privacy policy

1. Personal Data Collected by the Application

   The Owner collects the following types of Personal Data:

   1. Content and information voluntarily provided by the User
      • Contact Data and Content: are those Personal Data that the User voluntarily provides to the Application during its use, such as personal data, contact details, credentials to access the services and/or products provided, personal interests and preferences and other personal content, etc.
      • Sensitive Data: Personal Data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, as well as genetic data, biometric data intended to uniquely identify a natural person, Data relating to a person’s health or sexual life or sexual orientation.
      • Personal data collected by social media: Users may share data provided to social media with the Application. The User has the ability to control the Personal Data that the Application can access through the privacy settings available in the relevant social media. By associating social media managed accounts with the Application and authorizing the Owner to access such Personal Data, the User consents to the acquisition, processing, and storage of such Personal Data in accordance with this Privacy Policy.

      Failure on the part of the User to provide Personal Data, for which there is a legal or contractual obligation or if they constitute a necessary requirement for the use of the service or for the conclusion of the contract, will result in the inability of the Owner to provide all or part of its services.

      The User who communicates to the Owner Personal Data of third parties is directly and exclusively responsible for their origin, collection, processing, communication or dissemination.

   2. Data and content automatically acquired while using the Application:
      • Technical Data: computer systems and software procedures responsible for the operation of this Application may acquire, during their normal operation, some Personal Data whose transmission is implicit in the use of Internet communication protocols. This is information that is not collected to be associated with identified Users, but which by its very nature could, through processing and association with Data held by third parties, allow Users to be identified. This category includes IP addresses, or domain names used by Users connecting to the Application, addresses in URI (Uniform Resource Identifier) notation of requested resources, the time of the request, the method used in submitting the request to the server, the size of the file obtained, etc.
      • Usage Data: may also collect Personal Data related to the User’s use of the Application, such as pages visited, actions taken, features and services used.
      • Geolocation Data:
          the Application may collect Personal Data about the User’s location which may be GNSS (Global Navigation Satellite System, e.g. GPS data) data, as well as data identifying the nearest cell tower, Wi-Fi and Bluetooth hotspots, communicated when enabling location-based products or features.
   3. Personal data collected through cookies or similar technologies:

      The Application uses cookies, web beacons, unique identifiers, and other similar technologies to collect Personal Data about the pages, links you visit, and other actions you take when using our services. They are stored to be retransmitted the next time the same User visits.

      The User can view the full Cookie Policy at: Cookie Policy Maderotherapy

2. Purpose

   The Personal Data collected may be used for the performance of contractual and pre-contractual obligations and for legal obligations as well as for the following purposes:

   • Support and User Contact: to respond to User inquiries and help them with problems.
   • Comment and Feedback: to allow the User to submit reviews or comments.
   • Login through accounts on external platforms: to allow the User to log in to the Application through an account on external platforms (e.g. Google, Facebook).
   • External handling of payments by credit card, bank transfer or other means: to handle User payments via external platforms that capture payment data without the Application owner having access.
   • Internal handling of payments by credit card, bank transfer or other means: to handle payments by acquiring payment data directly from the User.
   • Technical monitoring of infrastructure for maintenance, troubleshooting and performance improvement: to identify and resolve any technical problems and improve performance.
   • Traffic optimization and distribution: to more efficiently manage and improve the performance of the technical infrastructure.
   • Statistics only with anonymous data: to perform statistical analysis based on aggregate data or data that do not identify the User.
   • User behavior monitoring, analysis and tracking: to monitor and analyze how the User behaves on the Application.
   • User Profiling: to group and analyze User characteristics or behaviors in an automated way and provide them with personalized services or messages.
   • Personalization of the User’s User Experience: to modify the Application and adapt it to the User’s needs.
   • Email or newsletter sending and mailing list management: to contact the User with emails containing commercial and promotional information related to the Application.
   • Advertising targeting and remarketing: to show more relevant advertisements to the User based on his/her browsing behavior and preferences.
   • Own market research and surveys: to do market research and surveys in-house.
   • Third-party market research and surveys: to do market research and surveys of third parties.
   • Commercial Affiliation: to enable the Application to publish tracked links or banners to promote third-party products or services.
   • Implementation of third-party advertising campaigns: to implement third-party advertising campaigns within the Application.
   • Transfer of data to third parties with marketing purposes: to sell Users’ data to third parties for their independent processing with marketing purposes.
   • __________.

3. Mode of treatment

   The processing of Personal Data is carried out using computer and/or telematic tools, with organizational methods and logic strictly related to the stated purposes.

   In some cases, individuals involved in the organization of the Data Controller (such as, for example, personnel management staff, sales staff, system administrators, etc.) or external parties (such as IT companies, service providers, postal couriers, hosting providers, etc.) may also have access to the Personal Data. Such individuals when necessary may be appointed as Data Processors by the Data Controller, as well as access Users’ Personal Data whenever necessary and will be contractually obligated to keep Personal Data confidential.

   The updated list of Responsible Persons can be obtained by emailing info@maderoterapia.it

4. Legal basis for processing

   The processing of Personal Data related to the User is based on the following legal bases:

   • The consent given by the User for one or more specific purposes;
   • the processing is necessary for the performance of a contract with the User and/or the execution of pre-contractual measures
   • the processing is necessary to comply with a legal obligation to which the Controller is subject
   • the processing is necessary for the performance of a task carried out in the public interest or in the exercise of public authority vested in the Controller
   • the processing is necessary for the pursuit of the legitimate interest of the Controller or third parties
   • processing is necessary for the pursuit of a vital interest of the Owner or a third party.

   However, it is always possible to ask the Owner to clarify the legal basis of each processing at info@maderoterapia.it

5. Location

   Personal Data are processed at the Holder’s operational offices and at any other location where the parties involved in the processing are located. For more information, contact the Holder at the following email address info@maderoterapia.it or at the following mailing address Via Bonaccini 45, 41011 Campogalliano, Modena, Italy.

6. Security measures

   The Processing is carried out in a manner and with appropriate tools to ensure the security and confidentiality of Personal Data, the Data Controller having adopted appropriate technical and organizational measures that ensure, and allow to demonstrate, that the Processing is carried out in accordance with the relevant legislation.

7. Period of Data Retention

   Personal Data will be kept for the period of time necessary to fulfill the purposes for which it was collected.

   In particular, Personal Data will be retained for the duration of the contractual relationship, for the performance of the fulfillments inherent and consequent thereto, for compliance with applicable legal and regulatory obligations, as well as for its own or third parties’ defensive purposes.

   Where the processing of Personal Data is based on the User’s consent, the Controller may retain the Personal Data until the consent is revoked.

   Personal Data may be kept for a longer period if necessary to fulfill a legal obligation or by order of an authority.

   All Personal Data will be deleted or retained in a form that does not allow User identification within 30 days after the end of the retention period. After the expiration of this period, the right of access, cancellation, rectification and the right to portability of Personal Data can no longer be exercised.

8. Automated decision-making processes

   The Application uses automated decision-making processes that can produce legal effects for the person or affect him/her in a significant way and operate according to these criteria: The site decides on the basis of the parameters that the customer will enter which plan to recommend to him according to his needs..

9. User Rights

   Users may exercise certain rights with respect to Personal Data processed by the Data Controller. In particular, the User has the right to:

   • Revoke consent at any time;
   • Object to the processing of their Personal Data;
   • Access their Personal Data;
   • verify and request rectification;
   • Obtain restriction of processing;
   • Obtain the deletion of their Personal Data;
   • Receive their Personal Data or have it transferred to another owner;
   • Propose complaints to the Data Protection Supervisory Authority and/or take legal action.

   In order to exercise their rights, Users may address a request to the contact details of the Owner indicated in this document. Requests are made free of charge and processed by the Holder as quickly as possible, in any case within 30 days.

10. Data Controller

    The Data Controller is CASADO PULIDO MANUEL, VAT.04030790366 C.F.CSDMNL64E10Z131B, headquartered in Via Bonaccini 45, 41011 Campogalliano, Modena, Italy, tax code/VAT number IT9416253036, e-mail address info@maderoterapia.it

Last updated: 24/03/2020