117.8.0.0

According to Art. 13 of Italian Legislative Decree No. 196 of 30th June 2003 (“Privacy Act”), Article 13 of European Regulation No. 679 of 2016 (the “Privacy Regulation”), and Recommendation No. 2 of 2001 adopted in the sense of Article 29 of Directive No. 95/46/EC, MDF Italia S.r.l. one-man company wishes to inform you and all users and/or visitors of our site www.mdfitalia.com (respectively the “Users” and the “Site”), on use of your personal data, log files and cookies collected through the same Site. 1. Data Controller, Processors and Data Protection Officer The Data Controller of your personal data is MDF Italia S.r.l. One-man company (with Tax ID and VAT Reg. No. 09683280961), with registered office at Via T. Grossi No. 2, 20121 Milan e-mail info@mdfitalia.it, (hereinafter the “Data Controller”). An updated list of designated Processors will be supplied to data subjects and/or Users upon request. 2. Information collected automatically by the Site - Cookies a) Information collected automatically Like all Website, our Site also uses log files, in which information collected automatically during your visits are kept. During use computer systems and software procedures used to keep this site working automatically collect some information whose transmission is implicit in use of Internet communication protocols. The following information is collected: Internet Protocol (IP) address or the domain name of the devices you use; type of browsers and parameters of the device used for connecting to our Site; uniform resource identifiers or URIs of the resources requested or the method used for submitting the request to the server; name of the Internet service provider (ISP); date and time of your visit; the referral and exit web page used by you; at times, the number of clicks you make; the size of the file obtained in response; the numerical code indicating the status of the response given by the server (success, error, etc.); other parameters related to the operating system and IT environment of your device. This information is processed automatically and collected only in aggregated form so as to check whether the Site is working properly. b) Cookies Cookies are used on our Site. Cookies are text files recorded on IT support, which allow for recording some parameters and data communicated to the IT system through the browser you use. These instruments allow for analysing your habits when you use our Site for different purposes: execution of IT authentications, session monitoring, saving of information about certain configurations regarding users who access the server, saving of preferences, etc. Cookies can be distinguished as follows: a. Cookies used for technical purposes: these are used for browsing and to provide any service you request. If we did not use these cookies, some operations could not be done or would be complicated and/or not as safe. b. Profiling cookies: these are used for tracking your browsing and creating profiles on your tastes, habits, choices, etc. This way advertising messages in line with your preferences revealed before during previous browsing sessions can be sent to your device. Your consent is not required for installation of cookies used for technical purposes. For installation of profiling cookies your consent is required: if you do not want your device to accept or save profiling cookies, you can change the security settings of your browser. Through the settings of the browser used you can decide whether to delete and/or prevent installation of cookies on the device you use. However, you should know that by disabling the use of profiling cookies, you will not be able to use some functions of the Site to the fullest. When browsing our Site some cookies may be sent to your terminal by various sites or Web servers (hereinafter “Third Parties”). The Third Parties which use cookies on our Site are associated with Google Analytics, whose policy can be found at this address www.mdfitalia.com/en/cookie When you use our Site, it is considered that you accept the use of cookies and consent to processing of data collected by Third Parties. 3. Personal data you provide us when you use our Site: for what purpose we process them. We need your data to enable you to: - access the secure area: if you are a professional in our industry, in order to obtain technical information about products, 2D and 3D drawings in CAD format, and high definition photos; if you are a journalist, in order to obtain high definition photos of the collection and press releases; - to subscribe to our newsletter and to be kept up-to-date on our promotional and direct and other marketing activities through advertising and/or promotional material sent by using automated instruments and/or traditional contact methods, such as by e-mail (the “Newsletter”). Your data will be processed for the following purposes: (i) for fulfilment of legal obligations; (ii) for technical management of our Site; (iii) for using the services offered by the Data Controller through our Site, specifically: a) if you are a professional in our industry, so as to make technical information about products, 2D and 3D drawings in CAD format and high definition photos available to you; b) if you are a journalist, so as to make high definition photos of the collection and press releases (hereinafter “Site Services”) available to you; (iv) to be kept up-to-date on our promotional and commercial activities through advertising and/or promotional material sent by e-mail (the “Newsletter”); The personal data you provide will be processed mainly by delegates using IT instruments, authorised and instructed by the Data Controller on processing of your data in compliance with Article 30 of the Privacy Act and Articles 28 and 29 of the Privacy Regulation. In order to prevent loss, unlawful and improper use and authorised access to your data, adequate safety measures are taken in compliance with Articles 5 and 32 of the Privacy Regulation. 4. Obligatory and optional nature of consent to providing your data, consequences of your refusal and legal basis for processing You should know that for the purposes described in points (i), (ii) and (iii) of the foregoing Art. 3, providing your personal data is obligatory, because otherwise you will not be able to use the Site Services. On the other hand, for the purposes described in point (iv) of the foregoing Art. 3, providing your personal data is not obligatory but optional; not providing your data for the purposes just specified will not allow us to send you our newsletter. You are free to decide whether or not to give your consent for that purpose, which will not stop you from accessing Site Services. Remember that you can ask the Data Controller to erase your data at any time by writing to him without any particular formalities at the addresses provided above in Art. 1. With reference to the purposes referred to in points (i), (ii) and (iii) of the foregoing Art. 3, the legal basis for processing is performance of the services supplied through our Site requested by you, according to Article 6, paragraph 1, letter B of the Privacy Regulation and Article 24, paragraph 1, letter B of the Privacy Act. On the other hand, with reference to the purposes set out in point (iv) of the foregoing Art. 3, the legal basis for processing is your consent given freely, according to Article 6, paragraph 1, letter A of the Privacy Regulation and Article 23 of the Privacy Act. 5. To whom and in which context we can disclose your data Your data can be disclosed in the EU in full compliance with the provisions of the Privacy Act and the Privacy Regulation to the following subjects: (I) financial administration and/or other public authorities, when imposed by law or when they request it; (II) banks for purposes related to purchase of Products; (III) external structures, subjects and companies the Data Controller uses for performing related, instrumental or ensuing tasks for performance of Site Services - including cloud computing services - to sending our newsletter; (v) external consultants such as for compliance with tax obligations, if not designated as processors in writing. The Data Controller’s newsletter is managed on MailUp platform, belonging to the company MailUp S.p.A, with registered office at Viale F. Restelli 1, 20124 Milan, Italy, which safeguards compliance with personal data protection legislation; please see their privacy policy at (https://www.mailup.it/informativa-privacy). 6. Your Rights Remember that you are free to exercise your rights referred to in Art. 7 of the Privacy Act and in Articles 15, 16, 17, 18, 20 and 21 of the Privacy Regulation at any time, by sending a written notice to the addresses of the Data Controller given in Art. 1 above for obtaining: confirmation as to whether there are any personal details on file about you and for knowing their source, verifying their accuracy and asking for their update, rectification or supplementation; access, rectification, erasure of data or restriction of their processing; cancellation, transformation into anonymous form or blocking of data processed against the law. In addition, you may oppose processing of your personal data. With reference to our newsletter, your right to ask us to stop processing them by automatic means also includes processing by conventional means. Additionally, you can exercise that right partially, meaning by asking us to stop sending you promotional messages through one or more contact instruments you consented to. 7. Processing Duration Without prejudice to legal obligations, your personal data will be kept for a certain period of time, based on criteria that take into consideration the nature of the services supplied. The data required for sending our newsletter will be processed based on an opt-out management model, i.e. until the data subject exercises the right to unsubscribe to the service. 8. Security measures Through our Site your data are processed in compliance with the applicable law by taking adequate security measures in accordance with legislation in force and Articles 5 and 32 of the Privacy Regulation. In this connection, rest assured that we take appropriate security measures to prevent unauthorised access, theft, dissemination, alteration and destruction of your data. 9. Modifications to this Privacy Notice The Data Controller reserves the right to make modifications to this Privacy Notice. In such case, you will be informed immediately the next time you come back to our Site.