Privacy & Cookie Policy

Privacy Policy

The purpose of this document is to inform the individual (hereinafter the “Data Subject”) about the processing of their personal data (hereinafter “Personal Data”) collected by the data controller, MC DONALD S.R.L., with registered office at Via Follereau Raul, 8. 24027 Nembro (BG), tax code/VAT number 00963060165, email address web@zenoniecolombi.com (hereinafter the “Controller”), through the website www.zenoniecolombi.com (hereinafter the “Application”).

Changes and updates will be binding as soon as they are published on the Application. If the Data Subject does not accept the changes made to the Privacy Policy, they must stop using this Application and may ask the Controller to delete their Personal Data.

  1. Categories of Personal Data processed

The Controller processes the following types of Personal Data voluntarily provided by the Data Subject:

    • Contact details: first name, last name, address, email, telephone, images, authentication credentials, any additional information submitted by the Data Subject, etc.
    • Tax and payment data: tax identification number, VAT number, credit card details, bank account details, etc.

    The Controller processes the following types of Personal Data collected automatically:

      • Technical data: Personal Data generated by the devices, applications, tools and protocols used, such as information about the device used, IP addresses, browser type and Internet service provider (ISP). Such Personal Data may leave traces that, particularly when combined with unique identifiers and other information received from servers, may be used to create profiles of individuals.
      • Browsing and Application usage data: such as pages visited, number of clicks, actions taken, session duration, etc.
      • Data relating to the Data Subject’s precise location: for example, geolocation data that precisely identifies the Data Subject’s location, which may be collected through satellite networks (e.g., GPS) and other means, with the Data Subject’s prior consent. The Data Subject may withdraw consent at any time. L

      If the Data Subject fails to provide Personal Data that is required by law or contract, or that is necessary to conclude a contract with the Controller, the Controller will be unable to establish or continue the relationship with the Data Subject.

      L’The Data Subject who provides the Controller with the Personal Data of third parties is directly and solely responsible for its source, collection, processing, communication, or dissemination.

      1. Cookies and similar technologies

      L’Application uses cookies, web beacons, unique identifiers, and other similar technologies to collect the Data Subject’s Personal Data about the pages, links visited, and other actions performed when the Data Subject uses the Application. They are stored for transmission during the Data Subject’s next visit. The full Cookie Policy can be viewed at the following address: ____________________

      1. Legal basis and purposes of processing

      The processing of Personal Data is necessary:

        • for the performance of the contract with the Data Subject, specifically:
        1. fulfillment of any obligation arising from the pre-contractual or contractual relationship with the Data Subject
        2. registration and authentication of the Data Subject: to enable the Data Subject to register on the Application, log in, and be identified, including through external platforms
        3. support and contact with the Data Subject: to respond to the Data Subject’s requests
        4. payment management: to manage payments by credit card, bank transfer, or other methods
      1. as required by law, specifically:
            1. compliance with any obligations under applicable laws, laws, and regulations, particularly those relating to tax matters
              • on the basis of the Controller’s legitimate interest, for:
                  1. email marketing of the Controller’s products and/or services to sell the Controller’s products or services directly using the email address provided by the Data Subject in connection with the sale of a product or service similar to the one being sold
                  2. management, optimization, and monitoring of the technical infrastructure: to identify and resolve any technical issues, improve the Application’s performance, and manage and organize information in an IT system (e.g., servers, databases, etc.)
                  3. security and fraud prevention: to ensure the security of the Controller’s assets, infrastructure, and networks
                  4. statistics using anonymous data: to perform statistical analyses on aggregated and anonymous data to analyze the Data Subject’s behavior, improve the products and/or services provided by the Controller, and better meet the Data Subject’s expectations
                    • on the basis of the Data Subject’s consent, for:
                        1. profiling the Data Subject for marketing purposes: to provide the Data Subject with information about the Controller’s products and/or services through automated processing designed to collect personal information in order to predict or evaluate their preferences or behavior
                        2. retargeting and remarketing: to reach the Data Subject with a personalized advertisement after they have visited or shown interest in the products and/or services offered by the Application, using their Personal Data. L'The Data Subject may opt out by visiting the page of the Network Advertising Initiative
                        3. marketing purposes for the Controller's products and/or services: to send commercial and/or promotional information or materials, conduct direct sales of the Controller's products and/or services, or conduct market research using automated and traditional methods
                        4. determining the Data Subject's exact location: to detect the Data Subject's presence, monitor access, times, and the Data Subject's presence at a particular location, etc.

                        On the basis of the Controller's legitimate interest, the Application allows interactions with external platforms or social networks whose processing of Personal Data is governed by their respective privacy notices, which you are asked to consult. In any case, interactions and information obtained through this Application are subject to the privacy settings selected by the Data Subject on those platforms or social networks. In the absence of specific consent to processing for additional purposes, this information is used solely to enable use of the Application and provide the requested information and services.

                        The Data Subject's Personal Data may also be used by the Controller to defend itself in legal proceedings before the competent courts.

                        1. Methods of processing and recipients of Personal Data

                         

                        Personal Data is processed using paper and electronic tools, through organizational methods and procedures strictly related to the stated purposes and by adopting appropriate security measures.

                        Personal Data is processed exclusively by:

                          • persons authorized by the Controller of Personal Data who have undertaken to maintain confidentiality or are subject to an appropriate legal obligation of confidentiality;
                          • parties acting independently as separate data controllers or parties appointed by the Controller as data processors to carry out all the processing activities necessary to pursue the purposes set out in this notice (for example, business partners, consultants, IT companies, service providers, hosting providers);
                          • parties or entities to whom Personal Data must be disclosed by law or by order of the authorities.

                          The parties listed above are required to use appropriate safeguards to protect Personal Data and may access only the data necessary to perform the tasks assigned to them.

                          Personal Data will not be disclosed indiscriminately in any way.

                          1. Location

                          Personal Data will not be transferred outside the territory of the European Economic Area (EEA).

                          1. Personal Data Retention Period

                          Personal Data will be retained for the period of time necessary to fulfill the purposes for which they were collected, in particular:

                            • for purposes relating to the performance of the contract between the Controller and the Data Subject, they will be retained for the entire duration of the contractual relationship and, after its termination, for the standard limitation period of 10 years. In the event of litigation, for its entire duration, until the expiry of the time limits for bringing appeals
                            • for purposes relating to the Controller's legitimate interest, they will be retained until that interest has been fulfilled
                            • for compliance with a legal obligation, by order of an authority, and for legal defense, they will be retained in accordance with the time limits set by those obligations and regulations, and in any case until the expiry of the limitation period prescribed by the applicable laws
                            • for purposes based on the Data Subject's consent, they will be retained until consent is withdrawn

                            At the end of the retention period, all Personal Data will be erased or retained in a form that does not allow the Data Subject to be identified.

                            1. Data Subject Rights

                            Data Subjects may exercise certain rights with regard to the Personal Data processed by the Controller. In particular, the Data Subject has the right to:

                              • be informed about the processing of their Personal Data
                              • withdraw consent at any time
                              • restrict the processing of their Personal Data
                              • object to the processing of their Personal Data
                              • access their Personal Data
                              • verify and request the rectification of their Personal Data
                              • obtain the restriction of processing of their Personal Data
                              • obtain the erasure of their Personal Data
                              • transfer their Personal Data to another controller
                              • lodge a complaint with the supervisory authority responsible for protecting their Personal Data and/or take legal action.

                              To exercise their rights, Data Subjects may send a request to the following email address: web@zenoniecolombi.com. The Controller will handle requests immediately and fulfill them as soon as possible, and in any case within 30 days.

                              Last updated: 24/03/2023

                               

                              Cookie Declaration