Privacy Policy

This notice is made available to you - pursuant to Articles 13 and 14 of the European Regulation 2016/679 on the protection of personal data ("Regulation" or "GDPR") - and is addressed to those who interact with the web services accessible by electronic means from this website ("website or site").This Notice is intended to inform you of the manner in which your personal data will be processed.

DATA CONTROLLER

The Data Controller of your personal data is Mega Italia Media S.p.A. whose identification data can be found in the footer of this website.

GENERAL PRINCIPLES AND COMMITMENT ON DATA PROTECTION

Mega Italia Media S.p.A. is committed to protecting all personal data it processes, adhering to the following general principles.

All data is processed lawfully, fairly and transparently towards the data subject, in accordance with the general principles set out in EU Reg. no. 2016/679 and current legislation on the protection of personal data:

all data are processed and collected only for the purposes set out in this Policy or for the specific purposes already shared with the data subject, with the aim of collecting, processing and using as little personal data as possible;
if the personal data collected are no longer needed for any purpose or for legal obligations, every effort will be made to delete, destroy or anonymise them;
specific security measures are observed to prevent data loss, unlawful or incorrect use and unauthorised access;
personal data will not be shared, sold, made available or communicated to parties other than those indicated in the Policy.

TYPES OF DATA COLLECTED

The website offers content of an informative and, at times, interactive nature. During navigation, the Site may, therefore, acquire information on the visitor in the following ways:

Navigation data

The computer systems and software procedures used to operate this website acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols. This information is not collected in order to be associated with identified interested parties, but by its very nature could, through processing and association with data held by third parties, allow users to be identified. This category of data includes the IP addresses or domain names of the computers used by users connecting to the site, the URI (Uniform Resource Identifier) notation addresses of the resources requested, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters relating to the user's operating system and IT environment. This data is used for the sole purpose of obtaining anonymous statistical information on the use of the site and to check its correct operation, and is deleted immediately after processing. The data could be used to ascertain responsibility in the event of hypothetical computer crimes to the detriment of the site.

Cookies

In order to make its services as efficient and easy to use as possible, this Site makes use of cookies. Therefore, when you visit the Site, a small amount of information is placed on your device, as small text files called "cookies", which are saved in the directory of your web browser. There are different types of cookies, but basically the main purpose of a cookie is to make the Site work more efficiently and to enable certain functionalities. For more information you can consult the Site's Cookie Policy.

Data voluntarily provided by the user

No personal information about visitors to the website is collected or used. Visitors remain anonymous. The only exception concerns information voluntarily provided by the user in the site's forms, which is necessary to fulfil contractual obligations to provide the requested services or to process user requests.

In the event of a request to use the services offered by the site, other personal data may be collected, such as tax code, place and date of birth, etc., which are necessary exclusively for the provision of the services requested.

The optional, explicit and voluntary sending of electronic mail to the addresses indicated on this site entails the subsequent acquisition of the sender's email address, as well as any other personal data entered, necessary to respond to requests.

In the event of purchasing products or services on the website with e-commerce functions (if any), the user will be required to provide his/her name, the data necessary for invoicing, contact details and information on payment methods and credit card. The Controller will only use this information for processing purchases and to send specific information relevant to the confirmation of purchases. The information provided will not be used for commercial purposes and will not be sold, transmitted, licensed or otherwise passed on to third parties. The only parties who may acquire payment data are credit card companies, who may be contacted to verify the validity of credit cards. In any case, the site administrator ensures the adoption of scrupulous procedures to protect browsing data and the use of special care to protect credit card data provided when booking online.

Subscription to the site's promotional newsletter (if any) is optional and is subject to acceptance of specific, free and informed consent. The data is stored until you request cancellation from the service, which can be done freely at any time through the link at the bottom of each message sent.

OPTIONAL PROVISION OF DATA

Apart from what has been specified for navigation data, the user is free to provide his or her personal data via the collection form, or in any case to indicate in the contact section with the Office in order to make online purchases, use the services offered, request information and other communications. Failure to provide such data may make it impossible to obtain what has been requested. The sending of data entails the subsequent acquisition of the sender's email address, as well as any other personal data entered, necessary to respond to requests.

PURPOSE AND LEGAL BASIS OF PROCESSING

Users' personal data are processed for the following purposes:

ensure access to the Site, navigation, and the use of online services made available in connection with the Site;
for requirements relating to the authorisation, enabling and customisation of access to the various areas and related content of the Site for the use of the services offered;
where the activity is envisaged and subject to the consent of the User, for the sending by e-mail of informative and promotional communications and newsletters by the Controller in relation to its own initiatives and/or those of related companies.
Establishment of liability in the event of hypothetical computer crimes to the detriment of the site.

The legal basis for the processing is:

for the purposes referred to in points a) and b), by the performance of the contract to which you are party or by the performance of pre-contractual measures, or by legal obligations
for the purpose referred to in point c), by the consent freely given by the data subject;
for the purpose referred to in point d), by the legitimate interest of the Data Controller.

METHODS, PLACE AND DURATION OF PROCESSING

Personal data are processed by computer and/or telematic means. The processing is carried out using organisational methods and logics strictly related to the stated purposes.

The Data Controller has implemented technical and organisational measures to provide an adequate level of security and confidentiality for personal data.These measures take into consideration the state of the art of technology, the costs of its implementation, the nature of the data and the risks associated with its processing.The aim is to protect the data from accidental or unlawful destruction or alteration, accidental loss, unauthorised disclosure or access and from other forms of unlawful processing.

In addition, when handling your personal data, the Data Controller collects and processes personal data that is adequate, relevant and not excessive, as required to fulfil the purposes set out above, and ensures that such personal data remains up to date and accurate.

The data are processed at the operational premises according to which the Data Controller is organised, and at companies appointed and duly appointed as Data Processors. The data will not be transferred outside the European Union. It is in any case understood that the Data Controller, should it become necessary, shall have the right to move the location of the servers to countries outside the EU. In this case, the Data Controller assures as of now that the transfer of data will take place in compliance with the applicable legal provisions by entering, if necessary, into agreements that guarantee an adequate level of protection.

The data shall be processed for the time strictly necessary to pursue the above purposes, without prejudice to any retention periods provided for by laws or regulations.

CATEGORIES OF PERSONS TO WHOM DATA MAY BE DISCLOSED

The data collected by the Data Controller will only be shared for the above-mentioned purposes; we will not share or transfer your personal data to third parties other than those listed in this Policy.In the course of our activities and exclusively for the same purposes as those listed in this Policy, your personal data may be transferred to the following categories of recipients:

the data controller's business partners, to whom the data is disclosed by the data controller solely for the purpose of processing online purchases or ensuring the provision of services
hosting providers, IT companies, communication agencies, third-party technical services, postal couriers
persons, companies or professional firms that provide assistance and consultancy to the Data Controller in accounting, administrative, legal, tax and financial matters;
persons whose right to access the data is recognised by law or by orders of the authorities.

With such persons, if necessary, agreements may be signed by the Controller identifying them as Data Processors or Joint Processors. The updated list of Data Processors or Joint Processors can always be requested from the Data Controller.

USERS' RIGHTS WITH REGARD TO THEIR PERSONAL DATA

The data subject, i.e. the natural person to whom the personal data relate, has the right to request from the Controller access to, rectification or erasure of his/her personal data, as well as to request the restriction of or object to the processing of his/her personal data. The data subject also has the right to data portability. To exercise these rights, please refer to the contacts indicated in this information sheet.

All requests received will be processed and acknowledged in accordance with the applicable regulations, also with reference to the actual existence of the conditions for their acceptance. In the absence of such subsistence, the Data Controller may not process requests. The data controller shall make every effort to reply to legitimate and well-founded requests within one month from their receipt. Depending on the complexity and number of the requests, as well as the above, this period may be extended by two months. Upon the final outcome of the processing of the request and against the same, the data subject has the possibility to lodge a complaint with the supervisory authorityogaranteprivacy.it and to lodge a judicial appeal.

CHANGES TO THE POLICY

The Data Controller reserves the right to make changes to this policy in order to incorporate changes in legislation or to adapt to technological innovations. Any changes will be reported on this web page, which can be consulted at any time via the hyperlink located on the home page of the Site.