TOOLS AND PLUGINS

We may store cookies on your device if they are technically necessary for the operation of the website. The necessary cookies help to make a website usable by enabling basic functions such as navigating the pages or selecting the language. The website cannot function in part without such cookies. The data thus processed for the purposes indicated serve to protect legitimate interests that are prevalent in the context of a balancing of interests and are therefore necessary in accordance with the principle of proportionality. The legal basis for technically necessary cookies is Art. 6 para. 1 s. 1 lit. f GDPR.
Other kind of cookies requires your consent. You can select them specifically as explicit consent in a dialog box (cookie consent window) during your first visit to our website. This creates a cookie in the user’s system that contains the user’s cookie settings and tells our system which cookies have been accepted each time the user visits our website. You can change or revoke cookie settings on our website at any time. Instructions on how to disable cookies are given below. The legal basis for all other types of cookies is Art. 6 para. 1 s. 1 lit. to GDPR, insofar as you have given your consent.
If you delete all cookies, you will also have the effect of deleting the cookie with your cookie settings, so you will need to determine your cookie preferences again. The limitation of cookies may result in a limited functionality of the website.

HOW DO WE USE COOKIES, ANALYSIS TOOLS AND PLUGINS? DATA PROCESSING PURPOSES

In the context of cookies, analysis tools and plug-ins, the name of the Internet service provider, the requested files, the IP address, access to individual pages, the type of browser, the resolution of the screen, the depth of color, etc, the operating system, search terms and reference pages - from which you have reached our web pages - are processed.
The data contained in session cookies or other cookies are processed by us for the following purposes:
• ensure the proper functioning of the website;
• ensure comfortable use of our website;
• system security and stability;
• additional administrative or advertising purposes.
We process and use the collected data to improve the marketing of our websites, to increase the ease of use of websites and for other optimization purposes. The analysis required for marketing and optimization purposes generally does not allow us to draw direct conclusions about you or your personal data. In particular, no names, addresses, telephone numbers or other data directly traceable to natural persons are stored. The analysis provides only aggregated data, such as the number of visitors and page views.
Cookies allow us, among other things, to adapt our website to your wishes, to establish connections between different calls to our website or to save your password in your browser so that you do not have to re-enter it each time. We also use cookies for targeted advertising. We also allow third-party providers and automated data collection tools to use cookies to help us deliver our content and ads and measure the effectiveness of our advertising efforts. For registered users, the information collected on our websites is not anonymous. We use this information together with other information we know or deduce about you, such as your preferences, to provide you with content, services and advertising tailored to you. Currently on our website we use cookies listed and described in more detail below.

DATA STORAGE PERIOD

Some cookies are deleted at the end of the browser session, that is, after the browser is closed (so-called session cookies). Other cookies remain on the end device and allow you to recognize the user on the next visit (persistent cookies). The specific duration of storage is indicated in our list of cookies below and in the cookie settings overview of your web browser. Otherwise, the general principles of memorization apply.

THE KIND OF COOKIES AND TRACKING TOOLS WE EMPLOY

We use Google Analytics to collect information about how users use this website. We do this to determine whether the website meets the needs of our users and to understand how we can make further improvements. Google Analytics stores information about the pages visited, the duration of your stay on the site, how you arrived and what you clicked on. We do not collect or store your name or address, so this information cannot be used to identify you. We do not allow Google to use or share the results of our analysis.
For more information, see "HOW GOOGLE USES COOKIES" on Google’s website.

HOW TO MANAGE COOKIES

By clicking the "Accept" button in the consent management window, you consent to the use of cookies and tracking tools. Alternatively, you have the option to manage the cookies you wish to accept from this site, as indicated below.

BROWSER SETTINGS

Most browsers may be modified to prevent your computer from accepting cookies, although this may mean that some features of this website (and other websites) may not work properly and restrict your user experience. In addition, you may need to change some information and settings or manually enter the information each time you access the site. In many cases, these settings are found in the "options" or "preferences" menu of the browser. To understand these settings, the following links may be useful. For more information, use the "Help" option of your browser.
Cookie settings in Internet Explorer
Cookie settings in Firefox
Cookie settings in Chrome

USE OF GOOGLE ANALYTICS IN ANONYMOUS MODE

Users who do not want their data to be used by Analytics can install the browser add-on for disabling Analytics. This add-on tells Analytics' JavaScript code (ga.js, analytics.js and dc.js) running on websites to prevent the use of information by Analytics

WHAT RIGHTS DO YOU HAVE? HOW CAN YOU EXERCISE THEM?

Under data protection rules, you have the various rights set out below.

RIGHT OF ACCESS

You have the right to request information about your personal data that we process pursuant to Art. 15 GDPR. In particular, you may request information about the purposes of the processing, the category of personal data, the categories of recipients to whom your data have been or will be communicated, the expected retention period, the existence of a right of rectification, erasure, restriction of processing or opposition, the existence of a right of complaint, the origin of your data if they were not collected by us, as well as the existence of automated decision-making, including profiling and, where applicable, significant information on the details thereof.

RIGHT OF RECTIFICATION

Pursuant to Art. 16 GDPR, you have the right to request the correction of incorrect or incomplete personal data stored by us without delay.

RIGHT TO ERASURE

You have the right to request the deletion of your personal data stored by us in accordance with Art. 17 GDPR, unless the processing is necessary for the exercise of the right to freedom of expression and information, for the fulfilment of a legal obligation, for reasons of public interest or for the assertion, exercise or defense of legal claims.

RIGHT TO RESTRICTION OF PROCESSING

You have the right to request the restriction of the processing of your personal data pursuant to Art. 18 GDPR, insofar as the accuracy of the data is contested by the user, the processing is unlawful, but the user opposes its deletion, we no longer need the data, but the user needs it to assert, exercise or defend legal claims, or the user has opposed the processing pursuant to Art. 21 GDPR.

RIGHT TO DATA PORTABILITY

The user has the right, pursuant to Art. 20 GDPR, to receive personal data that he has provided to us in a structured, common and machine-readable format or to request that it be transferred to another processor.

RIGHT TO REVOKE CONSENT GIVEN UNDER DATA PROTECTION LAW

Pursuant to art. 7 (3) GDPR, you have the right to revoke your consent statement at any time under data protection law. As a result, we will no longer be able to continue processing data based on this consent in the future. The withdrawal of consent does not affect the lawfulness of the processing carried out on the basis of consent until the revocation.

RIGHT TO LODGE A COMPLAINT WITH A SUPERVISORY AUTHORITY

You have the right to lodge a complaint with a supervisory authority pursuant to Art. 77 GDPR. As a rule, you can contact the supervisory authority of your place of habitual residence or place of work or the head office of our company.

All rights described above can be exercised by writing to federica@ziglioassociati.it and info@ziglioassociati.it.