Privacy Policy

Malvestiti Group (hereinafter, “Malvestiti Group”) provides users of the Malvestiti Group website (hereinafter, the “Site”, which can be visited at the address https://www.malvestiti.com/) with the following information, in compliance of Article 13 of Regulation (EU) 2016/679 (or General Data Protection Regulation, hereinafter “G.D.P.R”) and subsequent national adaptation legislation (hereinafter referred to, jointly with the G.D.P.R., as “Applicable Privacy Law”). In fact, during consultation of the Site, information relating to users is collected, which constitutes personal data pursuant to the Applicable Privacy Law.

The information is provided exclusively for the aforementioned site, and not for other sites accessible via links on the same.

DATA PROCESSING OWNER
The personal data controller is Malvestiti Group, with registered office in Via Risorgimento 205, 20092 Cinisello B. (MI) (e-mail: info@malvestiti.com; tel: 02 618731)

TYPES OF DATA PROCESSED
The data that is processed by Malvestiti Group if the user uses the Website is specified below.
The user assumes responsibility for any personal data of third parties entered or published on the Site, and guarantees that he has the right to communicate or disseminate them - thus freeing Malvestiti Group from any liability towards the aforementioned third parties.

Personal data automatically acquired when visiting the Site
  • Navigation data.. Malvestiti Group automatically collects data on the device ((pc, tablet, mobile phone or other mobile device)and the connection used by the user, including, for example, the IP address, the date and time of access, information hardware and software information, device event information, unique identifiers, crash data.
  • Data on the use of the Site.. Malvestiti Group collects information on the ways in which the user has used the Site, including, for example, the pages of the Site or other content viewed, searches performed, third-party applications (Google Maps, in the “Contacts” section and “About us” page) on the Site that are used by the user and links to other sites and applications on which the user has clicked.
Personal data provided directly by the user
a) Optional data
  • Data provided through requests for information by e-mail. If the user, to request information, explicitly and voluntarily sends e-mails to the Malvestiti Group addresses indicated on the Website, or uses the form available under the heading “Contact Requests” in the “Contacts” section and "Send CV" in the"Carreers"  section, Malvestiti Group acquires the e-mail address and any personal data of the user (and/or of third parties) entered in the text of the electronic communication, as well as - for the “Contact Requests” and "Send CV" – – the e-mail address, name, telephone, address and any personal data of the user (and/or third parties) included in the text of the message and in the CV.
Personal data collected through cookies
Malvestiti Group uses cookies to collect data on the user's activity on the Site and on his preferences, as well as other technical data relating to the user.
For further information on the use of cookies, the user can consult the website's cookie policy.

PURPOSE OF TREATMENT
Contribute to the operation of the Site; provide the user with the services that Malvestiti Group provides through the Website; protect your vital interests; comply with current legislation or pursue other needs of public interest.
In fact, user data is processed:
  • to operate, measure, improve and secure the Site and the services rendered through it;
  • to prevent, detect and mitigate security breaches and potentially prohibited or illegal activities.
PPursue the legitimate interests of Malvestiti Group in such a way that these interests do not prevail over the fundamental rights and freedoms of the user.
In fact, user data is processed:
  • to identify and solve problems encountered by the user in using the Site (for example, blocked or non-functioning pages).
These treatments protect the Malvestiti Group's interest in keeping the Website functioning and efficient. Furthermore, they do not harm the fundamental rights and freedoms of the user, as they are predictable and widespread treatments on each site. Furthermore, these treatments also benefit the user himself, allowing the Site to continue to function.

METHOD OF TREATMENT
The user's personal data are processed with IT or telematic tools, exclusively for the purposes for which they were collected (see above), and stored for a specific period according to the criteria indicated in this privacy policy (see below).
Personal data may be known and processed by Malvestiti Group personnel, duly instructed in the precautions to be taken provided for by the Applicable Privacy Law.

DURATION OF TREATMENT
The specific retention times of the user's personal data are documented in the Malvestiti Group's register of processing activities (implemented pursuant to article 30 of the G.D.P.R.).
The user's personal data is kept (according to the criteria set out in recital 39 and in article 5, paragraph 1, letter e) of the GDPR) for a period necessary to ensure that the Site works, and that Malvestiti Group provides users the services provided through the Site. This period, in any case, cannot exceed 10 years from the collection.
The user's personal data may be kept for longer periods than those just seen only if this is necessary for Malvestiti Group to fulfill its legal obligations or to protect a right in court.
Upon expiry of these retention terms, the user's data is deleted or permanently anonymised.

DATA COMMUNICATION
Malvestiti Group may communicate the personal data processed only to the subjects and only for the purposes indicated below.
Fight against illegal acts and security breaches
  • Malvestiti Group may communicate users' personal data to third parties who are responsible for preventing, detecting and mitigating potentially illegal acts and security breaches.
Law enforcement, prosecution and ways authorized by law
  • Malvestiti Group may communicate users' personal data to Judicial Authorities, Public Authorities or authorized third parties, in cases where the law provides for it. As well as, in general, in cases where it is necessary to fulfill legal obligations or verified requests relating to a criminal investigation or an alleged illegal activity, or to respond to claims by others regarding the rights, property or safety of Malvestiti Group , its employees or users.
RIGHTS OF INTERESTED PARTIES
Only in the cases and with all the limits established by the articles 15-22 G.D.P.R., the user has the right - at any time, free of charge and without particular charges and formalities - to:
  • obtain confirmation of the fact that Malvestiti Group processes your personal data;
  • access your personal data, and know the origin, the purposes and purposes of the processing, the retention period and information regarding the third parties to whom the personal data are communicated;
  • withdraw your consent at any time, in the event that this constitutes the basis of the treatment;
  • update or rectify your personal data collected by Malvestiti Group, so that they are always exact and accurate;
  • exercise the so-called right to be forgotten, or to have your personal data collected by the Malvestiti Group deleted from the databases and/or archives, including backup files, of the Malvestiti Group;
  • limit the processing of your personal data by Malvestiti Group;
  • oppose the processing, for those personal data processed to pursue needs of public interest or legitimate interests of Malvestiti Group;
  • be notified, within a reasonable time, of any corrections, cancellations or limitations on processing ordered by the Malvestiti Group, as well as any revocation of such measures.
The user can exercise these rights by sending an informal written request to the Malvestiti Group, by sending a specific e-mail e-mail to the address info@malvestiti.com
Once the aforementioned e-mail has been received, Malvestiti Group will satisfy the request within one month of receipt of the same.
This term may be extended by two months - subject to notice to the user - taking into account the complexity and number of requests.
Malvestiti Group reminds the user that, if the response to his requests has not been satisfactory in his/her opinion, he/she can contact and lodge a complaint with the Guarantor Authority for the Protection of Personal Data (http://www.garanteprivacy.it/) in the ways provided by the Applicable Privacy Law.

CHANGES TO THE PRIVACY POLICY
Malvestiti Group reserves the right to make changes to this privacy policy at any time, publicizing them on this page of the Website.
Therefore, the user is requested to consult this page often, referring to the date of the last modification indicated at the bottom. Unless otherwise specified, in the event of changes to the previous privacy policy it will continue to apply to the personal data collected up to that moment.

Date of last update: July 2023