Privacy policy

PERSONAL DATA PROTECTION INFORMATION

(Pursuant art. 13, EU Regulation 2016/679)

Dear Data Subject,

the protection of potential and/or current clients’ and users’ personal data has always been considered crucial by Magnus Siculus S.r.l.

With this document (hereinafter referred to as “the Information”), we intend to renew our effort to guarantee that the processing of your personal data, performed by any means, both automatic or manual, will be executed in full observance of the rights and protections recognized under the (EU) 2016/679 Regulation (hereinafter referred to as “the GDPR” or “the Regulation”) and under further applicable laws concerning personal data protection.

With the term personal data reference is made to the definition provided by art. 4(1) of the Regulation, namely “any information relating to an identified or identifiable natural person (‘data subject’); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person” (hereinafter referred to as “Personal Data”).

The Regulation provides that, before proceeding with the Personal Data processing – whereby it is to be understood, according to the definition provided by art. 4(2) of the Regulation, namely “any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction” (hereinafter referred to as “the Processing”) –the owner of such Personal Data must be informed on the reasons for which they were requested and in which ways they will be used.

In that respect, this Information – drafted according to the transparency principle and all the elements set out by art. 14 of the Regulation – aims to provide, in a simple and intuitive way, all the useful details you need to confer your Personal Data intelligently and prudently, or to request, at any time, clarifications or modifications.

A. DATA CONTROLLER

The subject performing your Personal Data Processing for the purposes of Section C of this Information and that will therefore assume the role of Data Controller – according to the definition provided by art. 4(7) of the Regulation, namely “the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data” – is:

• Magnus Siculus S.r.l. (hereinafter referred to as “the Data Controller” or “Magnus Siculus”), with its registered office in Via Raffaele Maffei snc, 91022 Castelvetrano (TP) (hereinafter referred to as “the Registered Office”).

C. PURPOSES

In order to allow you to register on this website (hereinafter referred to as “the Website”) – in the sections wherein registration and/or the submission of request using contact modules and/or the newsletter subscription is allowed – the Data Controller needs to collect some of your Personal Data.

Therefore, the Processing of your Personal Data will be performed by the Data Controller to allow you to join the initiatives promoted through the Website, to receive the newsletter, to send information requests, to purchase Magnus Siculus products as well as to enjoy all the other services in turn offered on the Website in which you have registered and/or in which you are browsing.

To ensure that the Data Controller correctly performs the Processing’s operations for the aforesaid purposes, you are required to provide the Personal Data that are not marked with the wording “(optional)”.

Such processing is lawful pursuant to art. 6, comma 1, point b) of the Regulation.

Failing to provide even one of the marked data will impede your Personal Data’s Processing; subsequently, your registration to the Website will not be finalized and/or you will not be able to access the services for which the Personal Data provision was required.

The Personal Data required for the aforesaid purposes will be the ones indicated in the registration form and/or the contact form, including but not limited to: name, surname, date of birth, permanent address/domicile, e-mail, house phone number, fiscal code or social security number.

In this case, you are entitled to read this Information within the Privacy section of the Website.

C. FURTHER PURPOSES

In addition to the purposes stated above, your Personal Data may be processed for Direct Marketing; the term “Direct Marketing” refers to promotional and/or marketing activities the Data Controller carries out to provide you an enhanced service, promote products and services of your liking sold and/or delivered by the Data Controller.

With respect to such direct marketing purposes, it should be noted that, pursuant to letter f) of art. 6(1) of the Regulation, the Data controller may carry out those activities pursuing legitimate interest, regardless of your consent and, in any case, until you object or restrict (according to Section G, letter d) of this Information) such Processing, as it is clear in Recital 47 of the Regulation, in which it is stated that: “The processing of personal data for direct marketing purposes may be regarded as carried out for a legitimate interest”. This may be also due to evaluations made by the Data Controller concerning the potential and possible primacy of your interests, rights and fundamental liberties involved in the Personal Data Protection over his legitimate interest to send direct marketing communications.

You can legitimately revoke your consent, even partially, for the direct marketing purposes without prejudice to the Processing for other purposes.

The contacting methods related to direct marketing activities may be both traditional or automated. In any case, as better stated in Section G of the present Information, you can revoke your consent even partially, e.g. agreeing to the sole traditional contacting methods.

As for the contacting methods involving the usage of your mobile contacts, we remind you that direct marketing activities will be carried out only prior to verification of your subscription to the “Registro delle Opposizioni”, pursuant to and in accordance to D.P.R. 7 September 2010, n. 178 and subsequent modifications.

D. SUBJECTS TO WHOM YOUR PERSONAL DATA MAY BE DISCLOSED

Your Personal Data may be disclosed to specific subjects deemed recipient of such Personal Data. In fact, art. 4(9) of the Regulation, defines as Recipient of Personal Data a “natural or legal person, public authority, agency or another body, to which the personal data are disclosed, whether a third party or not.” (hereinafter referred to as “the Recipient”).

Under this regard, in order to perform all the Processing activities needed for the purposes indicated in this Information, the following Recipients may have to process your Personal Data:

• third parties carrying out Processing activities and/or connected and/or instrumental to them, on behalf of the Data Controller. Such subjects are appointed Processors, which term according to art. 4(8) of the Regulation indicates: “a natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller” (hereinafter referred as to “the Processor”);

• single individuals, employees and/or assistants of the Data Controller, to whom specific and/or more activities involving Personal Data Protection are entrusted. Specific instructions concerning Personal Data security and correct usage are issued to these individuals who are defined by art. 4(10) of the Regulation, as: “Any natural or legal person, public authority, agency or body other than the data subject, controller, processor and persons who, under the direct authority of the controller or processor, [that] are authorized to process personal data” (hereinafter referred to as “Authorized subjects”);

Where required by the law or to prevent and repress the commission of a criminal offence, your Personal Data may be disclosed to public entities or judicial authorities without them being defined as Recipients. In fact, according to art. 4(9) of the Regulation, “public authorities which may receive personal data in the framework of a particular inquiry in accordance with Union or Member State law shall not be regarded as recipients”.

F. WITHDRAWAL OF CONSENT

As required by the Regulation, in case you have given your consent to your Personal Data Processing for one or more purposes for which it was required, you can, at any time withdraw it fully or partially without prejudice to the lawfulness of the Processing based on the consent given prior to the withdrawal.

The methods whereby your consent can be withdrawn are simple and intuitive: you will only need to contact the Data Controller using the contacting methods indicated in this Information, respectively in the B and H Section.

In addition to what is stated above and for the sake of simplicity, in case you were receiving unwanted advertisement from the Data controller, you will only need to click on the unsubscribe button or to send a mail to info@magnussiculus.com and you will receive no further communication for which you had given your consent.

G. RIGHTS

Pursuant to art. 15 of the Regulation, you can access your Personal Data, ask for their rectification and update, if incomplete or erroneous, ask for their removal in case the collection was performed in breach of the law or a regulation. In addition, you can object to the Processing for legitimate and specific reasons.

Furthermore, here you find listed all the rights you can exercise, at any time, towards the Data Controller:

a. RIGHT OF ACCESS

You have the right, pursuant to art. 15(1) of the Regulation, to obtain confirmation from the Data Controller that a Personal Data Processing is ongoing and, in such circumstance, to obtain access to such Personal Data and to the following information: a) the purpose of the Processing; b) the types of Personal Data at issue; c) the Recipients or the types of Recipients to whom your Personal Data were or will be disclosed, especially if Recipients belong to third countries or international organizations; d) if applicable, the required storage period of Personal Data or, if not applicable, the criteria used to determine such period; e) the existence of a right of the Data Subject to ask the Data Controller the rectification or erasure of Personal Data or the restriction of the Personal Data Processing or to object to the Processing; f) the right to lodge a complaint to the relevant Data Protection authority; g) if the Personal Data were not collected through the Data Subject, all the information concerning their origin; h) the existence of an automated decisional process, including profiling mechanisms as referred to in the art. 22(1,4) of the Regulation and, at least in these cases, relevant information on the logic used as well as the importance and the expected consequences of such Processing for the Data Subject.

b. RIGHT OF RECTIFICATION

You can obtain, pursuant to art. 16 of the Regulation, the rectification of your Personal Data that are incorrect. Furthermore, taking into account the purposes of the Processing, you can obtain the integration of your Personal Data that is incomplete, also by giving a supplementary statement.

c. RIGHT TO ERASURE

You can obtain, pursuant to art. 16 of the Regulation, the erasure of your Personal Data without unjustified delay and the Data Controller will have an obligation to erase your Personal Data, when one of the following applies: a) your Personal Data are not necessary to the purposes for which they where collected or otherwise processed anymore; b) you proceeded with the withdrawal of the consent on which the Processing of your Personal Data is based and there is no other legal reason for their Processing; c) you objected to the Processing according to art. 21(1,2) of the Regulation and there is not any prevailing legitimate reason to proceed with your Personal Data Processing; d) your Personal Data were illegally processed; e) it is necessary to erase your Personal Data in fulfilment of a statutory obligation indicated in the EU or national legislation.

In some cases, as required by art. 17(3) of the Regulation, the Data Controller can lawfully refuse to proceed with the erasure of your Personal Data if their Processing is necessary, for instance, to exercise the right to freedom of expression and information, to fulfill a statutory obligation, on grounds of public interest, for archiving in the public interest, scientific, statistical, historical use, and for the establishment, exercise or defence of legal claims.

d. RIGHT TO RESTRICTION OF PROCESSING

You have the right to obtain from the Data Controller restriction of processing, pursuant to art. 18 of the Regulation, where one of the following applies: a) you have contested the accuracy of the Personal Data (at least for a period enabling the controller to verify the accuracy of the Personal Data); b) the Processing is unlawful but you objected to the erasure of the Personal Data, requiring the restriction of their use instead; c) despite the Data Controller no longer needs your Personal Data for the purposes of the Processing, they are required for the establishment, exercise or defence of legal claims; d) you objected to the Processing pursuant to Article 21(1) of the Regulation, pending the verification whether the legitimate grounds of the Data Controller override yours.

In case of Treatment’s restriction, your Personal Data will be processed, without prejudice of their storage, only with your consent or for the establishment, exercise or defence of legal claims, or for upholding the rights of another natural or legal person or on grounds of a relevant public interest. We will inform you, in any case, before such restriction will be revoked.

e. RIGHT TO DATA PORTABILITY

You have, at any time, the right to ask and obtain, pursuant to art. 20(1) of the Regulation, all your Personal Data processed by the Data Controller in a structured, commonly used and machine-readable format, and transmit them to another Data Controller without hindrance. In this case, you will ensure that we receive all the exact contact information concerning the new Data Controller to whom you intend to transfer your Personal Data, providing us with a written authorization.

f. RIGHT TO OBJECT

Pursuant to art 21 (2) of the Regulation and the Recital 70, you have the right to object, at any time, to the Processing of your Personal Data when these are processed for direct marketing purposes, including profiling as far as it is linked to such direct marketing.

g. RIGHT TO LODGE A COMPLAINT WITH A SUPERVISORY AUTHORITY

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with the competent supervisory authority if you consider that the Processing of Personal Data infringes this Regulation and/or the applicable laws.

To exercise the aforementioned rights, you will have to contact the Data Controller in the following ways:

- Sending an email to info@magnussiculus.com

- Sending a registered letter to the Registered Office of the Data Controller

H. PLACE OF PROCESSING

Your Personal Data will be processed by the Data Controller within the territories of the European Union.