Privacy disclaimer

INFORMATION FOR THE PROCESSING OF PERSONAL DATA

PURSUANT TO ART. 13 OF EU REGULATION N. 679/2016

MASSI STOCK, as "Data Controller" of the processing of personal data, pursuant to and for the purposes of the European Regulation (EU) 279/2016 regarding the protection of personal data (hereinafter GDPR) in relation to the management of personal data entered on the website by the user (hereinafter "Interested Party") establishes the following:

This Privacy Policy explains how the Data Controller collects, uses, shares and processes your Personal Data when you use or access this website www.massistock.com or to use any of our services, through communication platforms and any other related services we have (collectively the “Services”).

Data controller:

MASSI STOCK SRL

Via Padre Leone Dehon , 73, Andria, 76123, (BT), Italy

VAT number 07573210726

Tel.: 0883 1951543

Email: massistock@gmail.com ; Pec: massistocksrl@pec.it

1. Cookies

Please refer to the specific information found in the Privacy section of the site.

2. Type of data collected

The data collected by this site are: personal data - name - contact details (address, telephone number, e-mail) gender and age, payment data; Absolutely no sensitive data is collected.

Unless otherwise specified, this Website processes all payments by credit card, wire transfer or other means through external payment service providers. In general, and unless otherwise indicated, Users are asked to provide payment details and personal information directly to such payment service providers.

This Website is not involved in the collection and processing of such information: instead it will only receive a notification from the relevant payment service provider that the payment has been made.

The payment managers are: Shopify payments, Stripe, Paypal, bank transfer, Postepay. Consult the privacy policy of the individual managers offering the service.

As regards the social channels Facebook, Instagram, Whatsapp, please refer to the privacy policy of the app managers.

3. Purpose of the processing

Process the request for contact with the company, online sales and/or any other related services (returns, exchanges, etc.) made via the website www.massistock.com in the various dedicated sections: contacts, account creation and user profiling, sales and related services.

The Personal Data collected to complete the payment may be those relating to the credit card, the current account used for the bank transfer or other payment instruments provided. The Payment Data collected by this Website depends on the payment system used

4. Legal basis

The legal basis of the processing is the execution of pre-contractual and contractual measures, upon request of the user/interested party expressed by sending the question/contact to obtain information of various kinds to MASSI STOCK SRL. The provision of data is not obligatory but necessary, since, in its absence, it will not be possible to send answers to the user's/interested party's questions.

Explicit consent is required for marketing activities and profiling;

.

5. Data retention

The processing can be carried out on paper and also with the aid of electronic tools, in a manner suitable for guaranteeing the security and confidentiality of the data.

The data will be kept for the time strictly necessary to respond to requests coming through contact on the company website and, in case of registration for the various services, until the cancellation of the registration or/and revocation of consent where it is required. Furthermore, the Data Controller may retain the data to fulfill legal obligations or to protect its interests before the competent authorities.

6. Place

The Data is processed at the Owner's operational offices and in any other place where the parties involved in the processing are located. For further information, contact the Owner.

The User's Personal Data may be transferred to a country other than the one in which the User is located. To obtain further information on the place of processing, the User can refer to the section relating to the details on the processing of Personal Data.

The User has the right to obtain information regarding the legal basis of the transfer of Data outside the European Union or to an international organization governed by public international law or constituted by two or more countries, such as for example the UN, as well as regarding the security measures adopted by the Data Controller to protect the Data.

If one of the transfers just described takes place, the User can refer to the respective sections of this document or request information from the Owner by contacting him at the details indicated at the beginning.

7. Recipients of the data

The personal data will be processed by subjects specifically appointed by the Data Controller, as external data processing managers (couriers to make deliveries, professionals such as accountants to fulfill legal obligations, etc., etc.) and/or by anyone acting under the authority of the Data Controller and/or external managers, employees, collaborators, etc., these subjects will process the data of the interested party only if necessary in relation to the purposes of the provision and only within the scope of carrying out the tasks assigned to them by the external Data Controller/Manager , undertaking to process only the data necessary to carry out these tasks and to carry out only the operations necessary to carry out the same. Payment data is managed by companies that offer this service.

The personal data of the interested party will not be communicated to undetermined third parties and/or disseminated. MASSI STOCK SRL does not use the DPO.

8. Rights of the interested party

Articles 15-22 of EU Regulation no. 679/2016 list the rights that the interested party has the right to exercise at any time:

• ask for confirmation of the existence or otherwise of your personal data;
• obtain information regarding the purposes of the processing, the categories of personal data, the recipients or categories of recipients to whom the personal data have been or will be communicated and, when possible, the retention period;
• obtain the rectification and deletion of data;
• obtain the limitation of processing;
• obtain data portability, i.e. receive them from a data controller, in a structured format, commonly used and readable by an automatic device, and transmit them to another data controller without impediments;
• object to the processing at any time and also in the case of processing for direct marketing purposes;
• oppose an automated decision-making process relating to natural persons, including profiling.
• ask the data controller to access personal data and to rectify or delete them or limit the processing that concerns them or to oppose their processing, in addition to the right to data portability;
• revoke consent at any time without prejudice to the lawfulness of the processing based on the consent given before the revocation;

9. Right to lodge a complaint with the Guarantor for the protection of personal data ,

following the procedures and instructions published on the Authority's official website www.garanteprivacy.it .

10. Methods of exercising rights

The interested party may exercise the rights at any time by sending:

a registered letter with return receipt to MASSI STOCK SRL Via Padre Leone Dehon , 73, Andria, 76123, (BT), Italy

or to the email address: massistock@gmail.com ;

pec: massistocksrl@pec.it;

Definitions and legal references

Personal Data (or Data)

Any information which, directly or indirectly, also in connection with any other information, including a personal identification number, makes a natural person identified or identifiable constitutes personal data.

Usage Data

This is information collected automatically through this Website (also by third-party applications integrated into this Website), including: IP addresses or domain names of the computers used by the User who connects to this Website, the addresses in URI (Uniform Resource Identifier) ​​notation, the time of the request, the method used in forwarding the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response from the server (successful, error, etc. .) the country of origin, the characteristics of the browser and operating system used by the visitor, the various temporal connotations of the visit (for example the time spent on each page) and details relating to the itinerary followed within the Application, with particular reference to the sequence of pages consulted, the parameters relating to the operating system and the User's IT environment.

User

The individual who uses this Website who, unless otherwise specified, coincides with the interested party.

Interested

The natural person to whom the Personal Data refers.

Data Controller (or Manager)

The natural person, legal person, public administration and any other body that processes personal data on behalf of the Data Controller, as set out in this privacy policy.

Data Controller (or Data Controller)

The natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data and the tools adopted, including security measures relating to the operation and use of this Website. The Data Controller, unless otherwise specified, is the owner of this Website.

This Website (or this Application)

The hardware or software tool through which the Personal Data of Users is collected and processed.

Service

The service provided by this Website as defined in the relevant terms (if available) on this site/application.

Cookies

Small portion of data stored within the User's device.

Legal references

This privacy information is drawn up on the basis of multiple legislative systems, including articles. 13 and 14 of Regulation (EU) 2016/679.

Unless otherwise specified, this privacy policy applies exclusively to this Website.