Privacy Policy regarding the processing of personal data pursuant to art. 13 of Italian Legislative Decree n. 196/2003, as well as of EU Regulation 679/2016 (GDPR).

Madel O.O.D., acting as the Data Controller pursuant to Italian Legislative Decree n. 196/2003, as well as art. 4 (1), n. 7 of EU Regulation 679/2016 (GDPR), invites you to read this Privacy Policy carefully before communicating any personal data to the Data Controller, because it contains some important information on the protection of your personal data.

This Privacy Policy:

  • concerns the website https://www.madelbg.eu (“Website”);
  • is an integral part of the Website and the services it offers;
  • is made pursuant to art. 13 of the Italian Civil Code, as well as of article 13 of the GDPR Regulation (EU), for those who interact with the web services of the Website, either by simple consultation or by the use of specific services made available through the Website (for example, filling in online forms for information requests).

The processing of your personal data will be based on the principles of fairness, legitimacy, transparency, purpose limitation and conservation, minimisation and accuracy, integrity and confidentiality. Your personal data will therefore be processed in accordance with the principle of responsibility (Article 5, Reg. (EU) 2016/679), in accordance with the provisions of the Regulation (EU).

Processing of personal data means any operation or set of operations involving personal data or sets of personal data, carried out with or without the aid of automated processes, such as collection, registration, organization, structuring, storage, adaptation or modification, extraction, consultation, use, communication by transmission, dissemination or any other form of provision, comparison or interconnection, limitation, cancellation or destruction.

 

1. DATA CONTROLLER

Your personal data is processed by the Data Controller, Madel O.O.D., registered in Str. Zahari Stoaynov 7, 5600 Troayn, Bulgary – VAT N.: BG 110529608, email address: madelbg@abv.bg, pursuant to art. 4 (1) n. 7 of Reg. (EU) 2016/679. The Data Controller is responsible for the protection of personal data collected and stored by this Website in accordance with this Privacy Policy in accordance with Italian Legislative Decree 196/03 (“Codice in materia di protezione dei dati personali“) and the Regulation (EU) 2016/679.

More detailed information on the Data Controller and on possible data processing contractors can be requested by sending an email to the following address: madelbg@abv.bg

 

2. PERSONAL DATA SUBJECT TO PROCESSING

The personal data processed on the Website are the following:

1. Navigation Data

The computer systems and software procedures used to operate the Website acquire, during their normal operation, some personal data transmitted implicitly through Internet communication protocols. This category of data includes: anonymised IP addresses, the type of browser used, the operating system, the domain name and the addresses of websites from which access was made, which pages of the Website a user visits, the time of access, browsing time of a single page, the analysis of the internal path and other parameters relating to the operating system and the user’s IT environment. This data is used by the Data Controller for the sole purpose of obtaining anonymous statistical information on the use of the Website to ensure its correct functioning, to identify anomalies and / or abuses; in any case they are canceled immediately after processing. In case of hypothetical criminal hacking activities, the data can be used to identify third parties responsible for the crime.

2. Data voluntarily provided by the user

Except for the reference to specific information contained herein, this Privacy Policy is also intended for the processing of data voluntarily filled in the various forms of the Website. With reference to the latter, we invite you not to include information that may fall under the category of sensitive personal data pursuant to art. 9 of the GDPR (EU), such as personal data revealing racial or ethnic origins, political opinions, religious or philosophical beliefs, or trade union membership, genetic data, biometric data intended to uniquely identify an individual, related data to health or sex life or sexual orientation of the person.

3. Cookies and other tracking technologies

Cookies used by this site:

Technical Cookes

We only use anonymous technical cookies which are essential for the Website to function properly, for managing the session, for the internal functions of our system or for customising certain parts of the Website.

This type of cookie does not require user consent as it does not collect sensitive data.

Third-party Cookies

Third-party cookies are set by a range of websites other than this Website and reside on different servers. These cookies are not controlled directly by this Website.

Below are the third-party services that can generate cookies:

Google Maps: Google Maps is a map viewing service managed by Google Inc. that allows this Website to indicate the location of the company. Privacy Policy – Cookie

Google Fonts: Google Fonts is a service that allows to upload fonts to improve the appearance of the Website through the use of style sheets. The service is managed by Google Inc. The use of Google Fonts does not require authentication. Privacy Policy – Cookie

Google ReCaptcha: Google ReCAPTCHA is a service that helps to prevent or discourage the sending of comments or spam messages by users or spambots. The use of this technology involves the installation of (not profiling) cookies of the third-party company, Google Inc. The site does not share any navigation information or user data acquired in the case of use of this technology. It is also possible to consult the privacy policy addressed to users by clicking here.

Google Analytics: This website uses Google Analytics service to monitor the user browsing experience of this website and generate statistics about it. Generated cookies acquire information in aggregate and anonymised form about the access to the pages of this website. IP-addresses of the visitors are anonymised and collected data is used exclusively for the purpose of statistics. Data generated by Google Analytics is stored by Google Inc. For more details: privacy policy Google Analytics

4. Children’s privacy

Our products and services do not address anyone under the age of 16 years old (a “Child”) and we do not knowingly collect data from a Child. If we become aware that we have collected Personal Data from a Child without verification of parental consent, we will delete this information from our databases.

 

3. PURPOSE AND LEGAL BASIS OF THE PROSESSING

3.1 PurposeTo communicate to the user the information requested in the message sent through the contact forms filled out by the user. This communication can be in the form of a reply email, a phone call or through a contact means indicated by the user in the completed form.

Legal basis of the processing: The processing carried out for these purposes is based on a legitimate interest of the Data Controller (Article 6 para. (1), lett. (F).

3.2 PurposeDetect the browsing experience of a user to ensure the proper functioning of web pages and their contents. This activity is carried out through the use of cookies (for more information, see the “Cookie Policy” section of this Policy).

Legal basis of the processing: The processing carried out for these purposes is based on a legitimate interest of the Data Controller (Article 6 para. (1), lett. (F).

 

4. RECEPIENTS OF PERSONAL DATA

Your personal data may be shared, for the purposes indicated in section 3 of this Privacy Policy, with:

4.1. subjects that typically act as data processors pursuant to art. 29 of the Italian Civil Code and 28 of the Regulation, namely: i) persons, companies or professional entities that provide assistance and consulting to Madel O.O.D. in accounting, administrative, legal, tax and financial matters; ii) subjects delegated to carry out technical maintenance of the Website;

4.2. subjects, entities or authorities to which it is mandatory to communicate your personal data in accordance with legal provisions or orders of the authorities;

4.3. entities authorised by the Data Controller, pursuant to art. 30 of the Code and Article 29 of the Regulation, to the processing of personal data necessary to carry out activities strictly related to the provision of services, which are obliged to confidentiality or have an adequate legal obligation of confidentiality.

5. LINK TO / FROM THIRD PARTY WEBSITES

It is possible to connect to other websites via special links presented on the Website. The Data Controller does not assume any responsibility regarding the possible collection and / or release of personal data to third party websites.

 

6. STORAGE OF PERSONAL DATA

The personal data processed for the purposes indicated in section 3.1 and 3.2 will be stored for the time strictly necessary to achieve those purposes. In any case, since the processing is carried out for the provision of services, the Data Controller will keep the personal data for the period of time suggested and permitted by the law for the protection of one’s interests (Art. 2946 of the Italian Civil Code and subsequent amendments) and for the time required by the specific obligation or rule of applicable law. For the purposes referred to in sections 3.3 and 3.4, your personal data will be processed until you have opposed the processing. More information about the data retention period and the criteria used to determine this period can be requested by sending a written request to the Data Controller, at the addresses indicated in the “Contacts” section of this statement. In any case, the Data Controller’s right to store your personal data for the period of time suggested and permitted by Italian law for the protection of one’s interests (Article 2947 (1) (3) of the Italian Civil Code) is reserved.

 

7. RIGHTS OF THE DATA SUBJECT

The parties to whom the personal data refer (so-called “data subjects”) can exercise their rights in the manner and within the limits indicated in this Privacy Policy.

In relation to the processing of your personal data, you have the right to request Madel O.O.D., in accordance with the contents of the articles 15, 16, 17, 18, 20 of the GDPR:

  • access: you can request access to your personal data, the Website stores and receive a clarification on how it is processed, as well as receive the data, within the reasonable limits;
  • correction: you may request to correct or extend the data that you provided, if inaccurate;
  • deletion: you may request that your data acquired or processed by Madel O.O.D. be deleted, if it is no longer necessary for our purposes or where there are no disputes in progress, in the event of withdrawal of consent or your opposition to processing, in the case of unlawful processing, or if there is a legal obligation for such deletion;
  • restriction: you may request the restriction of the processing of your personal data, when one of the conditions mentioned by the art. 18 of the GDPR is applicable; in this case, your data will not be processed without your consent, except for the storage and except for what is stated in the art. 18 of the GDPR in paragraph 2.
  • opposition: you may at any time object to the processing of your personal data done on the basis of our legitimate interests, unless there are our legitimate reasons for processing that prevail over yours, for example in case of judicial defence; when it comes to the processing of data for marketing purposes, your opposition will always prevail over our legitimate interests;
  • transfer: you can request to receive your data, or have it transferred to another third party indicated by you, in a structured format, commonly used and readable by automatic devices;
  • destruction: you can request the irreversible elimination of your data.

Furthermore, pursuant to art. 7, par. 3, GDPR, we inform you that you can exercise your right to revoke your consent at any time, which will not, however, affect the lawfulness of any processing based on the consent given previously.

To exercise these rights, report problems or ask for clarification on the processing of personal data, you can use the form on the Website or send an email to madelbg@abv.bg.

We also inform you that you can also forward your requests by regular mail, writing to the Data Controller: Madel O.O.D., registered in Str. Zahari Stoaynov 7,  5600 Troayn, Bulgary, specifying the subject of inquiry.

 

8. LINKS TO OTHER WEBSITES (SHARE FUNCTION)

The website can use the so-called social plugins. Social plugins are special tools that allow you to incorporate the social network features directly into the website (e.g. the “like” function on Facebook). All social plugins on the Website are marked by the logo of the social network platform (e.g. Facebook, Google, Twitter, Linkedin). When you visit a page on the Website and interact with the plugin (e.g. by clicking the “Share” button), the corresponding information is transmitted by the browser directly to the social network platform and stored by it. For information on the purposes, types and methods of collection, processing, use and storage of personal data by social network platforms, as well as for the ways in which you exercise your rights, please consult the privacy policy of each social network individually.

9. CHANGES TO THIS PRIVACY POLICY

The Data Controller reserves the right to modify or simply update the content of this Policy, in part or completely, including updates resulting from changes in the applicable legislation. The Data Controller therefore invites you to visit this section of the Website regularly to get acquainted with the most recent and updated version of the Privacy Policy in order to be always up to date on the ways the Website collects and uses data.

10. CONTACTS

To exercise the rights mentioned above or for any other request, you can write to the Data Controller to the address indicated above via mail, or via the e-mail address: madelbg@abv.bg.