Privacy policy

PRIVACY POLICY – Information furnished pursuant to Art.13 of Regulation EU 2016/679 (hereinafter referred to as GDPR)

This page contains the description of the management procedures regarding the processing of personal data acquired through this site (navigation and cookies, see paragraph 2.1 and 2.2) and other related services that provide for interaction with the user:

• register at the store (see paragraph. 2.3);
• subscribe to the newsletter(see paragraph 2.4);
• enrollment in academy courses (see paragraph 2.5);
• request partnerships in Italy and abroad (see paragraph.2.6);
• request for information (see paragraph 2.7);
• work with us (see paragraph 2.8).

 

This circular letter, provided pursuant to Art.13 of the GDPR, applies exclusively to the sites www.musetti.it and www.musettishop.com as also to the other websites that may be consulted by the user through links.

 

1) GENERAL INFORMATION

We would like to inform the users (hereinafter referred to as “interested parties” (pursuant to Art.4, c.1 of the GDPR) of the following general profiles, that apply to all the aspects of the data processing:

• all the data are processed legally, correctly and in transparency towards the party involved, in compliance with the general principles provided by Art.5 of the GDPR;
• specific safety measures are complied with to prevent the loss of data, illicit or incorrect usage and unauthorised access;

 

2) PRIVACY NORMS AND RIGHTS OF THE PARTIES INVOLVED

• the Data Processor is the undersigned Company, in the person of its legal representative (Contract data: Via Marcora, 2/4 – 29010 Pontenure – Tel: 800 298 911 – Email: info@musetti.it);
• the Data Processor has appointed a Data Protection Officer (Contract data: Dr. Gregorio Galli – Tel: 0523.010250 – Email: privacy@musetti.it) who may be addressed for the exercise of all the entitlements provided by Articles 15-21 of the GDPR (right to access, correct, cancel, limit, portability, oppose), and also revoke a previously given consent; in case of failure to respond to their requests, the parties involved may forward a complaint to the Supervisory Authority for the protection of the personal data (GDPR – Art.13, paragraph 2, letter d).

 

2) SPECIFIC INFORMATION

 

2.1 Connection data

The IT systems and the software procedures used in the operation of this web site acquire, in the course of their normal processing, some personal data, the transmission of which is necessary in the use of the Internet communication protocols. These deal with information that is not gathered to be associated to identified parties, but which by their nature could, through processing and associations with data held by third parties, allow the identification of the users. Under this category of data we find the IP addresses or the computer domain names used by the users that connect to the site, the addresses in URI (Uniform Resource Identifier), notation of the resources requested,the time of the request, the method used in submitting the server request, the dimension of the file received, the numeric code indicating the status of the answer given by the server (successful, error, etc.) and other parameters related to the operating system and the user’s IT environment.

 

Aims and juridical basis of the processing (GDPR-Art.13, comma 1, lett. c)	This data is used only for the purpose of receiving anonymous statistical information on the use of the site and to control its correct functioning. The data could moreover be used to ascertain the responsibility in case of presumed IT crimes to the damage of the site (legitimate interests of the owner).
Communication scopes (GDPR-Art.13, para. 1, lett. e, f)	The data is processed exclusively by in-house staff, duly authorised and trained in data processing (GDPR-Art.29) and shall not be disclosed to external parties, diffused, or transferred to countries outside the EU. Only in cases of investigation, this data may be placed at the disposal of the competent authorities.
Data conservation period (GDPR-Art.13, para. 2, lett.a)	This data is usually kept for brief periods, with the exception of possible prolonged connections related to investigation activities.
Data submission (GDPR-Art.13, para 2, lett. f)	The data is not submitted by the party involved but acquired automatically by the site’s technological systems.

 

 

2.2 Cookies

Cookies are brief fragments of texts (letters and/or numbers) that allow the web server to memorise on the client browser information to be reused in the course of the same visit to the site (session cookies) or subsequently, also after days (persistent cookies). The cookies are memories, according to the user’s preferences, by the single browser on the specific device used (computer, tablet, smartphone). Similar technologies like for example, web beacons, transparent GIFs and all the types of local storage introduced with HTML5, can be used to gather information on the user’s behavior and the use of the services. After this circular letter we shall refer to the cookies and all the similar technologies by using only the term “cookie.”

 

EXAMPLE OF COOKIES THAT COULD BE USED IN THE SITE

Technical cookies: this type of cookies is needed for the correct functioning of some areas of the sites.The cookies of this category include both persistent and session cookies. In their absence, the site or some portions of it may not function properly.

Analytical cookies: this type of cookies is used to gather information on the use of the site. Such information may be used for statistical analyses, to improve the site and simplify its use, besides monitoring the correct functioning. This type of cookie gathers information in anonymous form on the activities of the site user and the way in which they landed in the site and the pages visited. This category of cookies are sent by the site itself or by third-party domains (Google Analytics: the user may disable in a selective manner, the action of Google Analytics by installing on their own browser the opt-out component furnished by Google at thefollowing link https://tools.google.com/dlpage/gaoptout.For further information consult the links indicated below: https://www.google.it/policies/privacy/partners/)

 

Social Network: The site may contain links and plug-ins to corporate pages found on the social networks, that may entail the use of cookies of the social network itself. At the following links you may view the cookies policies and manage one’s own preferences:

– Facebook (informative): https://www.facebook.com/help/cookies/

– Facebook (configuration): own account –privacy section

– Youtube: https://www.youtube.com/?hl=it&gl=IT

– Linkedin (informative): https://www.linkedin.com/legal/cookie-policy

– Linkedin (configuration): https://www.linkedin.com/settings

– Google+ (informative): http://www.google.it/intl/it/policies/technologies/cookies/

– Google+ (configuration): http://www.google.it/intl/it/policies/technologies/managing/

– Twitter (informative): https://support.twitter.com/articles/20170514

– Twitter (configuration): https://twitter.com/settings/security

 

Management of the preferences through the main navigation browsers

The user may declare whether or not he accepts the cookies by using the settings of his own browser (note that as a default, almost all the web browsers are set to automatically accept the cookies). The settings may be modified and defined in a specific way for the various web sitesand applications. Furthermore the best browser allows different settings to be defined for the “proprietor” cookies and for those of “third parties.” Usually the configuration of the cookies is done by the menus, “Preferences,” “Instruments” or “Options.” Here below is a list of links to the guides for the management of cookies of the main browsers:

Internet Explorer: http://support.microsoft.com/kb/278835

Internet Explorer [mobile version]: http://www.windowsphone.com/en-us/how-to/wp7/web/changing-privacy-and-other-browser-settings

Chrome: http://support.google.com/chrome/bin/answer.py?hl=en-GB&answer=95647

Safari: http://docs.info.apple.com/article.html?path=Safari/5.0/en/9277.html

Safari [versione mobile]: http://support.apple.com/kb/HT1677

Firefox: http://support.mozilla.org/en-US/kb/Enabling%20and%20disabling%20cookies

Android: http://support.google.com/mobile/bin/answer.py?hl=en&answer=169022

Opera: http://help.opera.com/opera/Windows/1781/it/controlPages.html#manageCookies

 

Further information

• www.allaboutcookies.org (for more information on the cookie technology and their functions)
• www.youronlinechoices.com/it/a-proposito (allows users to oppose the installation of the main profiling cookies)
• www.garanteprivacy.it/cookie (set of main norm interventions on matters by the Italian Supervisory Authorities).

 

 

2.3 Sign up at the store (https://www.musettishop.com/it_it/customer/account/create/)

The sign up allows the creation of the user to be used to make purchases on the musettishop.

 

Aims and juridical basis of the processing (GDPR-Art.13, para. 1, lett. c)	All the data requested is used for the creation of the profile and the administrative/operating management of the purchases made. The processing is done to comply with the contract and pre-contract obligations (product purchase) with the clients and the relevant law obligations (GDPR-Art.6, para. 1, lett. b, c). Also a specific, free and informed consent is requested (GDPR-Art.6, para.1, lett. a), documented through a specific checkbox (GDPR-Art.7, para.1).
Communication scope (GDPR-Art.13, para. 1, lett. e,f)	The data is processed exclusively by duly authorized staff trained in data processing (GDPR-Art.29). For the sole purpose of data maintenance, the company that furnished the technological platform and its assigned staff may access the data. The data shall not be diffused or transferred to countries outside the EU.
Data conservation period(GDPR-Art.13, para. 2, lett. a)	The data is kept for a time compatible with the purposes of the gathering and, however, up to the user’s possible request for cancellation.
Data submission (GDPR-Art.13, para. 2, lett. f)	Failure to submit the data implies the impossibility to complete the registration and make purchases.

 

 

2.4 Newsletter subscription

The newsletter allows for constant and in-depth information compared to useful information of the reference sector, on events and initiatives, products/services offered and also possible promotional offers.

 

Aims and juridical basis of the processing (GDPR-Art.13, para. 1, lett. c)	Only the email address is requested for the sole aim of sending the newsletter. Registration is subordinated to the acceptance of the specific, free and informed consent (GDPR-Art.6, para. 1, lett. a), documented through the specific checkbox (GDPR-Art.7, para.1).
Communication scope (GDPR-Art.13, para. 1, lett. e,f)	The data is treated exclusively by duly authorised staff trained in data processing (GDPR-Art.29). For the sole purpose of site maintenance the company that furnished the technological platform and its assigned staff may access the data. The data shall not be diffused or transferred to countries outside the EU.
Data conservation period (GDPR-Art.13, para. 2, lett. a)	The data is kept up to when the user possibly and freely decides to “unsubscribe” any time through the link, contained in writing with every message sent.
Data submission (GDPR-Art.13, para.2, lett.f)	Failure to confer the email address and consent shall entail the impossibility to obtain the newsletter service.

 

 

2.5 Enrollment in the Academy courses

Through the portal, one can enroll in the Musetti Coffee Academy courses.

 

Aims and juridical basis of the processing(GDPR-Art.13, para. 1, lett. c)	The data requested is needed for the enrollment procedures and the correct provision of the course. The enrollment is subordinated to the acceptance of a specific, free and informed consent (GDPR-Art.6, para.1, lett. a), documented through a specific checkbox (GDPR-Art.7, para. 1). During the courses video/photo shoots may be taken for information/promotional purposes. Such processing is subordinated to an ulterior specific, free and informed consent (GDPR-Art.6, para. 1, lett. a), documented through a specific checkbox (GDPR-Art.7, para. 1).
Communication scope (GDPR-Art.13, para. 1, lett.e,f)	The data is processed exclusively by duly authorised staff trained in data processing (GDPR-Art.29). For the sole purpose of site maintenance,the company that furnished the technological platform and its assigned staff may access the data. The data shall not be diffused or transferred to countries outside the EU. The photo/video contents, are understood to be provided free of charge, and may be divulged on paper or digital channels like websites and social networks.
Data conservation period (GDPR-Art.13, comma 2, lett.a)	The data is kept for periods compatible with the purpose of the gathering.
Data submission (GDPR-Art.13, comma 2, lett.f)	Failure to submit the enrollment data will make the course enrollment impossible. In case of the failed consent to provide the photos/videos, the company may adopt procedures to prevent the filming/photo shoots of the party involved.

 

 

2.6 Partnership requests in Italy and abroad (https://www.musetti.it/distribuzione/export/and https://www.musetti.it/distribuzione/italia/)

The pages allow the party involved to offer his partnership in Italy or abroad. The applicant’s data and address is requested, with deeper information on the request.

 

Aim and juridical basis of the processing(GDPR-Art.13, para. 1, lett. c)	The data is acquired to carry out correct evaluation of the requests and also for the subsequent answers. The forwarding of the request is subordinated to a specific, free and informed, consent (GDPR-Art.6, para.1, lett. a), documented through a specific checkbox (GDPR-Art.7, para.1).
Communication scope (GDPR-Art.13, para. 1, lett. e,f)	The data is processed exclusively by duly authorized staff trained in data processing (GDPR-Art.29). For the sole purpose of site maintenance the company that furnished the technological platform and its assigned staff may access the data. The data shall not be diffused or transferred to countries outside the EU.
Data conservation period (GDPR-Art.13,para. 2, lett. a)	The data is kept for periods compatible with the purpose of the gathering.
Data submission (GDPR-Art.13, para. 2, let .f)	The submission of data referred to in the obligatory fields(marked by *) is necessary in order to receive a request, while the optional fields are finalised in furnishing the staff with further useful elements to facilitate contact.

 

 

2.7 Request for information

The page allows the interested party to request information. Identification and contact data is requested.

Aims and juridical basis for processing (GDPR-Art.13, para. 1, lett. c)	The identification and contact data is requested in order to be able to answer the visitor’s contact requests. The sending of requests is subordinated to the specific, free and informed consent (GDPR-Art.6, para.1, lett. a), documented through the specific checkbox (GDPR-Art.7, para. 1)
Communication scopes (GDPR-Art.13, para. 1, lett.e,f)	The data is processed  exclusively by duly authorised staff trained in data processing (GDPR-Art.29). For the sole purpose of site maintenance,the company that furnished the technological platform and its assigned staff may access the data. The data shall not be diffused or transferred to countries outside the EU.
Data conservation period (GDPR-Art.13, para. 2, lett. a)	The data is kept for periods compatible with the purpose of the gathering.
Data submission (GDPR-Art.13, para. 2, lett.f)	Submission of data in the obligatory fields is needed in order to be able to receive an answer, while the optional fields are used to furnish the staff with further useful elements to facilitate contact.

 

 

2.8 Work with us

The page allows the visitor to propose his own professional candidature for a job at Musetti’s. Identification and addresses of the applicant are requested, besides the candidate’s CV.

Aims and juridical basis of data processing (GDPR-Art.13,para. 1, lett.c)	The data is requested for the correct management of the staff selection procedures, assessment of the requests and also for the subsequent response. The sending of the request is subordinated to a specific, free and informed consent (GDPR-Art.6, para. 1, lett. a).At the time of the possible hiring, the candidate will receive a regular notice connected to the professional relationship established.
Communication scopes (GDPR-Art. 13, para.  1, lett. e, f)	The data is processed exclusively by duly authorised staff trained in data processing (GDPR-Art.29). For the sole purpose of site maintenance,the company that furnished the technological platform and its assigned staff may access the data. The data shall not be diffused or transferred to countries outside the EU.
Data conservation period (GDPR-Art.13, para. 2, lett. a)	The data is kept for periods compatible with the aims of the collection.
Data submission (GDPR-Art.13, para. 2, lett. f)	Submission of data in the specific fields (marked by *) is needed in order to be able to propose one’s candidature, while the optional fields are finalised in furnishing the staff with further elements needed to facilitate the selection.

 

 

3) POLICY UPDATES

Please note that this circular letter may be subjected to periodical revisions, also in relation to the referral norms and laws. In case of important changes, these will be highlighted in the site’s homepage. However, kindly consult this policy periodically.