Privacy Policy

PRIVACY POLICY PURSUANT TO EU REGULATION 2016/679
(European Regulation no. 679/2016 and Legislative Decree 101/2018)

MEDIAL INTERNATIONAL SPA socio unico – Registered and Head Office: Via Volta 7/9 – 26837 Mulazzano (LO) – VAT NR. 07834000155, from now on MEDIAL INTERNATIONAL SPA socio unico, as holder of the personal data treatment according to art.13 and 14 of EU Regulation 679/2016 – General Regulation on Data Protection (“GDPR”), in compliance with the obligations laid down by the legislator to protect privacy, hereby informs you about your rights and how your personal data will be processed by the methods and for the purposes specified here below:

The “Data Owner”

Pursuant to art. 24 of EU Regulation 2016/679 on protection of individuals with regard to the processing of personal data and on the free movement of such data (hereinafter: “EU Regulation”), MEDIAL INTERNATIONAL SPA socio unico is the Data Controller and, in accordance of art. 13 and 14 of the EU Regulation, it informs you that personal data acquired, also with reference to existing legal relations, are processed in compliance with the above mentioned legislation.

In relation to the before mentioned data processing, the Data Controller provides, among other things, the following information:

Personal data” (ex art. 4 number 1 of EU Regulation 2016/679) means any information concerning an identified or identifiable natural person (“data subject”); an identifiable person is one who can be identified, directly or indirectly, with particular reference to an identifier such as a name, an identification number, location data, an online identifier or one or more characteristic elements of his/her physical, physiological, genetic, mental, economic, cultural or social identity;

Processing” (ex art. 4 number 2 of EU Regulation 2016/679) means any operation or set of operations which is performed upon personal data or sets of personal data, whether or not by automatic means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction. This treatment must be based on principles of correctness, lawfulness, transparency, protecting your privacy and your rights.
The personal data collected concern:

– Generic identification and contact data such as: name and surname, address, telephone number, fax number, e-mail.

Any other personal data, including details for which consent must be given, for the performance of services and products offered by our company, will be defined in dedicated and specific information.

We declare that the all personal data we collect are provided by the interested party (in its broadest meaning) directly or indirectly through, for example, third party data controllers, publicly available sources, data intermediaries and other interested parties.

Data Controller’s Identity and contact details 
Name and Surname or Company Name: MEDIAL INTERNATIONAL SPA socio unico
Registered office address: Via Volta 7/9 Mulazzano (MI)
Phone details: 02/90660436
Email details: privacy@medialinternational.com

Purposes of processing

1. Contact details collection of potential customers to expand the commercial base
2. Sale of own products
3. Fulfilment of obligations under laws, regulations, Community legislation, or provisions issued by Authorities and Supervisory and Control Bodies in relation to or in any case connected with the activities carried out.
4. Compliance with administrative, accounting and fiscal processes;
5. Management of general administrative processes;

The following chart shows the legal basis, data categories, personal data categories, and related storage period for each of the purposes identified above :

CHART 1

* Categories of recipients:

L’elenco dei Destinatari/Responsabili esterni con ulteriori dati utili alla identificazione è disponibile presso il Titolare del trattamento dei dati personali.

In relation to the purposes indicated, the main recipient of the processed data is the Data controller. Data may also be share to companies and/or persons, who provide services, including external ones, on behalf of the Data Controller. Among these are indicated for greater clarity and by way of example but not limited to the following types:

Third parties and organizations;
Accounting management consultants;
Labour consultants and payroll processing;
Law firms;
IT service companies and Software suppliers;
Control and supervisory bodies.

You are entitled to ask the Data Controller for the full listo of external Recipients/Outsource Managers with further data useful for identification.

Data transfer to both UE and extra-UE countries 
Personal data may be transferred to EU and non-EU countries.

Data retention period 
See chart 1; column 4 (data retention period)

Data subject’s rights
The interested party, in relation to the personal data covered by this policy, has the right to exercise the rights provided for by the EU Regulation below:
1- right to access your Personal data [art. 15 of the EU Regulation] (the possibility to be informed about the processing of you Personal Data and to get receive a copy);
2- right to obtain rectification of you Personal Data [art. 16 of the EU Regulation] (the data subject has the right to ask to update Personal data);
3- right to ask for the cancellation of your Personal Data without unjustified delay (“right to be forgotten”) [art. 17 of the EU Regulation] (You are entitled to request the deletion of your data);
4- right to limitation of processing Personal Data in the cases provided for under art. 18 of the EU Regulation, including in the case of unlawful processing or contestation of the accuracy of Personal Data by the data subject [art. 18 of the EU Regulation];
5- right to data portability [art. 20 of the EU Regulation], the data subject may request in a structured format his or her Personal Data in order to transmit them to another data controller, in the cases provided for by the same article;
6- right to object to the processing of Personal Data [art. 21 of the EU Regulation] (the data subject has the right to object to the processing of his/her personal data);
7- right not to be subject to automated decision-making processes, [art. 22 of the EU Regulation] (the data subject has the right not to be subject to a decision based solely on automated processing).

Further information about the rights of the interested party may be obtained by asking the Holder for a complete extract of the above mentioned articles.

The below mentioned rights may be exercised, in accordance with the EU Regulation, by sending an email to the Data Controller to privacy@medialinternational.com , which, in compliance with art. 19 of the EU Regulation, will proceed to inform the recipients to whom the personal data have been communicated of any corrections, cancellations or limitations to the processing requested, where this is possible.

If the processing purpose pursued by the subjects referred to in the previous point “categories of recipients” as well as by the Data Controller, has as its legal basis the consent, the data subject has the right to proceed, at any time, to the revocation by sending an email to: privacy@medialinternational.com

Pursuant to Article 7 of the EU Regulation, the withdrawal of consent does not affect the lawfulness of the processing based on the consent given before the withdrawal.

Right to lodge a complaint

If a data subject considers that the his rights have been compromised, he or she has the right to lodge a complaint with the Guarantor Authority for the protection of personal data, according to the methods indicated by the same Authority at the following web address www.garanteprivacy.it.

Mandatory provision of personal data

Please note that where the purposes of the processing have as their legal basis a legal or contractual (or even pre-contractual) obligation, the data subject must necessarily provide the requested data.
Otherwise, it will be impossible for the Data Controller to pursue the specific processing purposes.

The Company does not make use of any automated decision-making process, including profiling.

Methods of data processing
Personal data will be processed on paper, computerized and telematic form and entered in the relevant databases (customers, users, etc..). The employees expressly designated by the Data Owner can get access and become aware of data as responsible and authorized persons to process personal data. They may carry out consultation, use, processing, comparison and any other appropriate operations, including automated ones, in compliance with the provisions of the law necessary to ensure, among other things, the confidentiality and security of data and the accuracy, updating and relevance of data with respect to the stated purposes.

Modifications and updates
MEDIAL INTERNATIONAL SPA socio unico may also change and/or review this privacy policy as a consequence of changes and/or additions made by the Legislator. Any change will be notified and the Data subject may find the updated privacy policy on our website at the page: www.medialinternational.com in the dedicated section (Privacy Policy).
Ver. 00 -20