Privacy Policy
This Website collects some Personal Data of its Users. This policy is provided in accordance with Articles 13 and 14 of Regulation EU 2016/679. MCipollini is a brand of Diamant Srl.
Data Controller
DIAMANT SRL, headquartered at Viale del Lavoro 8 - 37060 Bonferraro Industrial Zone (VR)
The Data Controller can be contacted via Diamant Srl's Privacy Service at privacy@diamantdmt.com.
Types of Data collected
The Personal Data collected by this Website – including the e-commerce section – is provided directly by the data subject independently or through third parties: first name, last name, email, address, telephone number, tax code and other personal data in relation to the purposes described below and the initiatives carried out.
Full details on each type of data collected are provided in the relevant sections of this privacy policy or in specific notices displayed before the data is collected.
The Personal Data may be freely provided by the User, or in the case of Usage Data automatically collected when browsing this Website.
The User assumes responsibility for any Personal Data of third parties obtained, published or shared through this Website, and warrants having the right to disclose or disseminate such information, releasing the Data Controller from any liability to third parties.
Methods, legal basis, place of processing of the data collected, retention period and purpose of the processing
Method of processing
The Data Controller takes appropriate security measures to prevent unauthorized access, disclosure, modification, or destruction of the Personal Data.
The processing is carried out by means of computer and/or electronic tools, with organizational methods and logic strictly related to the purposes indicated. In addition to the Data Controller, in some cases the Data may be accessible to other parties involved in the organization of this Website (administrative, sales, or legal personnel or system administrators) or external parties (such as third-party technical service providers, postal couriers, hosting providers, IT companies, communications agencies), where necessary appointed as Data Processors by the Data Controller. An up-to-date list of Data Processors can always be obtained from the Data Controller.
Purposes of the Processing of Collected Data
User Data is collected to enable the Data Controller to provide its Services. Specifically:
1. The provision of common personal data has as its main purpose contractual, pre-contractual, managerial or administrative requirements or the fulfillment of legal obligations the Data Controller is subject to. These processing purposes pertain to contractual relationships either directly to the contracting party or to the contractor through the e-commerce site whether the relationship is B2B or B2C. If the contractor is a company, it is specified that for the same purposes personal and contact data (such as personal details, company emails, company phones, work smartphones, etc.) of your administrators, employees and collaborators may also be processed depending on their roles and tasks with respect to the management and/or performance of the contract’s execution.
2. Management and fulfillment of specific user contact needs.
3. Sending our newsletter to the email address provided by the user (consent to the processing is required).
4. Sending information about our products of a technical/commercial nature using data provided by the user (paper or email address). Consent to the processing is required.
5. Management of participation in events, contests or opinion polls (consent to the processing is required).
6. Profiling of consumption habits (consent to the processing is required).
7. Management of photographs and audiovisuals for use on our website, in our social media and subject to the provision of specific release, privacy policy and consent.
8. Management of resumes submitted by the user when assessing applicants for open positions (consent to the processing is required).
For more information on the purposes of the processing and the Personal Data relevant for each purpose, the User may refer to the processing notices published at the end of this document.
Processing of audiovisual data provided via social media and communities
We are happy to see on the web how our community uses MCipollini products, and we would like to be able to use some of these photos or videos to enrich our channels. Such images will mainly be used within our website or on our social platforms (Instagram, Facebook, or LinkedIn) to show our products in a real-life setting. If we see content that we like, we may contact you to ask for your permission/consent to use it. We will leave a comment below the post or send a direct message.
If you respond to such request for permission with the hashtag #yesmcipollini you consent to the use of the post for marketing purposes, including within newsletters.
By doing so you provide Diamant s.r.l., owner of the "MCipollini" brand, with a non-exclusive, royalty-free worldwide license to use the posts or videos or other content marked with the hashtag #yesdmtcycling for marketing and/or advertising. These activities include a gallery on the website, newsletters, social media and other communications.
This grants all rights to your images, and if there are other people within it their consent has been given to use the image, and thus Diamant s.r.l. will not violate any third-party rights or laws.
Consent to the use of the post by the MCipollini brand relieves the owner company of any payment, thereby releasing and agreeing to hold Diamant s.r.l. and all persons working and acting for it harmless against awards for damages, claims, and liabilities regardless of the use of the images as described above.
Legal basis of the processing
The Data Controller processes Personal Data related to the User if one of the following conditions exists:
1. The User has given consent for one or more specific purposes.
2. The processing is necessary for the performance of a contract with the User and/or the execution of pre-contractual measures therein including submissions via the e-commerce section.
3. The processing is necessary to fulfill a legal obligation the Data Controller is subject to.
4. The processing is necessary for the performance of a task of public interest or the exercise of public authority vested in the Data Controller.
5. The processing is necessary for the pursuit of the legitimate interest of the Data Controller or third parties.
However, it is always possible to ask the Data Controller to clarify the actual legal basis of each process, and in particular to specify whether the processing is based on law, required by a contract, or necessary to conclude a contract.
Location
The Data is processed in the operational offices of the Data Controller and any other place where the parties involved in the processing are located. For more information please contact the Data Controller. The User's Personal Data may be transferred to a country other than the one where the User is located. For more information about the location of the processing, the User may refer to the section on Personal Data processing details.
The User has the right to obtain information regarding the legal basis for the transfer of Data outside the European Union, as well as regarding the security measures taken by the Data Controller to protect the Data.
Disclosure and dissemination
The personal data and its processing may be disclosed to:
• Companies to carry out business activities (sales, management, management of information systems, insurance, banking or non-banking brokerage, factoring, management of shipping, enveloping and mailing of correspondence, providers of services related to contractual fulfillment) or for the fulfillment of legal requirements (accounting firms, lawyers). The data will not be disseminated or disclosed outside the EU.
• Companies that contribute to administrative activities that have been specifically consented to (sending of advertising, profiling, management of contests or surveys, management of newsletters).
• The handling of personal data referred to in point 7 of the purposes of the processing and its dissemination is governed within the timeframes and terms set forth in the releases requested from the data subject and the notices and related consent provided to and by the data subject.
• Authorized individuals and data processors involved in processing operations related to the purposes listed above may become aware of your data. The list of data processors is available at our offices.
• Any disclosure of data outside of the EU is handled through standard contractual clauses established by the European Commission and in any case to companies that have implemented the "Data Privacy Framework" (with the United States).
• In any case and as pointed out, any dissemination of personal data will be handled through specific releases and related requests for consent to processing.
Retention period
The Data is processed and kept for the time required by the purposes it was collected for.
Therefore:
• Personal Data collected for purposes related to the performance of a contract of any nature between the Data Controller and the User will be retained until the performance of such contract is completed. Maximum retention period: 10 years.
• Personal Data collected for purposes attributable to the legitimate interest of the Data Controller will be retained until that interest is satisfied. The User may obtain further information regarding the legitimate interest pursued by the Data Controller in the relevant sections of this document or by contacting the Data Controller.
• When the processing is based on the User's consent, the Data Controller may keep the Personal Data longer, until that consent is withdrawn. Moreover, the Data Controller may be required to retain the Personal Data for a longer period in compliance with a legal obligation or by order of an authority.
At the end of the retention period, the Personal Data will be erased. Therefore, upon the expiration of this period the right of access, erasure, rectification and the right to Data portability can no longer be exercised.
More details on the processing of Personal Data
Support request form
By entering your information in the support form you consent to its use to allow the Data Controller to respond to requests for information, quotes, or of any other nature indicated by the form header.
Personal data collected: First name, last name, email address.
Frame registration form
By entering your information in the registration form for your frame, you consent to its use to allow the Data Controller to manage your product warranty.
Personal data collected: First name, last name, email address, gender, phone number, address, product purchase details.
Management of addresses and sending email messages
These services allow the management of a database of email addresses, telephone numbers, or contact details of any other kind used to communicate with the User. These services allow the collection of data related to the date, time and (approximate) geographic location of the user's viewing of messages, as well as the user's interaction with them: statistics on clicks, opens, shares.
Registration and authentication
To view restricted or personalized content, the site allows access to protected areas with user registration and authentication. Authentication can also take place with the help of third parties, as outlined below. Users register by filling out the registration form and providing their personal information directly to this website.
Personal data collected: Last name, email address, first name, gender, password, company name.
Rights of the Data Subject
Users may exercise certain rights with respect to the Data processed by the Data Controller. The relevant articles are 15, 16, 17, 18, 20, 21 and 22 of Regulation EU 2016/679.
Specifically, the User may:
• Withdraw consent at any time. The User may withdraw consent that was previously given for the processing of their Personal Data.
• Object to the processing of their Data. Users may object to the processing of their Data when it is done on a legal basis other than consent. Further details on the right to object are given in the section below.
• Access their Data. The User has the right to obtain information about the Data processed by the Data Controller, certain aspects of the processing, and to receive a copy of the Data processed.
• Verify and request rectification. The User can check the accuracy of their Data and request that it be updated or corrected.
• Obtain restriction of the processing. When certain conditions are met, the User may request the restriction of the processing of their Data. In this case, the Data Controller will not process the Data for any purpose other than its preservation.
• Obtain the erasure or removal of their Personal Data. When certain conditions are met, the User may request the total erasure of their Data by the Data Controller (right to be forgotten).
• Receive their Data or have it transferred to another data controller. The User has the right to receive their Data in a structured, commonly used, machine-readable format, and where technically feasible to have it transferred unimpeded to another data controller. This provision is applicable when the Data is processed by automated means and the processing is based on the User's consent, a contract the User is a party to or contractual measures related thereto.
• Lodge a complaint. The User may lodge a complaint with the relevant data protection supervisory authority or take legal action.
Details of the right to object
When Personal Data are processed in the public interest, in the exercise of public powers vested in the Data Controller or in pursuit of a legitimate interest of the Data Controller, Users have the right to object to the processing for reasons related to their particular situation.
Users are advised that if their Data were processed for direct marketing purposes, they may object to the processing without providing any reasons. To find out whether the Data Controller processes data for direct marketing purposes, Users can refer to the respective sections of this document.
How to exercise one’s rights
To exercise their rights, Users may submit a request to the contact details of the Data Controller as set out in this document. Such requests are submitted free of charge and processed by the Data Controller as quickly as possible, in any case within one month.
More information about the processing
Defense in court
The User's Personal Data may be used by the Data Controller in legal proceedings or to prepare such actions for defense against abuses in the use of this Website or related Services by the User. The User declares to be aware that the Data Controller may be required to disclose the Data by order of public authorities.
Specific notices
Upon the User's request, in addition to the information contained in this privacy policy, this Website may provide the User with additional and contextual notices regarding specific Services or the collection and processing of Personal Data.
System logs and maintenance
For operation and maintenance purposes, this Website and any third-party services it uses may keep system logs, which are files that record interactions and may also contain Personal Data such as the User’s IP address.
Information not contained in this policy
Further information regarding the processing of Personal Data may be requested from the Data Controller at any time using the contact details provided.
Changes to this privacy policy
The Data Controller reserves the right to make changes to this privacy policy at any time, informing Users on this page and where possible on this Website, as well as sending a notification to Users using one of the addresses held by the Data Controller where technically and legally feasible. Therefore, please consult this page regularly, referring to the date of the latest update indicated at the bottom.
If the changes affect processing whose legal basis is consent, the Data Controller will request the User's consent once again if necessary