Privacy Policy

The purpose of this document (hereinafter the “Privacy Policy”) is to inform Users about personal data, understood as any information that allows the identification of a natural person (hereinafter the “Personal Data”), collected by the website www .madbagstore.com (hereinafter “Application”).

The Data Controller, as subsequently identified, may modify or simply update, in whole or in part, this Information by informing Users. Changes and updates will be binding as soon as they are published on the Application. The User is therefore invited to read the Privacy Policy each time they access the Application.

In case of non-acceptance of the changes made to the Privacy Policy, the User is required to cease using this Application and may request the Data Controller to remove their Personal Data.

1. Personal Data collected by the Application

The Data Controller collects the following types of Personal Data:

1. Content and information provided voluntarily by the User

- Contact data and contents: these are Personal Data that the User voluntarily provides to the Application during its use, such as personal data, contact details, access credentials for the services and/or products provided, personal interests and preferences and others personal content, etc.

- Personal data collected by social media: Users can share data provided to social media with the Application. The User has the right to control the Personal Data that the Application can access through the privacy settings available on the social media in question. By associating accounts managed by social media with the Application and authorizing the Owner to access such Personal Data, the User gives consent to their acquisition, processing and storage in accordance with this Privacy Policy.

Failure by the User to provide Personal Data, for which there is a legal or contractual obligation or if they constitute a necessary requirement for the use of the service or for the conclusion of the contract, will make it impossible for the Owner to fully provide or part of its services.

The User who communicates the Personal Data of third parties to the Owner is directly and exclusively responsible for their origin, collection, processing, communication or dissemination.

1. Data and content acquired automatically when using the Application:

Technical data: the computer systems and software procedures used to operate this Application may acquire, during their normal operation, some Personal Data whose transmission is implicit in the use of internet communication protocols. This is information that is not collected to be associated with identified Users, but which by its very nature could, through processing and association with Data held by third parties, allow Users to be identified. This category includes IP addresses, or domain names used by Users who connect to the Application, the addresses in URI (Uniform Resource Identifier) ​​notation of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained, etc.

Usage data: Personal Data relating to the use of the Application by the User may also be collected, such as the pages visited, the actions performed, the functions and services used.

1. Personal data collected via cookies or similar technologies:

The Application uses cookies, web beacons, unique identifiers and other similar technologies to collect Personal Data about the pages, links visited and other actions you take when using our services. They are stored before being re-transmitted on the next visit by the same User.

2. Purpose

The Personal Data collected may be used for the execution of contractual and pre-contractual obligations and for legal obligations as well as for the following purposes:

External management of payments via credit card, bank transfer or other instruments: to manage User payments via external platforms that acquire payment data without the Application owner having access.

Sending emails or newsletters and managing mailing lists: to contact the User with emails containing commercial and promotional information relating to the Application.

User registration and authentication: to allow the User to register on the Application to access and be identified.

Archiving, hosting and backend infrastructure management: to manage the technical infrastructure for archiving User data.

Monitoring, analysis and tracking of User behavior: to monitor and analyze how he behaves

the User on the Application.

Support and contact with the User: to respond to the User's requests and help him in case of problems.

User Profiling: to automatically group and analyze the User's characteristics or behaviors and provide them with personalized services or messages.

Viewing content from external platforms: to allow the User to view and share content from social networks or other external platforms (e.g. YouTube, Facebook).

3. Treatment methods

The processing of Personal Data is carried out using IT and/or telematic tools, with organizational methods and with logic strictly related to the purposes indicated.

In some cases, subjects involved in the Data Controller's organization may also have access to Personal Data (such as, for example, personnel management workers, sales area workers, system administrators, etc.) or external parties (such as IT companies, suppliers of services, postal couriers, hosting providers, etc.). If necessary, these subjects may be appointed Data Processors by the Owner, as well as access the Users' Personal Data whenever necessary and will be contractually obliged to keep the Personal Data confidential.

The updated list of Managers can be requested via email at info @ madbagstore.com

4. Legal basis of the processing

The processing of Personal Data relating to the User is based on the following legal bases:

the consent given by the User for one or more specific purposes;

the processing is necessary for the execution of a contract with the User and/or the execution of pre-contractual measures

the processing is necessary to fulfill a legal obligation to which the Data Controller is subject

the processing is necessary for the execution of a task of public interest or for the exercise of public powers vested in the Data Controller

the processing is necessary for the pursuit of the legitimate interest of the Data Controller or third parties

the processing is necessary for the pursuit of a vital interest of the Owner or of third parties.

However, it is always possible to request the Data Controller to clarify the legal basis of each processing at info @madbagstore .com

5. Place

Personal Data is processed at the Owner's operational offices and in any other place where the parties involved in the processing are located. For further information, contact the Owner at the following email address info@ madbagstore.com

Personal Data may be transferred to non-EU countries: USA.

For these countries there is an adequacy decision of the European Commission or, in the absence of such a decision, it is possible to request more information from the Data Controller regarding the appropriate guarantees adopted, as well as the means to obtain a copy of such Data or the exact place where they were returned available.

6. Security measures

The Processing is carried out according to methods and with tools suitable to guarantee the security and confidentiality of the Personal Data, the Data Controller having adopted adequate technical and organizational measures which guarantee, and allow to demonstrate, that the Processing is carried out in compliance with the relevant legislation.

7. Data retention period

Personal Data will be retained for the period of time necessary to fulfill the purposes for which they were collected.

In particular, Personal Data will be retained for the entire duration of the contractual relationship, for the execution of the obligations inherent and consequent thereto, for compliance with applicable legal and regulatory obligations, as well as for own or third party defensive purposes.

If the processing of Personal Data is based on the User's consent, the Owner may retain the Personal Data until the consent is revoked.

Personal Data may be retained for a longer period if necessary to comply with a legal obligation or by order of an authority.

All Personal Data will be deleted or stored in a form that does not allow identification of the User within 30 days of the end of the retention period. Upon expiration of this period, the right of access, cancellation, rectification and the right to portability of Personal Data can no longer be exercised.

8. Automated decision-making processes

All Personal Data collected will not be subject to any automated decision-making process, including profiling, which could produce legal effects for the person or which could significantly affect them.

9. User Rights

Users can exercise certain rights with reference to Personal Data processed by the Owner. In particular, the User has the right to:

revoke consent at any time;

object to the processing of your Personal Data;

access your Personal Data;

verify and request rectification;

obtain the limitation of processing;

obtain the deletion of your Personal Data;

receive your Personal Data or have it transferred to another owner;

lodge a complaint with the Personal Data Protection Supervisory Authority and/or take legal action.

To exercise their rights, Users can direct a request to the contact details of the Owner indicated in this document. Requests are made free of charge and processed by the Data Controller as quickly as possible, in any case within 30 days.

10. Data Controller

The Data Controller is madbagstore.com

madbagstore

VAT number:

Site:

PEC:

Rea number:

CF:

Unique code:

Email: info@ madbagstore.com

In order to be able to offer you Klarna 's payment methods, we may pass on your personal data to Klarna at checkout in the form of contact details and order details, so that Klarna can assess your suitability for our payment methods. payment methods and customize those payment methods. Your personal data transferred is treated in line with Klarna 's privacy policy. ”

Privacy Policy of madbagstore.com

This Website collects some Personal Data from its Users.

This document can be printed using the print command in the settings of any browser.

Summary of the policy

Personal Data processed for the following purposes and using the following services:

• Contact the user
• Mailing list or newsletter

Personal Data: Postcode; city; surname; date of birth; Usage data; e-mail; physical address; nation; first name; telephone number; province; sex; Tracking Tools

• Contact form

Personal Data: Postcode; city; Tax ID code; surname; date of birth; Usage data; e-mail; User ID; physical address; nation; first name; telephone number; province; sex; Tracking Tools; various types of Data

• Contact via telephone

Personal Data: telephone number

 

• Managing contacts and sending messages
• Klaviyo

Personal Data: various types of Data

• Sendgrid

Personal Data: surname; date of birth; e-mail; first name; telephone number; sex

• Payment management
• PayPal

Personal Data: surname; e-mail; billing address; first name; telephone number; various types of Data as specified in the privacy policy of the service

• Apple Pay and Google Pay

Personal Data: surname; Usage data; e-mail; billing address; shipping address; first name; telephone number; various types of Data as specified in the privacy policy of the service

• Klarna

Personal Data: surname; e-mail; billing address; shipping address; first name; telephone number; various types of Data as specified in the privacy policy of the service

• Stripe

Personal Data: surname; Usage data; e-mail; billing address; first name; various types of Data as specified in the privacy policy of the service

• Tag management
• Google Tag Manager

Personal Data: Usage Data; Tracking Tools

• Management of data collection and online surveys
• Klaviyo Forms

Personal Data: Data communicated while using the service

• Hosting and backend infrastructure
• SiteGround

Personal Data: various types of Data as specified in the privacy policy of the service

• Interaction with live chat platforms
• Shopify Inbox

Personal Data: Data communicated while using the service

• Interaction with social networks and external platforms
• PayPal Button and Widgets, Linkedin Social Button and Widgets and Facebook Like Button and Social Widgets

Personal Data: Usage Data; Tracking Tools

• Collection of privacy preferences
• Consent Solution by iubenda

Personal Data: Data communicated while using the service; Tracking Tools

• Cookie Solution by iubenda

Personal Data: Tracking Tools

• Registration and authentication
• Direct registration and profiling

Personal Data: Postcode; Tax ID code; surname; date of birth; Usage data; e-mail; User ID; image; profile picture; billing address; shipping address; physical address; tongue; House number; telephone number; province; sex; state; username; various types of Data

• Registration and authentication provided directly by this Website
• Direct registration

Personal Data: Postcode; city; Tax ID code; surname; date of birth; e-mail; User ID; image; profile picture; billing address; physical address; tongue; nation; first name; House number; telephone number; prefix; province; sex; state; username; various types of Data

• Remarketing and behavioral targeting
• Facebook Remarketing, Remarketing with Google Analytics and Google Ads Remarketing

Personal Data: Usage Data; Tracking Tools

• Klaviyo segmentation and social advertising

Personal Data: purchase history; Usage data; e-mail; device information; Tracking Tools

• Facebook Custom Audiences

Personal Data: email; Tracking Tools

• Statistics

• Google Analytics, Google Analytics with anonymized IP, Meta Events Manager, Facebook Ads conversion tracking (Facebook pixel), Google Ads conversion tracking

Personal Data: Usage Data; Tracking Tools

• Google Analytics 4

Personal Data: device information; number of Users; session statistics; Tracking Tools

• Google Analytics demographics and interests reports

Personal Data: unique device identifiers for advertising (Google Advertiser ID or IDFA identifier, for example); Tracking Tools

• Viewing content from external platforms

• Google Fonts, Font Awesome, Instagram Widget and YouTube Video Widget

Personal Data: Usage Data; Tracking Tools

Learn how to opt out of interest-based advertising

In addition to any opt-out feature provided by any of the services listed in this document, Users can read more about how to opt out of interest-based advertising in the appropriate section of the Cookie Policy.

Further information on the processing of Personal Data

• Sale of goods and services online

The Personal Data collected is used for the provision of services to the User or for the sale of products, including payment and possible delivery. The Personal Data collected to complete the payment may be those relating to the credit card, the current account used for the bank transfer or other payment instruments provided. The Payment Data collected by this Website depends on the payment system used.

contact info

• Data Controller

madbagstore

VAT number:

Site:

PEC:

Rea number:

CF:

Unique code:

Email: info@ madbagstore.com

Types of Data collected

Among the Personal Data collected by this Website, independently or through third parties, there are: Tracking Tools; Usage data; e-mail; first name; surname; telephone number; province; nation; POSTAL CODE; sex; date of birth; city; physical address; various types of Data; Tax ID code; User ID; billing address; Data communicated during use of the service; shipping address; username; state; image; profile picture; House number; tongue; prefix; device information; purchase history; number of Users; session statistics; unique device identifiers for advertising (Google Advertiser ID or IDFA identifier, for example).

Complete details on each type of data collected are provided in the dedicated sections of this privacy policy or through specific information texts displayed before the data is collected.
Personal Data may be freely provided by the User or, in the case of Usage Data, collected automatically when using this Website.
Unless otherwise specified, all Data requested by this Website is mandatory. If the User refuses to communicate them, it may be impossible for this Website to provide the Service. In cases where this Website indicates some Data as optional, Users are free to refrain from communicating such Data, without this having any consequence on the availability of the Service or its operation.
Users who have doubts about which Data is mandatory are encouraged to contact the Owner.
Any use of Cookies - or other tracking tools - by this Website or by the owners of third-party services used by this Website, unless otherwise specified, has the purpose of providing the Service requested by the User, as well as to the additional purposes described in this document and in the Cookie Policy, if available.

The User assumes responsibility for the Personal Data of third parties obtained, published or shared through this Website and guarantees that he or she has the right to communicate or disseminate them, freeing the Owner from any liability towards third parties.

Method and place of processing of the collected data

Treatment methods

The Data Controller adopts appropriate security measures aimed at preventing unauthorized access, disclosure, modification or destruction of Personal Data.
The processing is carried out using IT and/or telematic tools, with organizational methods and with logic strictly related to the purposes indicated. In addition to the Owner, in some cases, other parties involved in the organization of this Website (administrative, commercial, marketing, legal, system administrators) or external parties (such as third-party technical service providers, postal couriers) may have access to the Data. , hosting providers, IT companies, communication agencies) also appointed, if necessary, as Data Processors by the Data Controller. The updated list of Managers can always be requested from the Data Controller.

Legal basis of the processing

The Owner processes Personal Data relating to the User if one of the following conditions exists:

• the User has given consent for one or more specific purposes; Note: in some jurisdictions the Owner may be authorized to process Personal Data without the User's consent or another of the legal bases specified below, until the User objects ("opt-out") to this treatment. However, this is not applicable if the processing of Personal Data is regulated by European legislation on the protection of Personal Data;
• the processing is necessary for the execution of a contract with the User and/or the execution of pre-contractual measures;
• the processing is necessary to fulfill a legal obligation to which the Data Controller is subject;
• the processing is necessary for the execution of a task of public interest or for the exercise of public powers vested in the Data Controller;
• the processing is necessary for the pursuit of the legitimate interest of the Data Controller or third parties.

However, it is always possible to request the Data Controller to clarify the concrete legal basis of each processing and in particular to specify whether the processing is based on the law, provided for by a contract or necessary to conclude a contract.

Place

The Data is processed at the Owner's operational offices and in any other place where the parties involved in the processing are located. For further information, contact the Owner.
The User's Personal Data may be transferred to a country other than the one in which the User is located. To obtain further information on the place of processing, the User can refer to the section relating to the details on the processing of Personal Data.

The User has the right to obtain information regarding the legal basis of the transfer of Data outside the European Union or to an international organization governed by public international law or constituted by two or more countries, such as for example the UN, as well as regarding the security measures adopted by the Data Controller to protect the Data.

The User can verify whether one of the transfers just described takes place by examining the section of this document relating to details on the processing of Personal Data or request information from the Data Controller by contacting him at the details indicated at the beginning.

Retention period

The Data is processed and stored for the time required by the purposes for which it was collected.

Therefore:

• Personal Data collected for purposes related to the execution of a contract between the Owner and the User will be retained until the execution of this contract is completed.
• Personal Data collected for purposes attributable to the legitimate interest of the Owner will be retained until such interest is satisfied. The User can obtain further information regarding the legitimate interest pursued by the Owner in the relevant sections of this document or by contacting the Owner.

When the processing is based on the User's consent, the Owner may retain the Personal Data for longer until such consent is revoked. Furthermore, the Owner may be obliged to retain Personal Data for a longer period in compliance with a legal obligation or by order of an authority.

At the end of the retention period, the Personal Data will be deleted. Therefore, upon expiry of this deadline the right of access, cancellation, rectification and the right to data portability can no longer be exercised.

Purpose of the Processing of Collected Data

The User's Data is collected to allow the Owner to provide the Service, fulfill legal obligations, respond to requests or enforcement actions, protect their rights and interests (or those of Users or third parties), identify any malicious activities or fraudulent, as well as for the following purposes: Statistics, Displaying content from external platforms, Tag management, Contacting the User, Managing contacts and sending messages, Interaction with support and feedback platforms, Payment management, Heat mapping and session recording, Interaction with online survey platforms, Interaction with data collection platforms and other third parties, Management of data collection and online surveys, Management of support and contact requests, Hosting and backend infrastructure, Interaction with survey platforms live chat, Interaction with social networks and external platforms, Collection of privacy preferences, Registration and authentication, Registration and authentication provided directly by this Website, Remarketing and behavioral targeting and Platform and hosting services.

To obtain detailed information on the purposes of the processing and the Personal Data processed for each purpose, the User can refer to the "Details on the processing of Personal Data" section.

Details on the processing of Personal Data

Personal Data is collected for the following purposes and using the following services:

• Contact the user

Mailing list or newsletter (this Website)

By registering on the mailing list or newsletter, the User's email address is automatically added to a contact list to which email messages containing information, including commercial and promotional information, relating to this Website may be sent. The User's email address may also be added to this list as a result of registering on this Website or after making a purchase.

Personal Data processed: Postal code; city; surname; date of birth; Usage data; e-mail; physical address; nation; first name; telephone number; province; sex; Tracking Tools.

Contact form (this Website)

By filling in the contact form with their data, the User consents to their use to respond to requests for information, quotes, or any other nature indicated by the header of the form.

Personal Data processed: Postal code; city; Tax ID code; surname; date of birth; Usage data; e-mail; User ID; physical address; nation; first name; telephone number; province; sex; Tracking Tools; various types of Data.

Contact via telephone (this Website)

Users who have provided their telephone number may be contacted for commercial or promotional purposes related to this Website, as well as to fulfill support requests.

Personal Data processed: telephone number.

• Managing contacts and sending messages

This type of service allows you to manage a database of email contacts, telephone contacts or contacts of any other type, used to communicate with the User.
These services may also allow the collection of data relating to the date and time of viewing of messages by the User, as well as the User's interaction with them, such as information on clicks on links included in messages.

Klaviyo (Klaviyo Inc.)

Klaviyo is an address management and email message sending service provided by Klaviyo Inc.

To use the service provided by Klaviyo, the Owner generally shares information regarding Users (who make purchases), such as delivery data and purchase history. For further information regarding the scope of this sharing, check the information below under the heading "Personal Data processed".

Personal Data processed: various types of Data.

Place of processing: United States – Privacy Policy – ​​Opt out .

Sendgrid (Sendgrid)

Sendgrid is an address management and email message sending service provided by Sendgrid Inc.

Personal Data processed: surname; date of birth; e-mail; first name; telephone number; sex.

Place of processing: United States – Privacy Policy .

• Payment management

Unless otherwise specified, this Website processes all payments by credit card, wire transfer or other means through external payment service providers. In general, and unless otherwise indicated, Users are asked to provide payment details and personal information directly to such payment service providers.
This Website is not involved in the collection and processing of such information: instead it will only receive a notification from the payment service provider in question that the payment has been made.

PayPal (Paypal)

PayPal is a payment service provided by PayPal Inc., which allows the User to make online payments.

Personal Data processed: surname; e-mail; billing address; first name; telephone number; various types of Data as specified in the privacy policy of the service.

Place of processing: Consult the PayPal privacy policy – ​​Privacy Policy .

Apple Pay (Apple Inc.)

Apple Pay is a payment service provided by Apple Inc., which allows the User to make payments using their mobile phone.

Personal Data processed: surname; Usage data; e-mail; billing address; shipping address; first name; telephone number; various types of Data as specified in the privacy policy of the service.

Place of processing: United States – Privacy Policy .

Google Pay

Google Pay is a payment service provided by Google LLC or by Google Ireland Limited, depending on how the Owner manages the processing of Data, which allows the User to make online payments using their Google credentials.

Personal Data processed: surname; Usage data; e-mail; billing address; shipping address; first name; telephone number; various types of Data as specified in the privacy policy of the service.

Place of processing: United States – Privacy Policy ; Ireland – Privacy Policy .

Klarna (Klarna AB)

Klarna is a payment service provided by Klarna AB.

Personal Data processed: surname; e-mail; billing address; shipping address; first name; telephone number; various types of Data as specified in the privacy policy of the service.

Place of processing: Sweden – Privacy Policy .

Stripe (Stripe Technology Europe Ltd)

Stripe is a payment service provided by Stripe Technology Europe Ltd.

Personal Data processed: surname; Usage data; e-mail; billing address; first name; various types of Data as specified in the privacy policy of the service.

Place of processing: Ireland – Privacy Policy .

• Tag management

This type of service is functional to the centralized management of tags or scripts used on this Website.
The use of these services involves the flow of User Data through them and, if applicable, their retention.

Google Tag Manager

Google Tag Manager is a tag management service provided by Google LLC or by Google Ireland Limited, depending on how the Owner manages the processing of Data.

Personal Data processed: Usage data; Tracking Tools.

Place of processing: United States – Privacy Policy ; Ireland – Privacy Policy .

• Management of data collection and online surveys

This type of service allows this Website to manage the creation, implementation, administration, distribution and analysis of online forms and surveys in order to collect, save and reuse the Data of the Users who respond.
The Personal Data collected depends on the information requested and provided by Users in the corresponding online form.

These services can be integrated with a wide range of third-party services to allow the Owner to carry out subsequent actions with the processed Data - for example, contact management, sending messages, statistics, advertising and payment processing.

Hotjar surveys (Hotjar Ltd.)

Hotjar surveys is a survey generator and data collection platform provided by Hotjar Ltd.
Hotjar surveys may use cookies to track User behavior. Users can opt out of Hotjar surveys cookie tracking by visiting this opt-out page .

Hotjar surveys respects the “Do Not Track” option available in most modern browsers which, if activated, sends a special signal to stop tracking the User's activity. Users can find further information here on how to enable the “Do Not Track” option for each supported browser.

Personal Data processed: Data communicated during use of the service.

Place of processing: Malta – Privacy Policy – ​​Opt Out .

Klaviyo Forms (Klaviyo Inc.)

Klaviyo Forms is a form builder and data collection platform provided by Klaviyo Inc.

To use the service provided by Klaviyo, the Owner generally shares information regarding Users (who make purchases), such as delivery data and purchase history. For further information regarding the scope of this sharing, check the information below under the heading "Personal Data processed".

Personal Data processed: Data communicated during use of the service.

Place of processing: United States – Privacy Policy .

• Heat mapping and session recording

Heat mapping services are used to identify the areas of this Website with which Users interact most frequently, in order to detect which of them attract the most interest. These services allow you to monitor and analyze traffic data and serve to keep track of the User's behavior.
Some of these services may record your sessions and make them available for you to view later.

Hotjar Heat Maps & Recordings (Hotjar Ltd.)

Hotjar is a heat mapping and session recording service provided by Hotjar Ltd.
Hotjar respects generic “Do Not Track” headers. This means that the browser can tell the script not to collect any user data. This is a setting that is available in all major browsers. More information on opting out from Hotjar is available here.

Personal Data processed: Usage data; Tracking Tools; various types of Data as specified in the privacy policy of the service.

Place of processing: Malta – Privacy Policy – ​​Opt Out .

• Hosting and backend infrastructure

This type of service has the function of hosting Data and files that allow this Website to function, allow its distribution and provide a ready-to-use infrastructure to provide specific functions of this Website.

Some services listed below, if any, may operate on geographically distributed servers, making it difficult to determine the actual location where Personal Data is stored.

SiteGround

SiteGround is a hosting service

Personal Data processed: various types of Data as specified in the privacy policy of the service.

Place of processing: Italy – Privacy Policy .

• Interaction with live chat platforms

This type of service allows you to interact with live chat platforms managed by third parties, directly from the pages of this Website, in order to be able to contact and be contacted by the support service of this Website.
If an interaction service with live chat platforms is installed, it is possible that, even if Users do not use the service, it collects Usage Data relating to the pages on which it is installed. Additionally, live chat conversations may be recorded.

Spotify Inbox

Spoyify Inbox is a service for interacting with the Spotify live chat platform

Personal Data processed: Data communicated during use of the service.

Place of processing: United States – Privacy Policy .

• Interaction with data collection platforms and other third parties

This type of service allows Users to interact with data collection platforms or other services directly from the pages of this Website for the purpose of saving and reusing data.
If one of these services is installed, it is possible that, even if Users do not use the service, it collects Usage Data relating to the pages on which it is installed.

• Interaction with social networks and external platforms

This type of service allows you to interact with social networks, or other external platforms, directly from the pages of this Website.
The interactions and information acquired from this Website are in any case subject to the User's privacy settings relating to each social network.
This type of service may still collect traffic data for the pages where the service is installed, even when Users do not use it.
It is recommended to log out of the respective services to ensure that the data processed on this Website is not linked to the User's profile.

PayPal Button and Widget (Paypal)

The PayPal button and widgets are interaction services with the PayPal platform, provided by PayPal Inc.

Personal Data processed: Usage data; Tracking Tools.

Place of processing: Consult the PayPal privacy policy – ​​Privacy Policy .

Linkedin social button and widgets (LinkedIn Corporation)

The LinkedIn button and social widgets are interaction services with the LinkedIn social network, provided by LinkedIn Corporation.

Personal Data processed: Usage data; Tracking Tools.

Place of processing: United States – Privacy Policy .

Facebook Like button and social widgets

The "Like" button and Facebook social widgets are interaction services with the Facebook social network, provided by Meta Platforms, Inc. or by Meta Platforms Ireland Limited, depending on how the Data Controller manages the processing of Data,

Personal Data processed: Usage data; Tracking Tools.

Place of processing: United States – Privacy Policy ; Ireland – Privacy Policy .

• Collection of privacy preferences

This type of service allows this Website to collect and save Users' preferences relating to the collection, use and processing of their personal information, as required by applicable privacy legislation.

Consent Solution by iubenda (iubenda srl)

The iubenda Consent Solution allows you to save and retrieve records of Users' consent to the processing of Personal Data, as well as the information and preferences expressed in relation to the consent provided.
To this end, it makes use of a Tracking Tool that temporarily stores pending information on the User's device until it is processed by the API. The Tracking Tool (a browser feature called localStorage) is then deleted.

Personal Data processed: Data communicated during use of the service; Tracking Tools.

Place of processing: Italy – Privacy Policy .

Cookie Solution by iubenda (iubenda srl)

The iubenda Cookie Solution allows the Owner to collect and save User preferences relating to the processing of personal data and in particular the use of Cookies and other Tracking Tools on this Website.

Personal Data processed: Tracking Tools.

Place of processing: Italy – Privacy Policy .

• Registration and authentication

By registering or authenticating, the User allows this Website to identify him and give him access to dedicated services.
Depending on the following, registration and authentication services may be provided with the help of third parties. If this happens, this Website may access some Data stored by the third-party service used for registration or identification.
Some of the services indicated below may also collect Personal Data for targeting and profiling purposes; To find out more, please refer to the description of each service.

Direct registration and profiling (this Website)

By registering or authenticating, the User allows this Website to identify him and give him access to dedicated services. The Owner may process the Data collected at the time of registration or authentication by Users for targeting and profiling purposes; To find out more, Users can contact the Owner using the contact details provided in this document.

Personal Data processed: Postal code; Tax ID code; surname; date of birth; Usage data; e-mail; User ID; image; profile picture; billing address; shipping address; physical address; tongue; House number; telephone number; province; sex; state; username; various types of Data.

• Registration and authentication provided directly by this Website

By registering or authenticating, the User allows this Website to identify him and give him access to dedicated services. Personal Data is collected and stored exclusively for registration or identification purposes. The Data collected is only that necessary to provide the service requested by the User.

Direct Registration (this Website)

The User registers by completing the registration form and providing his/her Personal Data directly to this Website.

Personal Data processed: Postal code; city; Tax ID code; surname; date of birth; e-mail; User ID; image; profile picture; billing address; physical address; tongue; nation; first name; House number; telephone number; prefix; province; sex; state; username; various types of Data.

• Remarketing and behavioral targeting

This type of service allows this Website and its partners to communicate, optimize and serve advertisements based on the User's past use of this Website.
This activity is facilitated by tracking Usage Data and the use of Tracking Tools to collect information which is then transferred to partners who manage remarketing and behavioral targeting activities.
Some services offer a remarketing option based on email lists.
Generally, services of this type offer the possibility of deactivating such tracking. In addition to any opt-out feature provided by any of the services listed in this document, you can read more about how to opt-out of interest-based advertising in the "How to opt-out of interest-based advertising" section in this document.

Facebook Remarketing

Facebook Remarketing is a remarketing and behavioral targeting service provided by Meta Platforms, Inc. or by Meta Platforms Ireland Limited, depending on how the Owner manages the processing of Data, which connects the activity of this Website with the advertising network Facebook.

Personal Data processed: Usage data; Tracking Tools.

Place of processing: United States – Privacy Policy – ​​Opt Out ; Ireland – Privacy Policy – ​​Opt Out .

Klaviyo segmentation and social advertising (Klaviyo Inc.)

Klaviyo segmentation and social advertising is a remarketing and behavioral targeting service provided by Klaviyo Inc.

Klaviyo segmentation and social advertising uses tracking technology to monitor User behavior. This Data is then used to personalize the User experience and to provide targeted advertising. Klaviyo segmentation and social advertising may also connect the Data accumulated with other networks, including advertising networks, and enable these third parties to track and target the User. The Owner, unless otherwise provided in this document, has no direct relationship with the third parties that Klaviyo segmentation and social advertising may include.

To use the service provided by Klaviyo, the Owner generally shares information regarding Users (who make purchases), such as delivery data and purchase history. For further information regarding the scope of this sharing, check the information below under the heading "Personal Data processed".

Personal Data processed: purchase history; Usage data; e-mail; device information; Tracking Tools.

Place of processing: United States – Privacy Policy – ​​Opt out .

Facebook Custom Audiences

Facebook Custom Audiences is a remarketing and behavioral targeting service provided by Meta Platforms, Inc. or by Meta Platforms Ireland Limited, depending on how the Owner manages the processing of Data, which connects the activity of this Website with the Facebook advertising network.

Users may opt out of using Facebook Tracking Tools for ad personalization by visiting this opt-out page .

Personal Data processed: email; Tracking Tools.

Place of processing: United States – Privacy Policy – ​​Opt Out ; Ireland – Privacy Policy – ​​Opt Out .

Remarketing with Google Analytics

Remarketing with Google Analytics is a remarketing and behavioral targeting service provided by Google LLC or by Google Ireland Limited, depending on how the Data Controller manages the processing of Data, which connects the tracking activity carried out by Google Analytics and its Tracking Tools Tracking with the Google Ads advertising network and the Doubleclick Cookie.

Personal Data processed: Usage data; Tracking Tools.

Place of processing: United States – Privacy Policy – ​​Opt Out ; Ireland – Privacy Policy – ​​Opt Out Opt Out .

Google Ads Remarketing

Remarketing Google Ads is a remarketing and behavioral targeting service provided by Google LLC or by Google Ireland Limited, depending on how the Owner manages the processing of Data, which connects the activity of this Website with the Google Ads advertising network and the DoubleClick Cookie.

For an understanding of Google's use of Data, please review Google's partner policies .

Users can opt out of using Google Tracking Tools for ad personalization by visiting Google's Ad Settings .

Personal Data processed: Usage data; Tracking Tools.

Place of processing: United States – Privacy Policy – ​​Opt Out ; Ireland – Privacy Policy – ​​Opt Out .

• Platform and hosting services

These services are intended to host and operate key components of this Website, making it possible to deliver this Website from a single platform. These platforms provide the Owner with a wide range of tools such as, for example, analytical tools, for managing user registration, for managing comments and the database, for e-commerce, for payment processing, etc. The use of these tools involves the collection and processing of Personal Data.
Some of these services work through servers that are geographically located in different locations, making it difficult to determine the exact location where Personal Data is stored.

WordPress.com (Automattic Inc.)

WordPress.com is a platform provided by Automattic Inc. that allows the Owner to develop, operate and host this Website.

Personal Data processed: various types of Data as specified in the privacy policy of the service.

Place of processing: United States – Privacy Policy .

• Statistics

The services contained in this section allow the Data Controller to monitor and analyze traffic data and serve to keep track of the User's behavior.

Google Analytics

Google Analytics is a web analysis service provided by Google LLC or by Google Ireland Limited, depending on how the Data Controller manages the processing of Data, (“Google”). Google uses the Personal Data collected for the purpose of tracking and examining the use of this Website, compiling reports and sharing them with other services developed by Google.
Google may use Personal Data to contextualize and personalize the ads of its advertising network.

Personal Data processed: Usage data; Tracking Tools.

Place of processing: United States – Privacy Policy – ​​Opt Out ; Ireland – Privacy Policy – ​​Opt Out .

Google Analytics with anonymized IP

Google Analytics is a web analysis service provided by Google LLC or by Google Ireland Limited, depending on how the Data Controller manages the processing of Data, (“Google”). Google uses the Personal Data collected for the purpose of tracking and examining the use of this Website, compiling reports and sharing them with other services developed by Google.
Google may use Personal Data to contextualize and personalize the ads of its advertising network.
This Google Analytics integration anonymizes your IP address. Anonymization works by shortening the IP address of the Users within the borders of the member states of the European Union or in other countries adhering to the Agreement on the European Economic Area. Only in exceptional cases, the IP address will be sent to Google servers and shortened within the United States.

Personal Data processed: Usage data; Tracking Tools.

Place of processing: United States – Privacy Policy – ​​Opt Out ; Ireland – Privacy Policy – ​​Opt Out .

Meta Events Manager (Meta Platforms Ireland Limited)

Meta Events Manager is a statistics service provided by Meta Platforms Ireland Limited. By integrating the Meta pixel, Meta Events Manager can provide the Owner with information on traffic and interactions on this Website.

Personal Data processed: Usage data; Tracking Tools.

Place of processing: Ireland – Privacy Policy .

Facebook Ads Conversion Tracking (Facebook Pixel)

Facebook Ads conversion tracking (Facebook pixel) is a statistics service provided by Meta Platforms, Inc. or by Meta Platforms Ireland Limited, depending on how the Data Controller manages the processing of Data, which connects data from the network Meta ads with actions taken within this Website. The Facebook pixel tracks conversions that can be attributed to Facebook, Instagram and Audience Network ads.

Personal Data processed: Usage data; Tracking Tools.

Place of processing: United States – Privacy Policy ; Ireland – Privacy Policy .

Google Analytics 4

Google Analytics is a statistics service provided by Google LLC or by Google Ireland Limited, depending on how the Data Controller manages the processing of Data, (“Google”). Google uses the Personal Data collected for the purpose of tracking and examining the use of this Website, compiling reports and sharing them with other services developed by Google.
Google may use Personal Data to contextualize and personalize the ads of its advertising network.
In Google Analytics 4, IP addresses are used at the time of collection and then deleted before the data is recorded in any data center or server. To learn more, you can consult Google's official documentation .

Personal Data processed: device information; number of Users; session statistics; Tracking Tools.

Place of processing: United States – Privacy Policy – ​​Opt Out ; Ireland – Privacy Policy – ​​Opt Out .

Google Ads conversion tracking

Google Ads conversion tracking is a statistics service provided by Google LLC or by Google Ireland Limited, depending on how the Data Controller manages the processing of data, which connects data from the Google Ads advertising network with the actions performed on the site. inside this Website.

Personal Data processed: Usage data; Tracking Tools.

Place of processing: United States – Privacy Policy ; Ireland – Privacy Policy .

Google Analytics Demographics and Interest Reports

Google Analytics Demographics and Interest Reporting is an advertising reporting feature that makes Demographic and Interest Data available within Google Analytics for this Website (Demographic Data means age and gender Data ).

Users can choose not to use Google cookies by visiting Google's [Ad Settings] (https://adssettings.google.com/authenticated).

Personal Data processed: unique device identifiers for advertising (Google Advertiser ID or IDFA identifier, for example); Tracking Tools.

Place of processing: United States – Privacy Policy – ​​Opt Out ; Ireland – Privacy Policy – ​​Opt Out .

• Viewing content from external platforms

This type of service allows you to view content hosted on external platforms directly from the pages of this Website and interact with them.
This type of service could still collect data on web traffic relating to the pages where the service is installed, even when users do not use it.

Google Fonts

Google Fonts is a character style visualization service managed by Google LLC or by Google Ireland Limited, depending on how the Data Controller manages the processing of Data, which allows this Website to integrate such content within its pages.

Personal Data processed: Usage data; Tracking Tools.

Place of processing: United States – Privacy Policy ; Ireland – Privacy Policy .

Font Awesome (Fonticons, Inc.)

Font Awesome is a font style visualization service managed by Fonticons, Inc. that allows this Website to integrate such content within its pages.

Personal Data processed: Usage data; Tracking Tools.

Place of processing: United States – Privacy Policy .

Instagram widgets

Instagram is an image viewing service managed by Meta Platforms, Inc. or by Meta Platforms Ireland Limited, depending on how the Owner manages the processing of Data, which allows this Website to integrate such contents within its pages .

Personal Data processed: Usage data; Tracking Tools.

Place of processing: United States – Privacy Policy ; Ireland – Privacy Policy .

YouTube Video Widget

YouTube is a video content viewing service managed by Google LLC or by Google Ireland Limited, depending on how the Data Controller manages the processing of Data, which allows this Website to integrate such content within its pages.

Personal Data processed: Usage data; Tracking Tools.

Place of processing: United States – Privacy Policy ; Ireland – Privacy Policy .

Learn how to opt out of interest-based advertising

In addition to any opt-out feature provided by any of the services listed in this document, Users can read more about how to opt out of interest-based advertising in the appropriate section of the Cookie Policy.

Further information on the processing of Personal Data

• Sale of goods and services online

The Personal Data collected is used for the provision of services to the User or for the sale of products, including payment and possible delivery. The Personal Data collected to complete the payment may be those relating to the credit card, the current account used for the bank transfer or other payment instruments provided. The Payment Data collected by this Website depends on the payment system used.

User Rights

Users can exercise certain rights with reference to the Data processed by the Owner.

In particular, the User has the right to:

• revoke your consent at any time. The User may revoke the previously expressed consent to the processing of their Personal Data.
• object to the processing of their Data. The User can object to the processing of their Data when it occurs on a legal basis other than consent. Further details on the right to object are set out in the section below.
• access their Data. The User has the right to obtain information on the Data processed by the Owner, on certain aspects of the processing and to receive a copy of the Data processed.
• verify and request rectification. The User can verify the correctness of their Data and request its updating or correction.
• obtain the limitation of treatment. When certain conditions are met, the User can request the limitation of the processing of their Data. In this case the Owner will not process the Data for any purpose other than their conservation.
• obtain the cancellation or removal of your Personal Data. When certain conditions are met, the User can request the deletion of their Data by the Owner.
• receive your Data or have it transferred to another owner. The User has the right to receive their Data in a structured, commonly used and machine-readable format and, where technically feasible, to obtain its transfer without obstacles to another owner. This provision is applicable when the Data is processed with automated tools and the processing is based on the User's consent, on a contract of which the User is a party or on contractual measures connected to it.
• lodge a complaint. The User can lodge a complaint with the competent personal data protection supervisory authority or take legal action.

Details on the right to object

When Personal Data is processed in the public interest, in the exercise of public powers vested in the Owner or to pursue a legitimate interest of the Owner, Users have the right to object to the processing for reasons related to their particular situation.

Users are reminded that, if their Data is processed for direct marketing purposes, they can object to the processing without providing any reason. To find out whether the Owner processes data for direct marketing purposes, Users can refer to the respective sections of this document.

How to exercise your rights

To exercise the User's rights, Users can direct a request to the contact details of the Owner indicated in this document. Requests are filed free of charge and processed by the Data Controller as quickly as possible, in any case within one month.

Cookie Policy

This Website uses Tracking Tools. To find out more, the User can consult the Cookie Policy.

Learn more about the treatment

Defense in court

The User's Personal Data may be used by the Owner in court or in the preparatory stages of its possible establishment for the defense against abuse in the use of this Website or related Services by the User.
The User declares to be aware that the Owner may be obliged to reveal the Data by order of public authorities.

Specific information

Upon request of the User, in addition to the information contained in this privacy policy, this Website may provide the User with additional and contextual information regarding specific Services, or the collection and processing of Personal Data.

System logs and maintenance

For needs related to operation and maintenance, this Website and any third-party services used by it may collect system logs, i.e. files that record interactions and which may also contain Personal Data, such as the User's IP address.

Information not contained in this policy

Further information in relation to the processing of Personal Data may be requested at any time from the Data Controller using the contact details.

Response to “Do Not Track” requests

This Website does not support “Do Not Track” requests.
To find out whether any third-party services used support them, the User is invited to consult the respective privacy policies.

Changes to this privacy policy

The Data Controller reserves the right to make changes to this privacy policy at any time by notifying Users on this page and, if possible, on this Website as well as, if technically and legally feasible, by sending a notification to Users through one of the extremes contact number he has. Please therefore consult this page frequently, referring to the date of last modification indicated at the bottom.

If the changes affect processing whose legal basis is consent, the Owner will collect the User's consent again, if necessary.

Definitions and legal references

Personal Data (or Data)

Any information which, directly or indirectly, also in connection with any other information, including a personal identification number, makes a natural person identified or identifiable constitutes personal data.

Usage Data

This is information collected automatically through this Website (also by third-party applications integrated into this Website), including: IP addresses or domain names of the computers used by the User who connects to this Website, the addresses in URI (Uniform Resource Identifier) ​​notation, the time of the request, the method used in forwarding the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response from the server (successful, error, etc. .) the country of origin, the characteristics of the browser and operating system used by the visitor, the various temporal connotations of the visit (for example the time spent on each page) and details relating to the itinerary followed within the Application, with particular reference to the sequence of pages consulted, the parameters relating to the operating system and the User's IT environment.

User

The individual who uses this Website who, unless otherwise specified, coincides with the interested party.

Interested

The natural person to whom the Personal Data refers.

Data Controller (or Manager)

The natural person, legal person, public administration and any other body that processes personal data on behalf of the Data Controller, as set out in this privacy policy.

Data Controller (or Data Controller)

The natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data and the tools adopted, including security measures relating to the operation and use of this Website. The Data Controller, unless otherwise specified, is the owner of this Website.

This Website (or this Application)

The hardware or software tool through which the Personal Data of Users is collected and processed.

Service

The service provided by this Website as defined in the relevant terms (if available) on this site/application.

European Union (or EU)

Unless otherwise specified, any reference to the European Union contained in this document is intended to include all current member states of the European Union and the European Economic Area.

Cookies

Cookies are Tracking Tools that consist of small portions of data stored within the User's browser.

Tracking Tool

Tracking Tool means any technology - e.g. Cookies, unique identifiers, web beacons, embedded scripts, e-tags and fingerprinting - which allows Users to be tracked, for example by collecting or saving information on the User's device.

Legal references

This privacy information is drawn up on the basis of multiple legislative systems, including articles. 13 and 14 of Regulation (EU) 2016/679.

Unless otherwise specified, this privacy policy applies exclusively to this Website.

Integrations

This information is provided by madbagstore and as data controller (hereinafter also “Company” or “Data Controller”) of the personal data acquired via the website [ madbagstore.com], of which it is the owner, pursuant to the privacy and data protection legislation in force and taking into account the provisions of the Guarantor Authority for the Protection of Personal Data (hereinafter, also "Guarantor"), of Regulation (EU) 2016/679 (hereinafter also “Regulation”), of Legislative Decree no. 196/2003 and subsequent amendments. (hereinafter also “Privacy Code”) as well as, in general, the applicable reference legislation.

This information is provided to users who browse and use the services available on the website.
Your registration on the website is subject to prior reading and acceptance of this information relating to the processing of personal data and your authorization to the relevant processing.

Source and categories of data processed
The personal data that the Company may acquire will be acquired directly from the interested user who browses the website [ madbagstore.com]
The data processed may be, by way of example:

Browsing data
The computer systems and software procedures used to operate this website acquire, during their normal operation, some personal data whose transmission is implicit in the use of internet communication protocols. This is information that is not collected to be associated with identified subjects, but which by its very nature could allow users to be identified. This category of data includes (i) the IP addresses or domain names of the computers used by users who connect to the site, (ii) the URI (Uniform Resource Identifier) ​​notation addresses of the requested resources, (iii) the time of the request, (iv) the method used to submit the request to the server, (v) the size of the file obtained in response, (vi) the numerical code indicating the status of the response given by the server (successful, error) and (vii ) other parameters relating to the operating system and the user's IT environment. These data are used for the sole purpose of obtaining anonymous statistical information on the use of this website and to check its correct functioning and are deleted immediately after processing.
This website uses its own and third-party technical, analytical and profiling cookies.

Data provided voluntarily by the user
The optional, explicit and voluntary sending by the user who browses this website and interacts with it via
• The €10 discount form for you on the page https://www. madbagstore.com/
• The registration form on the site, on the page https://www. madbagstore.com/account/register
• The purchase form on the page https://www. madbagstore.com/it/checkout/
• The return form on the page madbagstore.com/pages/resi-e-rimborsi
• The contact form on the page madbagstore.com/it/pages/contatti

involves the acquisition and processing by the Data Controller of such data and any other information contained in such communications for the purposes indicated in the following paragraph.
The data that may be processed are mainly identification, contact and personal data (for example, name and surname, residential address, telephone number, e-mail address, etc.). Under no circumstances will personal data of a sensitive nature be processed pursuant to art. 9 of the Regulation) or judicial data pursuant to art. 10 of the Regulation).

Furthermore, for needs related to the operation of this website or its maintenance, system logs may be processed, i.e. files that record interactions with the user and which may also include personal data, including the IP address of the user. 'user.

Complete details on each type of data collected will be provided in the dedicated sections of this privacy policy or through specific information texts which the user can view before collecting the data themselves.

Purpose of the processing
The processing of personal data acquired is carried out to:
a) outline the authentication profile necessary to access the site and therefore allow the user to register on the same (also for the purpose of issuing the loyalty card), implement the conditions of use of the site accepted during registration, allow the use of the services provided by this site (for example, the purchase of products, the shipping of purchased products, managing any returns) following the user's registration, for the management of any requests made by the user via the website . The provision of data is, depending on the case, a contractual obligation or a pre-contractual measure adopted at the request of the interested party and failure to provide it will make it impossible for the Company to give exact execution to what has just been outlined;
b) fulfill the obligations established by provisions of laws and regulations, or carry out an order from the judicial authority or other authorities to which the Data Controller is subject. The provision of data is a legal obligation and failure to provide it will make it impossible for the Company to exactly fulfill the obligations outlined above;
c) allow the Owner to carry out direct marketing activities, in order to provide the user with information on promotions, discounts, concessions, events, products and other services by the Owner, also by sending specific advertising material and/or information (e.g. catalogues) in paper and/or electronic form, by means of newsletters (via e-mail) or other tools (e.g. text messages, instant messaging). The provision of data is optional and requires prior consent from the user, free and specific, and failure to provide it will make it impossible for the Company to carry out the marketing activities contemplated therein (and will not have any negative consequences regarding the possibility to register or browse the website);
d) the collection, analysis of user behavior, profiling, recording and processing of purchase data, including those relating to the detail of the frequency, quantity and type of purchases (even if only potential) for the purpose of analyzing the propensity to purchase and, in general, user profiling to prepare and propose personalized promotions and offers, as well as for market analysis and research. The provision of data is optional and requires prior consent from the user, free and specific, and failure to provide it will make it impossible for the Company to carry out the profiling activities contemplated therein (and will not have any negative consequences regarding the possibility to register or browse the website).
e) the transfer of personal data to third parties operating in the sector of [•] for marketing purposes, market research or other sample research, for the detection of the degree of satisfaction, to receive informative, promotional, commercial and advertising or related material to competitions and initiatives, also through the sending of specific material (e.g. catalogues, flyers) in paper and/or electronic form, via newsletter (e-mail) or other tools (instant messaging). The provision of data is optional and requires prior consent from the user, free and specific, and failure to provide it will make it impossible for the Company to carry out the activities contemplated therein (and will not have any negative consequences regarding the possibility of registering or browse the website).
f) allow the Data Controller to register, following the user's subscription to the newsletter service or after making a purchase through this site, their e-mail address in a contact list to which they may be transmitted e-mails containing information of a commercial and promotional nature. The provision of data is optional and requires prior consent from the user, free and specific, and failure to provide it will make it impossible for the Company to carry out the activities contemplated therein (and will not have any negative consequences regarding the possibility of registering or browse the website).

Legal basis of the processing
The legal basis of the data processing is given depending on the processing by law, by the execution of contractual obligations or pre-contractual measures adopted at the request of the interested party as well as by the specific consent possibly given by the same.

Data processing methods and data retention
The processing of personal data will mainly take place using IT or telematic tools, or, as regards the use of personalized services through profiling, where the relevant consent is given, the processing will take place through an automated decision-making process using a specific algorithm which will decide which communications are most suited to the user's profile or which might be of most interest.
In any case, with reference to all the processing referred to herein, the Data Controller will adopt adequate security measures to guarantee the security and confidentiality of your personal data, all in compliance with the provisions of current legislation.
In carrying out processing activities, the Company undertakes, among other things, to:
• adopt suitable security measures to guarantee adequate data protection, in consideration of the potential impacts that the processing entails on the fundamental rights and freedoms of the interested party;
• notify, within the times and in the cases required by mandatory legislation, any violations of personal data to the interested parties;
• guarantee compliance of processing operations with applicable legal provisions.
The personal data of users of the site will be kept for the times strictly necessary to carry out the primary purposes illustrated in this information, or in any case as necessary for the protection of the rights of both the interests of the users and of the Company and in any case, where applicable , until your consent is revoked, which may occur at any time.
Specifically, the data will be processed in compliance with the timescales established within the relevant procedure, to be requested at privacy@.com
With specific reference to the transfer of data to third parties for the aforementioned purposes, please refer to the specific information drawn up by such third parties pursuant to art. 14 of the Regulation. In any case, the user is free, even in this case, to revoke the consent given at any time.

Scope of communication of personal data
In compliance with the minimum security measures, the data may also be communicated to public security entities and other public and private entities for the fulfillment of obligations established by law.
Furthermore, personal data will not be disclosed. However, they may be communicated to the following recipients:
• to companies that the Company uses to carry out tasks of a technical and organizational nature (by way of example but not limited to, companies that provide management services for the information system and communication networks, maintenance and assistance connected to the website );
• third-party companies operating in the review sector for marketing purposes;
• third-party firms or companies in the context of assistance and consultancy relationships;
• third-party companies that support the data controller for the delivery/delivery of purchases (ie couriers).
• third-party companies that allow monitoring of users in a statistical and aggregate manner (e.g. GA4)
The subjects belonging to the aforementioned categories perform the function of Data Processor, or operate in total autonomy as separate Data Controllers.

The data processing will be carried out by personnel employed by the Data Controller, specifically identified by the Data Controller as authorized data processors, who have received adequate training.

In compliance with the conditions and guarantees established by the Regulation, the data may be transferred to countries not belonging to the European Economic Area, including for example the United States of America (USA), which do not offer a level of privacy protection and of personal data protection comparable to that guaranteed by Italian and European laws. Such transfers may only take place in the presence of adequate guarantees or the explicit consent of the user.

Rights of the interested party
The subjects to whom the personal data refer have the right at any time to obtain confirmation as to whether or not personal data concerning them is being processed and, in this case, to obtain access to the data and information referred to in 'art. 15 of the Regulation, to obtain a copy of such data or the related rectification (articles 15 and 16 of the Regulation).
Furthermore, interested parties have the right to request cancellation, limitation of processing, portability of data as well as to lodge a complaint with the supervisory authority and to oppose in any case, for legitimate reasons, to their processing (art. 17 ss. of the Regulation) as well as, more generally, to exercise all the rights recognized by the current legal provisions.
The possibility of denying or revoking the consent previously provided at any time remains without prejudice to the lawfulness of the processing based on the consent before the revocation.
These rights can be exercised by written communication to be sent to: [•]

OWNER AND MANAGER OF THE TREATMENT
The data controller is

madbagstore

VAT number:

Site:

PEC:

Rea number:

CF:

Unique code:

Email: info@ madbagstore.com

A list of External Managers is available at the registered office of the Owner.

Notice regarding children under 14 years of age
Minors under the age of 14 cannot provide personal data. The Company will not be in any way responsible for any collection of personal data, as well as for false declarations, provided by the minor, and in any case, if its use is detected, the Data Controller will facilitate the right of access and cancellation forwarded by of the legal guardian or whoever exercises parental responsibility.