Controller

The Controller is Master Casa SpA with registered office in via L. Settembrini 26/a – 20124 Milan and operational headquarters in Via Alfredo Di Dio 13 - 20010 Ossona (Mi)

For any information please write to: privacy@mastercasa.it

Type of data processed

1) Browsing data and Cookies

In principle, you can browse the site without having to provide any personal data. The computer systems responsible for operating the site acquire, during normal operation, some data which are then transmitted implicitly in the use of Internet communication protocols. This may include information on the geographical area from which you are browsing, on the device used, on the type of browser, on the pages visited by the user during the session. It was decided not to memorize the user's IP address, effectively preventing subsequent identification of the user.

The navigation data is possibly stored anonymously and is mainly used for statistical information, to check the correct functioning of the site and to improve its usability.

Should the Controller add other types of cookies to the site that require consent (e.g. third-party analytical cookies, marketing cookies, etc.), he will take care to update this information and activate the request for consent, if provided for the new cookies based on their purpose.

2) Data provided voluntarily by users/visitors

When users/visitors communicate some personal data to access certain services or to make requests via email, Master Casa acquires such data and processes them exclusively to respond to the request, to identify the user and to provide the service/product.

The request for information by users may involve the collection and consequent processing of personal data such as, for example, name, surname, e-mail address, telephone number, address, profession, etc.

This type of data could be collected when:

• Sending requests via email or by contacting the Company by telephone
• Filling out the request and/or registration form on the site if present
• Participation in corporate events
• Participation in trade fairs and sector events

The processing will not concern data of a sensitive nature, pursuant to art. 9 Chapter I (“special categories of personal data”) of the Regulation (i.e. those data “…suitable for revealing racial and ethnic origin, religious, philosophical or other beliefs, political opinions, membership of political parties, trade unions, associations or organizations of a religious, philosophical, political or trade union nature, as well as personal data suitable for revealing the state of health and sexual life”).

Purpose of the processing and legal basis

Master Casa may process personal data for the following purposes, reported below with the relevant legal bases.

1. Carry out activities deriving from contracts with customers or requests for information on products/services and the company (legal basis: execution of a contract or pre-contractual measures; legitimate interest of the Controller)
2. Manage accounting, administrative, fiscal, etc. obligations required by Italian, European or international law (legal basis: legal obligation)
3. Comply with contractual obligations, obligations and conditions as well as manage credit protection, any disputes and assert the rights of the Controller (legal basis: execution of a contract, legal obligation)
4. Send adequate communications on products, services and company initiatives, send periodic newsletters or measure customer satisfaction, including via e-mail and text message (legal basis: legitimate interest or consent if applicable)

Master Casa does not currently use automated decision-making processes and does not carry out any profiling activities; should it find itself in this condition, it will adequately inform users and ask for consent to processing in the most appropriate manner.

Method and duration of data processing

The processing of personal data is carried out through electronic procedures and supports and/or manually (e.g. on paper) for the time necessary to achieve the purposes for which the data were collected and, in any case, in compliance with current regulatory provisions in the field.

In addition, we are required to retain certain information as required by law for as long as reasonably necessary to comply with legal requirements, resolve disputes, prevent fraud and abuse, and enforce our terms and conditions. Personal data processed for administrative, contractual and legal purposes are therefore kept for at least 10 years.

In relation to all processing, the Controller and any external managers appointed pursuant to art. 28 undertake to adopt adequate physical, logical and organizational security measures in order to guarantee the integrity, confidentiality and availability of the data.

Nature of the provision of data

The provision of the data processed for legal obligations and contractual execution is necessary and any opposition to the processing in whole or in part may determine the impossibility for Master Casa to proceed with the contractual relationships.

For all other purposes, apart from what has already been specified for navigation data, users/visitors are free to provide their personal data. Failure to provide them may only make it impossible to obtain what is requested or to remain informed in the best possible way.

Communication and transfer of personal data

Personal data may be brought to the attention of Master Casa employees or collaborators who are formally appointed and authorized to process it and receive adequate operational instructions in this regard.

Master Casa may communicate the data to:

• third parties responsible for carrying out activities connected and instrumental to the supply of products and/or the provision of services with which the Controller has entered into specific agreements
• third parties for the execution of obligations established by law or contract (e.g. public bodies, supervisory authorities, police forces, banking institutions, etc.)
• subsidiaries, subsidiaries, affiliates, as well as partners and/or affiliated companies

At the moment, services that involve the transfer of personal data to third countries (outside the EU or the European Economic Area) are not used. Where it is necessary to transfer data outside this perimeter, the Controller undertakes to comply with the provisions of Chapter V of the Regulation and to do what is necessary to guarantee adequate levels of protection and safeguarding of the data.

Personal data will not be disclosed in any way without specific authorization.

Rights of data subjects

The European Regulation recognizes numerous rights to the Data Subjects which we ask you to consider carefully (articles 15-22 of the GDPR). We recall in particular:

• right of access:
  • confirms whether personal data is being processed
  • communication of the transfer of data to a third country or an international organization
  • obtain a copy of the personal data being processed (if and only if the rights and freedoms of others are not infringed)
• right to rectification
• right to erasure (“right to be forgotten”)
• right to restriction of processing
• obligation to notify in the event of rectification or deletion of personal data or limitation of processing
• right to data portability

Data Subjects also have the right to receive timely communication in the event of a personal data breach that may damage their dignity and freedom.

Finally, the Data Subjects have the right to lodge a complaint with the Italian Supervisory Authority - Guarantor for the protection of personal data - Piazza Venezia 11 - 00187 Rome - urp@gpdp.it

Updates

The Controller may modify this Privacy Policy at any time, to the broadest limits permitted by current legislation. The version currently in force is updated as of November 13, 2023.