DATA PROCESSING NOTICE

ART. 13 OF EU REGULATION 2016/679

Data Controller: The Data Controller of the personal data you provide for the contact request is Mad srl. You may contact the Data Controller at the email address info@thesecretcorset.com for any information as well as for exercising your rights provided by the regulation.

Purpose of Processing: The personal data you provide will be processed according to the principles of lawfulness, fairness, and non-excessiveness, and will be used to manage your contact or information request. To perform this processing, the Data Controller collects the user’s name, surname, and email address.

Legal Basis for Processing: The legal basis for the processing under Article 6, paragraph 1, letter a) is the consent of the data subject, expressed by sending the data for the contact or information request.

Nature of Provision: The provision of personal data is mandatory in order to respond to your contact or information request; in case of non-provision, it is not possible to submit the request.

Data Communication: The collected data may be communicated, always for needs related to the performance of the service, to Mad srl collaborators authorized to carry out processing operations as well as to those appointed as Data Processors pursuant to Article 28 of the European Regulation 2016/679.

Dissemination: The personal data provided will not be disseminated in any way.

Methods of Processing Personal Data and Storage Criteria: The processing will be carried out with paper and electronic support. The data you provide will be kept for the time necessary to provide you with a response as well as in compliance with the data and document retention obligations provided by law.

Transfer of Data to Non-EU Countries: Your data will not be transferred or communicated in any way to third countries outside the European Union.

Automated Processing: We inform you that the personal data provided will not be subjected to any automated decision-making processes.

Data Subject’s Rights: You may contact the Data Controller without particular formalities at the email address indicated in the “Data Controller” section to assert the rights provided by the European Regulation 2016/679 applicable to the data subject (access to data, deletion, rectification or limitation of processing, data portability).

Remedies: In case of no response within 30 days of the request, unless extended for up to 60 days for reasons due to the complexity or the high number of requests, the data subject can file a complaint with the Data Protection Authority or appeal to the judicial authority.