INFORMATIVA SULLA PRIVACY E SUI COOKIE
Ai sensi dell’articolo 13 del Regolamento (UE) 2016/679 del Parlamento europeo e del Consiglio.

INFORMATIVA SULLA PRIVACY E SUI COOKIE

PRIVACY POLICY

Pursuant to Article 13 of Regulation (EU) 2016/679 of the European Parliament and of the Council, Max Tonso Cashmere informs you, in accordance with Article 13 of Regulation (EU) 2016/679 regarding the protection of natural persons with regard to the processing of personal data (the “EU Regulation”), that it is necessary to process personal data collected automatically or provided during your browsing or use of the website http://www.maxtonsocashmere.com (the “Website”). http://www.maxtonsocashmere.com (il “Sito Web”).

1. DATA CONTROLLER

The data controller is MAX TONSO CASHMERE, represented by its legal representative, with registered office at Via Moree 16 – Mendrisio, Switzerland (hereinafter, “MAX TONSO CASHMERE” or the “Controller”).

2. TYPES OF DATA PROCESSED

Voluntarily provided data
To allow the use of the Website and its services (including creating a personal account, online purchases, and inquiries), the Controller needs to process certain personal data, such as name, surname, and email address. Voluntary submission of emails, registration, completion of purchase forms, or inquiry forms may involve the collection of identifying data (name, surname, phone number, address, email) and any additional information provided by the user in messages or forms.

Browsing data
The IT systems and software procedures of the Website automatically collect certain personal data during their normal operation. This includes: IP addresses or domain names of the devices used by users, the URI (Uniform Resource Identifier) addresses of the requested resources, request timestamps, methods used to submit requests to the server, file size obtained in response, numeric codes indicating the server response status (success, error, etc.), and other parameters related to the user’s operating system and IT environment. These data are necessary for the proper functioning of the Website and are processed exclusively to obtain statistical information on the use of the services (most visited pages, number of visitors by time slot or day, geographical areas of origin, etc.) and to verify proper operation. Browsing data are retained for no more than seven days and are deleted immediately after aggregation, except for requests from judicial authorities.

3. PURPOSES AND LEGAL BASIS OF PROCESSING

The collected personal data are used exclusively for:
A. Use of the Website and Services To allow browsing, registration, online purchases, and access to a personal account. Legal basis: (i) performance of a contract to which you are a party; (ii) compliance with a legal obligation of the Controller.
B. Promotional communications and direct marketing Sending information about Max Tonso Cashmere activities and promotions, advertising materials, direct marketing communications, newsletters, discounts, and loyalty initiatives through traditional or automated means (e.g., email). Legal basis: your explicit consent.
C. Personalized offers and benefits (profiling) Sending offers, discounts, and other benefits based on your preferences and purchase behavior, including through loyalty programs that involve registration and analysis of your purchase data. Legal basis: your explicit consent. Data may be stored electronically and/or on paper.

4. DATA RETENTION

The Controller will retain personal data only for the time necessary to achieve the purposes for which they were collected:

Browsing data: maximum 7 days;
Marketing purposes: deleted or anonymized within 24 months from collection;
Profiling purposes: deleted or anonymized within 12 months from collection.

Data may be retained beyond these periods to comply with legal obligations or to establish, exercise, or defend a right in court.

5. RECIPIENTS OF DATA

Data will not be disclosed but may be known to:
- Authorities authorized under EU or national law;
- Service providers and partners acting as independent data controllers or data processors (e.g., couriers, marketing and advertising agencies, IT consultants, law firms, market research companies, personalization and optimization service providers, call centers, business partners).
Data may also be processed by employees and collaborators of the Controller, duly appointed and authorized. All data communication is carried out in compliance with technical and organizational measures to ensure an adequate level of security.

6. TRANSFER OF DATA OUTSIDE THE EU

The Controller does not transfer your personal data outside the European Union. All processing takes place within the EU.

7. AUTOMATED DECISION-MAKING

With your explicit consent, your data may be used for profiling and automated decision-making aimed at sending personalized offers, discounts, and promotions. The Controller adopts all appropriate measures to protect your rights, freedoms, and legitimate interests under Article 22(3) of the EU Regulation. Refusal to give consent does not prevent the use of the Website or completion of purchases.

8. NATURE OF DATA PROVISION

Purpose A (Website use and online purchases): data provision is mandatory; refusal will prevent access to services or completion of purchases.
Purposes B and C (marketing and profiling): data provision is optional; refusal will prevent receiving newsletters, offers, and personalized communications.

9. RIGHTS OF THE DATA SUBJECT

Under the EU Regulation, you have the right to:
- withdraw consent at any time;
- access your personal data (Art. 15);
- rectify or complete your data (Art. 16);
- request deletion of your data (Art. 17);
- request restriction of processing (Art. 18);
- receive data in a structured, machine-readable format (Art. 20);
- object at any time to the processing of personal data, including profiling (Art. 21);
- not be subject to decisions based solely on automated processing, including profiling (Art. 22);
- lodge a complaint with a supervisory authority or take judicial action (Art. 77).

To exercise your rights, you may contact the Controller at: Via Moree 16 – Mendrisio, Switzerland.

10. CONSENT TO DATA PROCESSING

Dati forniti volontariamente dall’utente
Per consentire l’utilizzo del Sito e dei suoi servizi (creazione di account, acquisti online, richieste di informazioni), il Titolare del trattamento ha bisogno di trattare dati personali quali: nome, cognome, indirizzo e-mail, numero di telefono e altre informazioni fornite volontariamente dall’utente tramite moduli o messagBrowsing data
I sistemi informatici del Sito acquisiscono automaticamente dati personali quali indirizzi IP, nomi a dominio dei dispositivi, URI delle risorse richieste, orario della richiesta, metodo di invio, dimensione del file ottenuto, codice di stato della risposta e altri parametri relativi al sistema operativo o ambiente informatico.
Tali dati sono trattati esclusivamente per il corretto funzionamento del Sito e per analisi statistiche sull’uso dei servizi e non persistono oltre 7 giorni, salvo eventuali richieste dell’Autorità giudiziaria.

Cliccando su “Invia”, confermi di aver letto e compreso l’informativa e acconsenti al trattamento dei dati per le finalità descritte.