Privacy & cookie policy

PRIVACY POLICY - Information provided pursuant to Article 13 of EU Reg. 2016/679 (hereinafter GDPR)

This page describes how to manage the personal data acquired through this site (navigation logs and cookies, see paragraphs 2.1 and 2.2) and other related services, which involve interaction with the user:

register at the store (see par.2.3);
subscribe to the newsletter (see paragraph 2.4);
enrollment in academy courses (see paragraph 2.5);
request for partnerships in Italy and abroad (see paragraph 2.6);
request for information (see par.2.7);
work with us (see par.2.8).

This is an information notice, provided pursuant to art. 13 of the GDPR, valid only for sites www.musetti.it And www.musettishop.com not for other websites that may be consulted by the user via links.

1) GENERAL INFORMATION

Users (hereinafter "interested", pursuant to Article 4, paragraph 1 of the GDPR) are informed of the following general profiles, valid for all areas of processing:

all data are processed in a lawful, correct and transparent manner towards the interested party, in compliance with the general principles set out in Article 5 of the GDPR;
specific security measures are observed to prevent data loss, illicit or incorrect use and unauthorized access;

2) REFERENCES PRIVACY AND RIGHTS OF THE INTERESTED PARTIES

the Data Controller is the undersigned Company, in the person of the legal representative (Contact details: Via Marcora, 2/4 - 29010 Pontenure - Tel: 800 298 911 - Email: info@musetti.it );
the Data Controller has appointed a Data Protection Officer / Data Protection Officer (Contact details: Dr. Gregorio Galli - Tel: 0523.010250 - Email: privacy@musetti.it ) to which it is possible to contact to exercise all the rights provided for by articles 15-21 of the GDPR (right of access, rectification, cancellation, limitation, portability, opposition), as well as revoke a previously granted consent; in case of non-response to their requests, the interested parties can lodge a complaint with the supervisory authority for the protection of personal data (GDPR - Article 13, paragraph 2, letter d).

2) SPECIFIC INFORMATION

2.1 Navigation data

The computer systems and software procedures used to operate this website acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols. This is information that is not collected to be associated with identified interested parties, but which by their very nature could, through processing and association with data held by third parties, allow users to be identified. This category of data includes the IP addresses or domain names of the computers used by users who connect to the site, the URI (Uniform Resource Identifier) addresses of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters relating to the operating system and the user's IT environment.

Purpose and legal basis of the processing (GDPR-Art.13, paragraph 1, letter c)	These data are used for the sole purpose of obtaining anonymous statistical information on the use of the site and to check its correct functioning. The data could also be used to ascertain responsibility in the event of hypothetical computer crimes against the site (legitimate interests of the owner).
Communication scope (GDPR-Art.13, paragraph 1, letter e, f)	The data are processed exclusively by internal personnel, duly authorized and trained in the processing (GDPR-Art.29) and will not be disclosed to external subjects, disseminated or transferred to non-EU countries. Only in the event of an investigation can they be made available to the competent authorities.
Data retention period (GDPR-Art.13, paragraph 2, letter a)	The data are usually kept for short periods of time, with the exception of any extensions connected to investigation activities.
Conferment (GDPR-Art.13, paragraph 2, letter f)	The data are not provided by the interested party but automatically acquired by the technological systems of the site.

2.2 Cookies

Cookies are short fragments of text (letters and / or numbers) that allow the web server to store information on the client (the browser) to be reused during the same visit to the site (session cookies) or later, even at a distance of days (persistent cookies). Cookies are stored, according to user preferences, by the single browser on the specific device used (computer, tablet, smartphone). Similar technologies, such as, for example, web beacons, transparent GIFs and all forms of local storage introduced with HTML5, can be used to collect information on user behavior and on the use of services. In the following of this information we will refer to cookies and all similar technologies by simply using the term "cookie".

EXAMPLES OF COOKIES THAT COULD BE USED ON THE SITE

Technical cookies: Cookies of this type are necessary for the proper functioning of some areas of the sites. Cookies in this category include both persistent cookies and session cookies. In the absence of these cookies, the site or some portions of it may not work properly.

Analytical cookies: Cookies of this type are used to collect information on the use of the site. This information can be used for statistical analysis, to improve the site and simplify its use, as well as to monitor its correct functioning. This type of cookie collects anonymous information on user activity on the site and on how they arrived at the site and the pages visited. The cookies in this category are sent from the site itself or from third-party domains (Google Analytics: the user can selectively disable the action of Google Analytics by installing on his browser the opt-out component provided by Google at the following link https://tools.google.com/dlpage/gaoptout For more information, please refer to the link below: https://www.google.it/policies/privacy/partners/)

Social Network: The site may contain links and plug-ins to company pages on social networks, which may involve the use of cookies on the social network itself. At the following links you can view the cookies policies and manage your preferences:

- Facebook (information): https://www.facebook.com/help/cookies/

- Facebook (configuration): own account - privacy section

- Youtube: https://www.youtube.com/?hl=it&gl=IT

- Linkedin (information): https://www.linkedin.com/legal/cookie-policy

- Linkedin (configuration): https://www.linkedin.com/settings

- Google+ (information): http://www.google.it/intl/it/policies/technologies/cookies/

- Google+ (configuration): http://www.google.it/intl/it/policies/technologies/managing/

- Twitter (information): https://support.twitter.com/articles/20170514

- Twitter (configuration): https://twitter.com/settings/security

Management of preferences through the main navigation browsers

The user can decide whether or not to accept cookies using the settings of his browser (we point out that, by default, almost all web browsers are set to automatically accept cookies). The setting can be changed and defined specifically for different websites and web applications. Furthermore, the best browsers allow you to define different settings for "proprietary" and "third party" cookies. Usually, the configuration of cookies is done from the "Preferences", "Tools" or "Options" menu. Below are the links to the guides for managing the cookies of the main browsers:

Internet Explorer: http://support.microsoft.com/kb/278835

Internet Explorer [mobile version]: http://www.windowsphone.com/en-us/how-to/wp7/web/changing-privacy-and-other-browser-settings

Chrome: http://support.google.com/chrome/bin/answer.py?hl=en-GB&answer=95647

Safari: http://docs.info.apple.com/article.html?path=Safari/5.0/en/9277.html

Safari [mobile version]: http://support.apple.com/kb/HT1677

Firefox: http://support.mozilla.org/en-US/kb/Enabling%20and%20disabling%20cookies

Android: http://support.google.com/mobile/bin/answer.py?hl=en&answer=169022

Opera: http://help.opera.com/opera/Windows/1781/it/controlPages.html#manageCookies

Further information

Www.allaboutcookies.org (for more information on cookie technologies and how they work)

Www.youronlinechoices.com/it/a-proposito (allows users to oppose the installation of the main profiling cookies)

Www.garanteprivacy.it/cookie (collection of the main regulatory interventions on the subject by the Italian Guarantor Authority)

2.3 Register to the store ( https://www.musettishop.com/it_it/customer/account/create/ )

Registration allows the creation of the user to be used to make purchases on the musettishop.

Purpose and legal basis of the processing (GDPR-Art.13, paragraph 1, letter c)	The data necessary for the creation of the profile and the administrative / operational management of the purchases made are requested. The processing is carried out for the fulfillment of contractual and pre-contractual obligations (product purchase) with the customer and related legal obligations (GDPR-Article 6, paragraph 1, letter b, c). A specific, free and informed consent is also required (GDPR-Article 6, paragraph 1, letter a), documented through a specific check-box (GDPR-Article 7, paragraph 1).
Communication scope (GDPR-Art.13, paragraph 1, letter e, f)	The data are processed exclusively by duly authorized and trained personnel (GDPR-Art.29). The company providing the technological platform and its representatives will be able to access the data, only for site maintenance purposes. The data will not be disseminated or transferred to non-EU countries.
Data retention period (GDPR-Art.13, paragraph 2, letter a)	The data are kept for times compatible with the purpose of the collection and in any case until the user requests for cancellation.
Conferment (GDPR-Art.13, paragraph 2, letter f)	Failure to provide the data will make it impossible to complete the registration and make purchases.

2.4 Newsletter subscription

The newsletter allows for a constant and extensive study of useful information in the reference sector, events and initiatives, products / services offered, as well as any promotional offers.

Purpose and legal basis of the processing (GDPR-Art.13, paragraph 1, letter c)	Only the email address is requested, for the sole purpose of sending the newsletter. Registration is subject to the acceptance of specific, free and informed consent (GDPR-Article 6, paragraph 1, letter a), documented through a specific check-box (GDPR-Article 7, paragraph 1).
Communication scope (GDPR-Art.13, paragraph 1, letter e, f)	The data are processed exclusively by duly authorized and trained personnel (GDPR-Art.29). The company providing the technological platform and its representatives will be able to access the data, only for site maintenance purposes. The data will not be disseminated or transferred to non-EU countries.
Data retention period (GDPR-Art.13, paragraph 2, letter a)	The data are kept until the eventual "unsubscribe", freely available at any time through the link at the bottom of each message sent.
Conferment (GDPR-Art.13, paragraph 2, letter f)	Failure to provide the email address and consent will make it impossible to obtain the newsletter service.

2.5 Academy courses enrollment

Through the portal it is possible to register for the courses of the Musetti Coffee Academy.

Purpose and legal basis of the processing

(GDPR-Art.13, paragraph 1, letter c)

The data necessary for the registration procedures and the correct delivery of the course are requested. Registration is subject to the acceptance of specific, free and informed consent (GDPR-Article 6, paragraph 1, letter a), documented through a specific check-box (GDPR-Article 7, paragraph 1).

During the courses, photos / videos can be taken for information / promotional purposes. This processing is subject to the acceptance of further specific, free and informed consent (GDPR-Article 6, paragraph 1, letter a), documented through a specific check-box (GDPR-Article 7, paragraph 1).

Communication scope

(GDPR-Art.13, paragraph 1, letter e, f)

The registration data are processed exclusively by duly authorized and trained personnel (GDPR-Art.29). The company providing the technological platform and its representatives will be able to access the data, only for site maintenance purposes. The data will not be disseminated or transferred to non-EU countries.

The photo / video content, to be understood as provided completely free of charge, may be disseminated on paper or digital channels, such as website and social channels.

Data retention period

(GDPR-Art.13, paragraph 2, letter a)

The data are stored in terms compatible with the purpose of the collection.

Conferment

(GDPR-Art.13, paragraph 2, letter f)

Failure to provide the registration data will make it impossible to register for the course. In case of lack of consent to photos / videos, the company will take appropriate measures aimed at avoiding the recovery of the interested party.

2.6 Request for partnership in Italy and abroad ( https://www.musetti.it/distribuzione/export/ And https://www.musetti.it/distribuzione/italia/ )

The pages allow the interested party to propose himself as a partner in Italy or abroad. The identification data and contact details of the applicant are requested, as well as further information on the request

Purpose and legal basis of the processing (GDPR-Art.13, paragraph 1, letter c)	The data are acquired for the correct evaluation of the requests as well as for the following answers. The sending of the request is subject to specific, free and informed consent (GDPR-Article 6, paragraph 1, letter a), documented through a specific check-box (GDPR-Article 7, paragraph 1).
Communication scope (GDPR-Art.13, paragraph 1, letter e, f)	The data are processed exclusively by duly authorized and trained personnel (GDPR-Art.29). The company providing the technological platform and its representatives will be able to access the data, only for site maintenance purposes. The data will not be disseminated or transferred to non-EU countries.
Data retention period (GDPR-Art.13, paragraph 2, letter a)	The data are kept for times compatible with the purpose of the collection
Conferment (GDPR-Art.13, paragraph 2, letter f)	The provision of data relating to the mandatory fields (marked with *) is necessary in order to obtain an answer, while the optional fields are aimed at providing the staff with further useful elements to facilitate contact.

2.7 Information request

The page allows the interested party to request information. Identification and contact data are requested.

Purpose and legal basis of the processing (GDPR-Art.13, paragraph 1, letter c)	The identification and contact data necessary to be able to respond to the contact requests of the interested parties are requested. The sending of the request is subject to specific, free and informed consent (GDPR-Article 6, paragraph 1, letter a), documented through a specific check-box (GDPR-Article 7, paragraph 1)
Communication scope (GDPR-Art.13, paragraph 1, letter e, f)	The data are processed exclusively by duly authorized and trained personnel (GDPR-Art.29). The company providing the technological platform and its representatives will be able to access the data, only for site maintenance purposes. The data will not be disseminated or transferred to non-EU countries.
Data retention period (GDPR-Art.13, paragraph 2, letter a)	The data are kept for times compatible with the purpose of the collection
Conferment (GDPR-Art.13, paragraph 2, letter f)	The provision of data relating to the mandatory fields is necessary in order to obtain an answer, while the optional fields are aimed at providing the staff with additional useful elements to facilitate contact.

2.8 Work with us

The page allows the interested party to propose their professional application for a job at Musetti. The identification data and contact details of the applicant are requested, as well as the candidate's curriculum vitae.

Purpose and legal basis of the processing (GDPR-Art.13, paragraph 1, letter c)	The data are acquired for the correct management of personnel selection procedures. evaluation of requests as well as for the following responses. The sending of the request is subject to specific, free and informed consent (GDPR-Article 6, paragraph 1, letter a). At the time of possible recruitment, the candidate will receive regular information related to the professional relationship established.
Communication scope (GDPR-Art.13, paragraph 1, letter e, f)	The data are processed exclusively by duly authorized and trained personnel (GDPR-Art.29). The company providing the technological platform and its representatives will be able to access the data, only for site maintenance purposes. The data will not be disseminated or transferred to non-EU countries.
Data retention period (GDPR-Art.13, paragraph 2, letter a)	The data are kept for times compatible with the purpose of the collection
Conferment (GDPR-Art.13, paragraph 2, letter f)	The provision of data relating to the mandatory fields (marked with *) is necessary to be able to propose your application, while the optional fields are aimed at providing the staff with further elements useful to facilitate the selection.

3) POLICY UPDATE

It should be noted that this information may be subject to periodic review, also in relation to the relevant legislation and jurisprudence. In the event of significant changes, appropriate evidence will be given on the home page of the site for a suitable time. However, the interested party is invited to periodically consult this policy.