Privacy Policy

With this page we intend to inform you about the management methods of this site regarding the processing of personal data, as required by articles 13 and 14 of the European Regulation n. 679/2016 (General Data Protection Regulation) and in accordance with the Recommendations of the European authorities for the protection of personal data.
This Privacy Policy applies exclusively to all Data collected through the Vaghi.com Website This Privacy Policy is subject to updates that will be published promptly on the Website. This Privacy Policy and the Cookie Policy establish the basis on which the User's Personal Data will be processed.
We remind you that by consulting this site, data relating to identified or identifiable persons may be processed. If consent mechanisms are necessary, these will be clearly visible and in the specific sections of the site.
In general, personal data will not be disseminated and the exercise of the rights referred to in Articles 11 to 20 of the aforementioned Regulation is recognized (in particular the rights of access, rectification, cancellation, limitation, portability and opposition).

Data Controller
The Data Controller of the data collected from this website is VAGHI S.r.l with headquarters in Via Brughetti n.16 / 18, in Bovisio Masciago (MB).
In this regard, if you need more information or if you have any questions about the privacy policy of this site, please contact us by email at vaghi@vaghi.com.

Methods of Processing Personal Data
The Personal Data provided or acquired will be subject to processing based on principles of correctness, lawfulness, transparency and protection of confidentiality pursuant to current regulations. The Data Controller processes the Personal Data of Users by adopting appropriate security measures to prevent unauthorized access, disclosure, modification or destruction of Personal Data. The processing is carried out using IT and / or telematic tools, with organizational methods and with logic strictly related to the purposes indicated.

Purpose of the processing of personal data and legal basis
Personal data can be collected independently by the owner or through third parties. In this case, the computer systems and software procedures used to operate this Website acquire some Personal Data of the Users, of a technical-IT nature (eg the IP address, the type of browser used, the operating system, the name and the addresses of websites from which access or exit was made, etc.), the transmission of which is inherent to the normal functioning of the internet. These data may be processed for the sole purpose of obtaining anonymous statistical information on the use of the site and / or to check its correct functioning and will be deleted immediately after processing.
The Data that the User chooses to provide spontaneously are collected to allow the Website to provide its services, as well as for the following purposes:
a) to fulfill any type of obligation contemplated and envisaged by current laws, regulations, related regulations, commercial uses and tax / fiscal matters. This treatment is mandatory to fulfill a legal obligation to which the Data Controller is subject;
b) for other ancillary purposes or related to those indicated above and in any case falling within the scope of the Website's activities;
c) to follow up on the specific requests addressed to the Owner by the User for communications of an informative nature relating to the Services of the same Owner, via e-mail messages or by filling in the contact form and other communication tools such as telephone. This processing is optional and based on the User's consent, however failure to communicate one or more Data will make it impossible to respond to the request for information and to use the services offered by the Owner;
d) for sending information and promotional and commercial offers also through the newsletter service, sent by e-mail, post or text message. This treatment is based on the consent freely expressed by the User;
e) for softspam purposes to allow the Owner to send promotional communications by e-mail to the User concerning Products and / or Services purchased without the need for the User's express and prior consent, as required by art. 130, paragraph 4, of the Privacy Code, and provided that the user does not exercise the right to object; This treatment is based on art. 130, paragraph 4, of the Privacy Code as amended by Legislative Decree 101 of 2018;
f) to perform statistical analysis on aggregate and anonymous data to analyze the User's behavior to improve the products and services provided by the Owner as well as meet the User's expectations;
g) for profiling activities for marketing purposes. This treatment is based on the consent freely expressed by the User;
h) for activities related to prize events organized by the Data Controller, which will be carried out in compliance with current regulations.

Category of Personal Data processed
Among the Personal Data processed by this Website, either independently or through third parties, there are Common Data such as: Cookies, Usage data, name, email, telephone. The optional, explicit and voluntary sending of e-mails through the Contact Form or by means of the addresses indicated on this Website, entails the subsequent acquisition of the sender's address, necessary to respond to requests, as well as any other Personal Data included in the email. The consent to the provision of Data by the User is necessary to be entered in the Data Controller's database and for the purposes of establishing and correctly carrying out what is offered by the same to its Users, as well as to third parties for the fulfillment of the single activity requested. Failure to provide, therefore, prevents registration in the Data Controller's databases, the completion of any contracts, as well as the execution of the same and any other possible activity.

Data communication
In addition to the Data Controller, in some cases, they may have access to the Data:
a) categories of specially trained persons involved in the organization of the website (administrative, commercial, marketing, legal, system administrators);
b) external subjects (such as third party technical service providers, hosting providers, IT companies, communication agencies) also appointed as Data Processors by the Data Controller pursuant to art. 28 GDPR. The updated list of Managers, if appointed, can always be requested from the Data Controller;
c) public or private subjects who can access the Data in compliance with legal obligations;
d) subjects who perform ancillary and instrumental tasks with respect to the activity of the Owner;
e) to the Data Processors appointed to carry out activities relating to prize events, accounting, tax and administrative management in relation to the same.

Processing times
As expressly provided for by art. 5, co. 1, lett. e) of the GDPR, the Data are kept for the time necessary to process them in relation to the performance of the service requested by the User, or required by the Purposes described in this document and in particular:
- The data collected for contractual obligations will be kept for the time necessary to carry out the aforementioned purposes and in accordance with the provisions of the law;
- The data collected for tax / administrative obligations or contractual obligations will be kept for the time necessary to carry out the aforementioned purposes and in accordance with the provisions of the law;
- The Data collected for purposes attributable to the legitimate interest of the Data Controller will be retained until this interest is satisfied; The User can obtain further information regarding the legitimate interest pursued by the Owner by contacting the Owner.
- The Data collected on the basis of the User's consent may be kept until such consent is revoked;
The Data may be kept by the Data Controller for a longer period in compliance with legal obligations or by order of an authority.
At the end of the retention period, the Personal Data will be deleted and therefore, the rights of access, cancellation, rectification and portability of the Data will no longer be exercised.

Cookies
This website uses cookies. Cookies are small text files that can be used by websites to make the user experience more efficient and to personalize content and ads, provide social network functions and analyze traffic. Cookie Policy

Place of processing and transfer of data abroad
The Data are processed at the Data Controller's operational headquarters. For further information, you can contact the Data Controller. The Data may be processed by natural persons and / or legal entities operating on behalf of the Data Controller and by virtue of specific contractual obligations and based in EU or non-EU member countries. In the event that the Data is transferred outside the EEA, the Data Controller will take all appropriate contractual measures to ensure adequate data protection.

Tools used for the processing of personal data

CONTACT FORM
By filling in the contact form with their data, the User consents to their use to respond to requests for information, or for any other purpose indicated by the form header. Personal Data collected through the Contact Form: Name, Surname, E-mail.

EMAIL ADDRESS MANAGEMENT
These services allow you to manage a database of email contacts, telephone contacts or contacts of any other type, used to communicate with the User. These services may also allow the collection of data relating to the date and time the messages are displayed by the User.

NEWSLETTER
In compliance with the provisions of the General Data Protection Regulation (GDPR), which entered into force on 25 May 2018, we inform you that you are receiving our Newsletter because you have been included in a special list, which we only use to send information to our contacts. updated on our projects, activities and events.
You can be part of this list because:
You have given your consent to the processing of your personal data and to the sending of the Newsletter. In this case, the processing of your data is based on your express consent. The processing of your data for sending our Newsletter is based on our legitimate interest in promoting our activities to all those who have expressly expressed their interest in our work. On the occasion of fairs or events you have given us your business card, expressing interest in our business. If you no longer wish to receive our communications, you can always revoke your consent or ask to be removed from our list for sending newsletters, as recognized by art. 21 of the GDPR.

Registration data
For the purpose of your subscription to our lists for sending the Newsletter, your email is sufficient, which is the only data we process, unless you wish to voluntarily indicate other data to us (for example your name, surname, city of residence ) that will help us personalize our communications. Collection and processing based on consent. You can start receiving our Newsletter by accepting the service through the appropriate section on our site or in the email sent to you. Registrations to the Newsletter are kept in order to verify that your registration takes place in accordance with the requirements of the law, which includes the registration of the confirmation time and the IP address. We also keep track of any changes to your data. Our staff, who manage our database, operate on the basis of our specific instructions relating to the purposes and methods of these treatments. Collection and processing based on the legitimate interest of Vaghi S.r.l.
We would like to inform you that we use the services of MailChimp to send our newsletters. MailChimp is a platform owned by Rocket Science Group, headquartered in LLC, 675 Ponce del Leon Ave NE # 5000, Atlanta, GA 30308 USA, which distributes email. To allow MailChimp to disseminate our Newsletters faster and in a more personalized way, your email address and the additional data that we ask you and which are indicated in this information, are registered on MailChimp's servers in the USA. MailChimp uses this information for us in order to send emails and make evaluations relating to the Newsletter. MailChimp declares that it in turn uses this data to improve and refine its services, for example to technically refine the sending procedures or for commercial purposes, in order to geographically locate the area from which the recipients of the emails come. In any case, MailChimp will not use your data to contact you directly, nor will it send them to third parties. We believe in the reliability of MailChimp, in the security of its technological systems and in the security of its data. MailChimp is certified in accordance with the agreement between the US and Europe, called "Privacy Shield" and has agreed to comply with European legislation on the protection of personal data. MailChimp undertakes to protect the data of our users and to process them, on behalf of Vaghi S.r.l., in accordance with the provisions of the MailChimp Privacy Policy and not to disclose such data to third parties.
You can consult the MailChimp policy at this link:
https://mailchimp.com/legal/

Termination and withdrawal of consent
You can withdraw your consent to the sending of our Newsletter or ask to be removed from our list at any time.
You can find the link to deactivate the Newsletter at the end of each email we send you. By registering for the newsletter, the User's email address is automatically added to a list of contacts to which email messages containing information, including commercial and promotional information, relating to this Website may be sent. The User can choose at any time to unsubscribe from the newsletter by clicking on a specific button that he will find in the emails. After clicking on the delete button, the User Data will be deleted immediately from the "email marketing" software. Personal Data collected: Name, Surname, E-mail, Nationality.

SECURITY MEASURES ADOPTED
This website has an SSL certificate and uses the HTTPS protocol to make sure the moment in which Personal Data are entered. With the use of this protocol, the transactions and data that are transmitted on the websites take place with the utmost security and the content of the communication is not read or manipulated in any way by third parties.

STATISTICS
The statistical services only allow the Data Controller to monitor and analyze traffic data and are used to keep track of User behavior. This website uses the following services:

GOOGLE ANALYTICS
The site uses the Google Analytics tool is a Google analysis tool that helps website and app owners to understand how visitors interact with the content they own. A set of cookies can be used to collect information and generate website usage statistics without personal identification of individual visitors by Google. In addition to generating reports on website usage statistics, the Google Analytics pixel tag can be used, together with some advertising cookies, to allow you to show more relevant results in Google properties (such as Google Search) and in all the Web. This type of cookies are stored on Google's servers which govern their privacy according to these guidelines. A user can disable Google Analytics while browsing using the additional component available for Chrome, Firefox, Internet Explorer, Opera and Safari. You can also delete cookies individually for each domain, hide searches, set Google ad settings.
Further information on the privacy policy of Google Analytics can be found at the following addresses:
http://www.google.com/analytics/terms/it.html
http://www.google.it/policies/privacy/partners/

INTERACTION WITH SOCIAL NETWORKS
These services allow interaction with social networks directly from the pages of this website. The interactions and information acquired from this Website are in any case subject to the User's privacy settings relating to each social network. In the event that an interaction service with social networks is installed, it is possible that, even if the Users do not use the service, it collects traffic data relating to the pages in which it is installed.
1) Facebook (Facebook Ireland Ltd.)
The Facebook buttons are services for interacting with the Facebook social network, provided by Facebook Ireland Ltd. Personal data collected: Cookies and Usage data. Place of processing: Ireland – Privacy Policy
2) Instagram (Facebook Ireland Ltd.)
The Instagram buttons are services of interaction with the Instagram social network, provided by Facebook. Personal Data collected: Cookies and Usage Data. Place of processing: Ireland - Privacy Policy

CONTENT ON EXTERNAL PLATFORMS
These services allow you to view content hosted on external platforms directly from the pages of this Website and interact with them.
In the event that a service of this type is installed, it is possible that, even if the Users do not use the service, it collects traffic data relating to the pages in which it is installed.
This Website uses
Youtube (Google Ireland Limited)
Youtube is a video content viewing service managed by Google that allows this website to integrate such content within its pages. Personal Data collected: Cookies and Usage Data. Place of processing: Ireland – Privacy Policy
Vimeo
Vimeo is a third-party video content viewing service.
Further information on the privacy policy:
https://vimeo.com/privacy

Exercise of the rights of the interested party
The interested party has the right to exercise the faculties provided for in Articles 77, 15-22 of the European Reg. 679/2016. In particular, he has the right to withdraw his consent at any time and, upon simple request to the Data Controller, he may request access to Personal Data, receive the Personal Data provided to the Data Controller and where possible transmit them to another Data Controller without impediments (so-called portability), obtain updating, limitation of processing, rectification of data and cancellation of those processed in breach of current legislation. He has the right, for legitimate reasons, to oppose the processing of personal data concerning him and the processing for the purpose of sending advertising material, direct sales and for carrying out market research. You also have the right to lodge a complaint with the Privacy Guarantor as the supervisory authority on personal data protection. The interested party may exercise his rights by contacting the Data Controller by email at the address: vaghi@vaghi.com

Changes to this Privacy Policy
The Data Controller reserves the right to make changes to this Privacy Policy at any time by giving notice to Users on this page. Therefore, please consult this page often, referring to the date of the last modification indicated at the bottom. In the event of non-acceptance of the changes made to this Privacy Policy, the User is required to cease using this Website and may request the Data Controller to remove their Personal Data. Unless otherwise specified, the previous Privacy Policy will continue to apply to the Personal Data collected up to that time. The Owner is not responsible for updating all links that can be viewed in this Privacy Policy, therefore whenever a link is not functional and / or updated, Users acknowledge and accept that they must always refer to the document and / or section of the sites. internet accessed from this link.