The company MODA39, with registered office at 1109 Lincoln Rd Miami Beach - 33139 Florida (FL) USA, VAT number XXXXXXXXXXX (hereinafter, "MODA39"), as data controller, informs you pursuant to art. 13 Legislative Decree no. 196 of 30 June 2003 (hereinafter,
"Privacy Code") and art. 13 EU Regulation no. 2016/679 (hereinafter, "GDPR") that your data will be processed according to the following methods and purposes:
1. Subject matter of the processing
MODA39 processes personal data, identifying (e.g., name, surname, company name, address, telephone, email, banking and payment references - hereinafter, "personal data" or also "data") communicated by you upon conclusion of contracts for MODA39 services.
2. Purposes of processing
Your personal data are processed without your express consent (art. 24 lett. a), b), c) Privacy Code and art. 6 lett. b), e) GDPR), for the following Service Purposes:
- conclude contracts for MODA39 services;
- fulfill pre-contractual, contractual, and tax obligations arising from existing relationships with you;
- fulfill obligations provided by law, regulation, EU legislation, or an order of the Authority (such as for anti-money laundering purposes);
- exercise MODA39's rights, such as the right of defense in court.
3. Processing methods
The processing of your personal data is carried out using the operations indicated in art. 4 Privacy Code and art. 4 no. 2) GDPR, specifically: collection, recording, organization, storage, consultation, processing, modification, selection, extraction,
comparison, use, interconnection, blocking, communication, erasure, and destruction of data. Your personal data are subject to both paper and electronic and/or automated processing. MODA39 will process personal data for the time necessary to fulfill
the above purposes and in any case for no more than 10 years from the termination of the relationship for Service Purposes.
4. Data access
Your data may be made accessible for the purposes referred to in art. 2:
- to employees and collaborators of MODA39, in their capacity as internal processors and/or administrators of the system;
- to third-party companies or other subjects (e.g., credit institutions, professional firms, consultants, insurance companies for the provision of insurance services, etc.) performing outsourced activities on behalf of MODA39, in their capacity
as external processors.
5. Data communication
Without the need for express consent (ex art. 24 lett. a), b), d) Privacy Code and art. 6 lett. b) and c) GDPR), MODA39 may communicate your data for the purposes referred to in art. 2 to Supervisory Bodies (such as IVASS), Judicial Authorities, insurance
companies for the provision of insurance services, as well as to those subjects to whom communication is mandatory by law for the performance of said purposes. These subjects will process the data as independent data controllers. Your data will not
be disclosed.
6. Security
Data are kept and controlled by adopting suitable preventive security measures aimed at minimizing the risks of loss and destruction, unauthorized access, unauthorized processing, and processing not compliant with the purposes for which the processing
is carried out.
7. Data transfer
The management and storage of personal data will take place within the territory of the European Union.
8. Rights of the data subject
As a data subject, you have the rights under art. 15 GDPR, namely the rights to: i. obtain confirmation of the existence or not of personal data concerning you, even if not yet recorded, and their communication in an intelligible form; ii. obtain indication
of: a) the origin of personal data; b) the purposes and methods of processing; c) the logic applied in case of processing carried out with the aid of electronic tools; d) the identifying details of the data controller, processors, and the designated
representative under art. 5, paragraph 2 Privacy Code and art. 3, paragraph 1 GDPR; e) the subjects or categories of subjects to whom the personal data may be communicated or who may become aware of it as designated representatives in the territory
of the State, processors, or persons in charge; iii. obtain: a) updating, rectification, or, when interested, integration of data; b) erasure, transformation into anonymous form, or blocking of data processed unlawfully, including data whose retention
is unnecessary for the purposes for which the data was collected or subsequently processed; c) certification that the operations referred to in letters a) and b) have been notified, also as regards their contents, to those to whom the data was communicated
or disclosed, unless this requirement proves impossible or involves a manifestly disproportionate effort compared to the protected right; iv. object, in whole or in part, on legitimate grounds, to the processing of personal data concerning you, even
if relevant to the purpose of collection. Where applicable, you also have the rights under Articles 16-21 GDPR (Right to rectification, Right to erasure, Right to restriction of processing, Right to data portability, Right to object), as well as the
right to lodge a complaint with the Supervisory Authority.
9. Exercise of rights
You may exercise your rights at any time by sending a communication: 1. via email, to: moda39miami@gmail.com
2.or by registered mail with return receipt requested, to: MODA39, 1109 Lincoln Rd Miami Beach - 33139 Florida (FL) USA
10. Data controller, processor, and data processors
The Data Controller is MODA39. The updated list of processors and persons in charge of processing is kept and can be consulted at the Data Controller's office.
