Privacy Policy

Articles 13 and 14 of Regulation (EU) 2016/679

In accordance with Articles 13 (for data collected from the data subject) and 14 (for data not collected directly from the data subject) of Regulation (EU) 2016/679 (GDPR), the following information is provided to Users of this Website (hereinafter referred to as “Data Subjects”), exclusively concerning the processing of data through this Website and not through any other websites that may be accessed via links, for which we suggest reviewing the privacy policies of the respective Data Controllers.

Data Controller

MAGNAMASSA CALZATURE SRL
Address: VIA GIORGIO LA PIRA 10 – 62015 – MONTE SAN GIUSTO (MC), Italy
VAT: 02034920435

The Controller reserves the right to delegate processing activities to Data Processors, for example, for personal data managed for purposes such as technical support, maintenance, technical administration of this Website, or for browsing data analysis, through third-party agencies and partners whose details can be provided upon request.

The Controller and the Processors process User data also through internal Authorized Persons, who are designated and instructed on proper data handling.

Personal Data Processed

Article 4 of EU Regulation 2016/679 defines “personal data” as any information relating to an identified or identifiable natural person (“data subject”). A person is considered identifiable when they can be identified, directly or indirectly, in particular by reference to an identifier such as a name, identification number, location data, online identifier, or other factors related to physical, physiological, genetic, mental, economic, cultural or social identity.

“Data processing” refers to any operation or set of operations, whether or not by automated means, concerning personal data, such as collection, recording, organization, structuring, storage, adaptation, retrieval, consultation, use, disclosure, alignment, restriction, erasure or destruction.

All personal data provided through the Website will be processed lawfully and fairly to deliver the requested services and respond to communications and inquiries, always in accordance with the institutional purposes of MAGNAMASSA CALZATURE SRL.

Types of Data Collected:

• Data voluntarily submitted through the site (e.g. contact forms): name, surname, email, phone number.
• User-submitted data through forms (e.g., sign-ups, reviews): personal data like name, surname, tax ID, username, user ID, password, birth details, contact info, address.
• Commercial data: required for fulfilling contractual/tax obligations (e.g., payment info, VAT number, purchase history, billing and credit data).
• Browsing data: includes IP addresses, domain names, URI notation, request timestamps, server response codes, and technical data from the user’s environment. These are collected anonymously for statistical purposes, not for user identification.
• Geolocation data when the user interacts with the site based on location.
• External content services such as Google Maps, Google Ads, Google Fonts, cookies, and usage data.

Users may exercise their privacy rights at any time to verify, update, rectify, or delete their personal data.

Purposes of Processing

The personal data collected will be processed in compliance with GDPR, to support the core functionalities of the Website, including (but not limited to):

• Browsing the site,
• Registering/logging into a reserved area,
• Shopping cart and purchase flow,
• Contact forms,
• Optional newsletter subscription and user profiling (if consent is provided).

Specifically, data will be processed:

1. To allow use of the Website and respond to specific User requests (e.g., via contact forms).
2. (With user consent) To deliver content tailored to User preferences based on previous browsing behavior, through profiling cookies.

Obligation to Provide Data

• Browsing data provision depends on the privacy settings of the User’s browser. Some settings may impair website navigation.
• Certain data inputs are required for specific site features to work (e.g., submitting a contact form requires at least a name/email).
• Profiling data is always optional and subject to explicit consent.

Optional data will always be requested via a specific consent checkbox.

Consequences of Refusing to Provide Data

• Failure to provide data for purpose 1 (site functionality) will prevent the use of services or receiving responses.
• Refusal to provide data for purpose 2 (profiling) will only prevent tailored content from being offered.
  
  

Data Retention

• Data collected for order processing and related sales activities will be retained as per legal obligations (up to 10 years).
• Browsing data will be kept for as long as technically necessary.
• Voluntarily provided data will be retained until the User withdraws consent (e.g., clearing cookies or sending a request).
  
  

Data Subject Rights

Each Data Subject has the following rights under Articles 15–22 of the GDPR:

• Access
• Rectification
• Erasure („right to be forgotten“)
• Restriction of processing
• Notification in case of rectification/erasure/restriction
• Data portability
• Objection to processing
• Not to be subject to automated decision-making, including profiling.
  
  

These rights may be exercised by sending a written request to:
📧 magnamassacalzature@gmail.com

Complaints

Data Subjects may file a complaint with the supervisory authority pursuant to Articles 77+ of the GDPR. In Italy, this is the Italian Data Protection Authority (Garante per la protezione dei dati personali).
Legal action can be taken either with the Authority or in court.

Profiling

Profiling helps evaluate a User’s preferences and interests based on their activity and is used to provide more tailored services. Profiling on this Website may occur via third-party cookies.

Consent for profiling cookies is collected via simplified methods. Collected data may be further processed manually to personalize the browsing and purchasing experience.

Profiling includes:

• Automated processing of logged-in users’ personal data.
• Cross-referencing data from multiple services used by the user.
• Use of indicators (besides cookies) to associate behaviors with identifiable users or devices.

Data Recipients

Personal data may be shared with:

• Subsidiaries, affiliates, or associated companies of the Data Controller or Processor,
• Consultants and third-party service providers (including those outside the EU, only if they comply with the Privacy Shield framework),
• Providers of email marketing or marketing automation services.

Data Retention (Profiling)

Profiling data is stored until consent is withdrawn by the Data Subject.

Right to Withdraw Consent

Consent may be withdrawn at any time via:

• Email to: magnamassacalzature@gmail.com
• “Unsubscribe” link included in communications (where applicable)