INFORMATION ON THE PROCESSING OF PERSONAL DATA pursuant to Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (GDPR) Preamble This notice is provided for the website "http://www.mavment.com" (Site) owned by Mavment s.r.l., located at via colle della maddalena 4/A Giffoni Valle Piana SA 84095 IT, with VAT n. 05426900659 (Data Controller), acting as the Data Controller under the GDPR.

Purchases on the Site Upon your provision, your personal data will be processed to enable you to make purchases on the Site.

Registration The information and data requested during registration will be used to allow you both access to the private area of the Site and to use the online services offered by the Data Controller to registered users.

Marketing With your consent, the Data Controller may process the personal data you provide to send you advertising material and/or newsletters related to their own or third-party products.

Soft spamming The Data Controller may use, for the direct sale of products offered for sale through the Site, the email address you provided during a purchase on the Site, even without your consent, provided it relates to a product similar to the one previously sold (soft spamming). You can refuse this processing at any time by communicating your objection to the Data Controller.


In compliance with the GDPR, we wish to inform you that the Data Controller will process the personal data concerning you under the following conditions.

Art. 1. Purpose and legal basis of processing. Mandatory or optional provision. Consequences of refusing processing.

The processing of personal data aims to achieve the following purposes:

a. to allow registration on the Site and access to services reserved for registered users as well as to meet obligations arising from laws or regulations in force, particularly administrative, accounting, and public safety areas. The legal basis for processing is the need for the Data Controller to implement pre-contractual measures taken at the request of the data subject or to fulfill a legal obligation;

b. in the event of placing an online purchase order, to allow the conclusion of the purchase contract and the correct execution of operations related to it (and, if necessary according to sector regulations, to meet tax obligations). The legal basis for processing is the obligation of the Data Controller to execute the contract with the data subject or to fulfill legal obligations;

c. limited to the email address you provided in the context of a purchase via the Site, to allow the Data Controller to offer similar products directly (soft spamming), as long as you do not oppose this processing as outlined in this notice. The legal basis for processing is the legitimate interest of the Data Controller in sending these types of communications. This legitimate interest is considered equivalent to the interest of the data subject in receiving "soft-spam" communications;

d. with your consent, to send newsletters, conduct market research, also aimed at evaluating user satisfaction, and send advertising material related to products of the Data Controller and/or third parties, via systems such as email (marketing purposes); The legal basis for processing is the consent of the data subject;

e. to respond to your inquiries through the customer care service. Providing this data is optional, but your refusal will make it impossible for the Data Controller to respond to your queries through this service. The legal basis for processing is the legitimate interest of the Data Controller to follow up on user requests. This legitimate interest is equivalent to the user's interest in receiving responses to communications sent to the Data Controller;

f. to respond to your inquiries via email or phone. Providing this data is optional, but your refusal will make it impossible for the Data Controller to respond to your queries. The legal basis for processing is the legitimate interest of the Data Controller to respond to user requests. This legitimate interest is equivalent to the user's interest in receiving responses to communications sent to the Data Controller.

Providing data for the purposes referred to in points a) and b) is purely optional. However, since this processing is necessary to make a purchase on the Site, your eventual refusal to provide the data in question will make it impossible to make such a purchase via the Site.

Consent to process your data for marketing purposes is purely optional. The lack of consent will only imply the consequences described below.

The lack of consent to process data for marketing purposes will mean that you cannot receive advertising material related to products of the Data Controller and/or third parties, and the Data Controller will not be able to conduct market research, aimed at evaluating user satisfaction, or send you newsletters.

Notwithstanding the above, it is understood that the Data Controller may still use your personal data to correctly fulfill the obligations set by current laws and obligations arising from contractual relationships between you and the Data Controller.

Please note that you can object to the processing of your personal data through a specific link at the bottom of any promotional email sent by the Data Controller.

Payment card details To make a payment using one of the payment cards offered on the Site, the user must enter the confidential card payment data directly on a page that will communicate via a secure encryption protocol with the payment service provider (which will act as an independent data controller), without going through the server of the Data Controller, who will, therefore, not process such data in any way. The data will be acquired in encrypted format.

In compliance with the legal obligations set out in Directive 2015/2366/ (EU) on payment services in the internal market (PSD2), you are informed that, with reference to purchases made on the Site using a credit card, the data required to complete the purchase procedure may include the mobile phone number you provided or another personal detail necessary to complete the purchase procedure. Indeed, to allow you to complete the purchase, the payment institution responsible for managing the operation will send you an authentication code, which you will need to enter during the purchase procedure to meet the authentication criteria set by the PSD2 (Strong Customer Authentication). Processing your personal data for these purposes is based on the fulfillment of legal obligations and does not require your consent.

Regarding payment card data, please note that processing your personal data is necessary to allow the conclusion of the online purchase contract with the Data Controller. The failure to provide this data will, therefore, prevent you from completing the online purchase process.

PayPal It is also possible to purchase on the Site using the PayPal payment tool. In this case, you will be directed to a page external to the Site, where you will need to provide the personal data required by PayPal - which will act as an independent data controller - to complete the purchase procedure. Personal data will not pass through the server of the Site, which will, therefore, not process such data in any way. Processing your personal data is necessary to allow the conclusion of the online purchase contract with the Data Controller. The failure to provide this data will, therefore, prevent you from completing the online purchase process.

Bank transfer If you choose bank transfer as the payment method, in the event of any refund, the Data Controller will ask you for the bank details useful for preparing the payment.

Special or judicial data The Data Controller does not process special or judicial data.


Art. 2. Processing methods

Your personal data will primarily be processed using electronic or automated means, according to methods and with tools designed to ensure their security and confidentiality, in compliance with the GDPR.

The acquired information and processing methods will be relevant and not excessive in relation to the type of services provided. The data will also be managed and protected in environments where access is under constant control.


Art. 3. Communication and dissemination of data

Your data may be communicated to:

a. all those entities (including Public Authorities) that have access to personal data by virtue of regulatory or administrative measures; b. companies or third parties responsible for printing, enveloping, shipping, and/or delivery and/or collection of products purchased through the Site; c. post offices, couriers, suppliers (e.g., drop shipping sales), or shippers responsible for delivering products purchased through the Site; d. banks and companies managing national or international payment circuits through which online payments for products purchased through the Site are made; e. companies, consultants, or professionals possibly in charge of the installation, maintenance, updating, and, in general, the management of the Data Controller's hardware and software or those the Data Controller uses to provide its services; f. external companies responsible for sending advertising communications on behalf of the Data Controller; g. the company in charge of providing customer care services; h. entities that manage online payment transactions; i. all those public and/or private entities, natural and/or legal persons (legal, administrative and tax consultancy firms, Courts, Chambers of Commerce, Labor Chambers and Offices, etc.) if the communication is necessary or functional to the proper fulfillment of the obligations arising from the law.

The data concerning you will not be disseminated, except in anonymous and aggregate form, for statistical or research purposes.


Art. 4. Data Controller

The Data Controller of personal data can be contacted at the following addresses:

Mavment s.r.l., via colle della maddalena 4/A, Giffoni Valle Piana SA 84095 IT Phone: +39 089 0977654 Email: info@mavment.com Through the contact form available on the Site.


Art. 5. Storage of personal data

User data will be stored only for the time necessary to ensure the proper provision of the offered services and, in any case, within the terms set by regulations or measures of the Personal Data Protection Authority.

In the event of closing the Site account on the user's initiative, the data contained therein will be stored for administrative purposes for a period not exceeding 90 days, except for any specific legal obligations regarding the retention of accounting documentation or for public safety purposes.

In any case, it is understood that personal data will be stored and processed for marketing purposes for the period allowed by law and the provisions of the Personal Data Protection Authority. At the end of this period, the Data Controller may ask the user to renew their consent to process their data for these purposes or make them anonymous and store them solely for statistical or historical purposes.


Art. 6. Rights of the data subject

Pursuant to Art. 13 of the Privacy Regulation, the Data Controller informs you that you have the right to:

a. request access to personal data from the Data Controller and its rectification or deletion, or the limitation of processing concerning you, or to object to its processing, in addition to the right to data portability; b. withdraw consent at any time without affecting the lawfulness of processing based on consent given before its withdrawal; c. lodge a complaint with a supervisory authority (e.g., the Personal Data Protection Authority).

The above rights can be exercised with an informal request directed to the Data Controller at the contacts mentioned above.


Art. 7. Changes

The Data Controller reserves the right to make changes to this information at any time, ensuring adequate publicity to Site users and, in any case, ensuring adequate and similar protection of personal data. To view any changes, you are invited to regularly consult this information.

powered by legalblink