PRIVACY
Privacy and Cookie Policy
1. Introduction
This Privacy Policy explains the policies of The-Ma S.p.A. on the collection and use of information we collect when you access the website www.the-ma.it (the "Service").
In accordance with the General Data Protection Regulation (GDPR – EU 2016/679), we describe how we protect your privacy and your rights. Processing is carried out on the basis of the purposes and legal grounds set out in this policy. Where processing is based on consent, such consent is given by means of a positive action and may be freely withdrawn at any time.
2. Information We Collect
Personal Data Requested
- First and Last Name
- Email Address
- Mobile Phone Number
- Work Address (for B2B purposes)
- Technical Usage Data
Usage Data (Logs)
We automatically collect technical information when you visit the site:
- IP address and browser type
- Pages visited and access times
- Referring website (referral)
3. Purposes of Processing and Legal Bases
Your data is processed for the following purposes, each based on a specific legal ground pursuant to art. 6 GDPR:
Service Delivery
Technical maintenance and user account management.
Legal basis: Performance of a contract or pre-contractual measures – art. 6.1.b GDPR
Contracts
Processing of purchase orders and fulfilment of contractual obligations.
Legal basis: Performance of a contract – art. 6.1.b GDPR
Communication
Contact by email or phone for updates and support.
Legal basis: Performance of a contract – art. 6.1.b GDPR
Improvement
Data analysis to identify trends and improve our products.
Legal basis: Legitimate interest of the Controller – art. 6.1.f GDPR, subject to balancing of interests
Tax & Accounting Obligations
Management of accounting, tax, and administrative obligations required by law.
Legal basis: Legal obligation – art. 6.1.c GDPR
Provision of data marked as mandatory is necessary to fulfil the request; failure to provide it will make it impossible to deliver the Service. Provision of other data is optional.
Data is retained for the period strictly necessary for the purposes for which it is collected: account and commercial relationship data for the duration of the relationship and up to 24 months after its termination; contractual, tax, and accounting data for 10 years, in compliance with legal obligations (art. 2220 of the Italian Civil Code); data processed for marketing purposes until consent is withdrawn; browsing data for the duration of the relevant cookies as indicated in the Cookie Policy.
5. Your Rights (GDPR)
As a data subject, the GDPR grants you the following rights:
- Right of Access: To know what data we process (art. 15 GDPR).
- Rectification: To correct inaccurate data (art. 16 GDPR).
- Erasure (Right to be Forgotten): To request removal of your data (art. 17 GDPR).
- Restriction: To request that processing be restricted in the cases provided for by art. 18 GDPR.
- Portability: To receive your data in a machine-readable format (art. 20 GDPR).
- Objection: To object to processing for marketing purposes (art. 21 GDPR).
- Withdrawal of consent: To withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal (art. 7.3 GDPR).
- Complaint: To lodge a complaint with the Italian Data Protection Authority (art. 77 GDPR) – www.garanteprivacy.it.
The Controller will respond without undue delay and in any case within 30 days of the request, following verification of the requester's identity.
7. Data Controller
The-Ma S.p.A.
Registered office: Viale Lino Zanussi 6/C, 33170 Pordenone (PN)
VAT No. / Tax Code: IT 02506991203 | R.E.A. PN n. 86659
Email: [email protected] | PEC: [email protected] | Tel: +39 0434 572677
Website: www.the-ma.it
Privacy Officer (DPO): Steve Tomasin – [email protected]
