PRIVACY POLICY REPORT AND REQUEST FOR CONSENT FOR THE USE OF PERSONAL INFORMATION

Dear user/interested party,
This report has been created according to art. 13 of the Legislative Decree of 30 June 2003 n.196 and later modifications (known as Privacy Code) as well as art. 14 of the Regulations (EU) 2016/679 of the European Parliament and Council of 27 April 2016.

We would like to inform you that the personal information you supply while on the site www.dotmug.net will be handled by Dot farm S.r.l.s as the data controller (from now on also referred to as the controller) in regards to the protective principles established by the Code on personal data and later modifications, as well as all European and national legislative actions and/or measures from the relevant authorities.

The following report has been created only for the site www.dotmug.net by Dot farm S.r.ls.and not for any other sites that a user may access through links.

We inform you that the optional, explicit and voluntary sending of e-mail messages to the addresses indicated on this site, as well as the completion of registration and contact forms, involves the acquisition of the sender’s email address, or Facebook profile in the case of use Messenger service, necessary to respond to requests, as well as any other personal data included in the message.

Finally we inform you that Dot farm S.r.ls. may send you suggestions via e-mail – if you have provided us with your address and given your consent – about products or services similar to those you have already requested. In this case, we will always remind you that can you opt out of receiving further similar communications, and that during your navigation on the pages of the site www.dotmug.net, you can install technical cookies on your browser in order to improve your user experience.

You will find more details about these cookies and related data handling in the  “COOKIES” policy

PURPOSE OF PROCESSING

The processing of data voluntarily provided by the User while navigating the site, by completing forms in the sections “Contact” is carried out by Dot farm S.r.ls. for the following purposes:
to grant the User access to the website www.dotmug.net for purposes strictly related to the provision of online services and in particular to make purchase orders and / or reservations;
with prior consent of the User, to establish and manage effective business relationships, with particular reference to promotion, advertising, and marketing related to products and services provided by Dot farm S.r.ls.
with the User’s consent, to monitor the quality of the service offered and the degree of user satisfaction, as well as to analyze the User’s habits and choices in order to send more appropriate commercial content;
to allow us to respond to requests received by the User during navigation.
We inform you that the “How can we help you” service is provided by Facebook Messenger. The processing of data voluntarily provided by the User when completing the form “Contact Us” is made for the following purpose:
e. to allow Dotfarm to respond to requests from the User.

TYPES OF DATA WE COLLECT AND HANDLE

With consideration of the personal autonomy of the interested party and considering the provision of navigation data, supplying the data referred to in paragraph A letters a) and d), is mandatory. Failure to provide, even partially, the data marked as obligatory will make it impossible for Dot farm to provide the requested service, the purchase order, the reservation order or the request received. The mandatory data fields are marked with an asterisk symbol.
The provision of data referred to in paragraph A b) c) is optional and failure to provide for such purposes will make it impossible to update Users on promotional and commercial initiatives.

DATA CONTROLLERS, PROCESSORS AND RESPONSIBLE PARTIES

The data controller is Dotfarm S.r.ls., in person of its legal representative for the time being, with registered office in Milan, Piazza del Rosario n. 2 (VAT number 08645540967), pec address: [email protected]; e-mail address: [email protected]. The person responsible for the processing is: Leopoldo Mauriello, available at the address of the Company indicated above. We inform you that the Data provided will be processed by: the Marketing Department; and Commercial office within Dot farm, who are all in charge of processing.

MANNER OF PROCESSING

The personal data provided will be processed at Dot farm S.r.ls., using transfer procedures in the manner and within the limits necessary to pursue the aforementioned purposes.
We also inform you that the Personal Data provided is stored using CMS tools developed ad hoc by Dot farm S.r.ls. or provided by third parties in compliance with the regulations in force, operating on the server and Cloud provided through the AWS platform. The machines are connected to nodes located in Europe, and beyond Europe if required, but only for the period when it is strictly necessary. In this case the transfer is carried out in compliance with the provisions and established by art. 46, 47 and 9 of Regulation (EU) 2016/679.
For more information on the policies related to cloud and server machines see this link: https://aws.amazon.com/it/privacy/

RETENTION

Data provided will be processed and stored by the Data Controller for purposes strictly related to the purposes referred to in point A, and kept by the Data Controller for the period strictly necessary for processing user reques. At the end of the retention period the data will be deleted / destroyed.
For processing carried out through third parties, please refer to the relevant external platforms cookie policy

YOUR RIGHTS

At any time you may exercise your rights for the Data Controller in accordance with Legislative Decree 193/2006 and Regulation (EU) 2016/679 which are reported here

RIGHT OF ACCESS – ARTICLE 15 OF REGULATION (EU) 2016/679

You have the right to obtain confirmation from the data controller about how your personal data is being processed, and in this case, to obtain access to your personal data and the following information:
the purposes of processing;
the types of personal data in question;
the recipients or types of recipients with whom you personal data has been or will be shared, in particular with recipients of third countries or international organizations;
whenever possible, the retention period of the personal data provided or, if not possible, the criteria used to determine this period;
the existence of your right to ask the data controller to modify or delete personal data or limit the processing of your personal data, or to oppose their handling of your data;
the right to lodge a complaint with a relevant authority;
if the data is not collected at the addressee, all information available on their origin;
the existence of an automated decision-making process, including profiling in accordance with art. 22 paragraphs 1 and 4 and, at least in such cases, significant information on the logic used, as well as the importance and expected consequences of such processing for you.
2. If personal data is transferred to a third country or to an international organization, you have the right to be informed of the existence of adequate guarantees pursuant to art. 46 relating to the transfer.
3. The data controller will provide a copy of the personal data being processed. If you request additional copies, the data controller may charge a reasonable fee based on administrative costs. If you submit the request electronically, and unless you specify otherwise, the information will be provided in a commonly used electronic format.
4. The right to obtain a copy referred to in paragraph 3 shall not affect the rights and freedoms of others.

II. RIGHT TO CORRECTIONS – ARTICLE 15 OF REGULATION (EU) 2016/679

You have the right to request a correction of inaccurate personal data from the data controller without justified delay. Taking into account the purposes of the processing, you have the right to y provide an additional declaration to supplement incomplete personal data.

III. RIGHT TO BE FORGOTTEN – ARTICLE 17 OF REG. (EU) 2016/679

You have the right request the data controller to delete your personal data without undue delay. The data controller is obliged to cancel the personal data without undue delay if one of the following reasons exists:
your personal data is no longer necessary for the purpose for which it was collected or processed;
you revoke the consent on which the processing is based in accordance with Article 6 (1) (a) or Article 9 (2) (a) and if there is no other legal basis for processing;
you oppose the processing pursuant to art. 21 (1), and there is no legitimate overriding reason to continue processing, or you oppose processing pursuant to Article 21 (2);
personal data is processed unlawfully;
personal data must be deleted to fulfill a legal obligation under European Union law or by the Member State to which the controller is subject;
the personal data has been collected in relation to the information service company offer referred to in Article 8 (1).
the data controller has made public personal data and is obliged, pursuant to paragraph 1, to delete it, taking into account the available technology and implementation costs, will take reasonable steps, including technical ones, to inform the data controllers that are processing the personal data of the request of the interested party to delete any link, copy or reproduction of personal data.
paragraphs 1 and 2 shall not apply when processing is necessary:
for the exercise of the right to freedom of expression and information;
to fulfill a legal obligation requiring processing under Union law or the law of the Member State to which the controller is subject, or to perform a task carried out in the public interest or in the exercise of public authority applicable to the data controller;
for reasons of public interest in the public health sector in accordance with Article 9 (2) (h) and (i) and Article 9 (3);
for the purposes of archiving in the public interest, for scientific or historical research or for statistical purposes in accordance with Article 89 (1), in so far as the right referred to in paragraph 1 risks making it impossible or seriously impedes meeting the objectives of this treatment; or
for the assessment, exercise or defense of a right in court.

IV. RIGHT TO THE RESTRICTION OF PROCESSING – ART. 18 REG. (EU) 2016/679

You have the right to request the data controller to restrict processing when one of the following occurs:
a. You dispute the accuracy of personal data, for the period necessary for the data controller to verify the accuracy of such personal data;
b. the processing is illegal but you do not want to delete your personal data, and ask that its use is limited instead;
c. the data controller no longer needs it for processing purposes, but you need the personal data to ascertain, exercise or defend a legal right in court;
d. You opposed the processing pursuant to art. 21, paragraph 1, pending the verification of legitimate reasons of the data controller.
2. If the processing is restricted in accordance with paragraph 1, such personal data will be processed and kept, only with your consent or for the assessment, exercise or defense of a right in court or for protect the rights of another natural or legal person or for reasons of significant public interest of the Union or of a Member State.
3. If you have obtained a restriction of processing pursuant to paragraph 1, you will be informed by the controller before the limitation is revoked. g.

RIGHT TO DATA PORTABILITY – ART. 20 REG. (EU) 2016/679

You have the right to receive, in a structured, commonly used and automatically readable form, your personal data that was provided to a data controller, and you have the right to transfer that data to another data controller without impediments by the data controller you provided them to if:
a. processing is based on consent pursuant to Article 6 (1) (a) or Article 9 (2) (a) or on a contract within Article 6 (1) (b) ;
b. processing is carried out automatically
2. In exercising your rights to the portability of data in accordance with paragraph 1, you have the right to obtain direct transfer of personal data from one controller to another, if technically feasible.
3. The exercise of the right referred to in paragraph 1 of this Article is without consideration of Article 17. This right does not apply to processing necessary to carry out a task in the public interest or to exercise of official authority vested in the data controller.
4. The right referred to in paragraph 1 must not affect the rights and freedoms of others.

RIGHT TO OPPOSE – ART. 21REG. (EU) 2016/679

You have the right to oppose at any time, due to your particular situation, the processing of your personal data pursuant to Article 6, paragraph 1, letters e) of), including profiling on the basis of of these provisions. The data controller will refrain from further processing your personal data unless there are demonstrable binding legitimate reasons to proceed with the processing that take precedence over your interests, rights and freedoms, or for the assessment, exercise or the defense of a right in court.
If personal data is processed for direct marketing purposes, you have the right to object at any time to the processing of personal data for such purposes, including profiling related to direct marketing.
If you oppose processing for direct marketing purposes, your personal data will no longer be processed for these purposes.
The right referred to in paragraphs 1 and 2 is explicitly brought to your attention and is presented clearly and separately from any other information no later than the first communication with you.
In the context of information company services and without consideration for Directive 2002/58 / EC, you may exercise your right to object through specific automated means.
Where personal data is processed for the purposes of scientific or historical research, or for statistical purposes in accordance with Article 89 (1), you have the right to object to the processing of personal data for reasons connected with your particular situation, unless the processing is necessary to carry out a task in the public interest.

GENERAL RULES FOR THE EXERCISE OF RIGHTS

We inform you that you can exercise your rights referred to in the preceding paragraphs at any time by sending an email to the following address:
[email protected]
Along with a digital copy of your current identity document.
We remind you that if you ask us to stop all processing of your personal data and not only for promotional purposes, we will not be able to continue to provide the services you have requested. And unless you request we stop sending only promotional communications through automated systems, we will stop all processing of your personal data even through traditional tools.
In any case, our company may keep some of your personal data if it proves necessary to defend or assert its rights.
If you wish, an updated list of the names of Data Processors is available from the Data Controller’s office, and you can also request it by e-mail by writing to [email protected]