Privacy

In the following chapters you will find information about how your personal data are treated. Your data
may be collected during your navigation on our website or as a consequence of the services that we
provide you. In order to take advantage of all the services offered by our website, it is necessary for us
to collect and treat your personal data. The treatment of your personal data may consist in collecting,
organising, storing, analysing, interpreting, modifying, selecting, comparing, using, connecting,
blocking, communicating, cancelling and destructing data. The treatment of your personal data follows
the principles of lawfulness and correctness, in compliance with the current law and EU Regulation
2016/679 of the European Parliament and Council. With this privacy notice, we like to inform you about
the data we collect, why the collection is necessary, and also of your rights in connection with the
treatment of your data.

Owner of the Treatment
The Owner of the Treatment of your personal data on this website site is Maciaconi srl with legal offices
at Str. Plan da Tieja 10, 39048 Selva di Val Gardena (BZ), South Tyrol, Italy, VAT no. IT01190680213.
For more information, please contact us using the following addresses:
Tel +39 335 522 0145
E-Mail: moritz@maciaconi.eu

Purposes of the treatment
We treats your data for the following purposes:

to fulfi l legal obligations
to fulfi l contractual obligations
to make available the requested information and deliver the agreed services
to monitor system effi ciency
to carry marketing activities, such as forwarding commercial information and advertisingmaterial, market research activities
to safeguard obligations (e.g.: payments)
to ascertain the level of satisfaction for the quality of the products and services off ered

Type of treatment
Your personal data are treated manually, but also electronically, mainly through the use of automatedprocesses, depending on the objectives. In this case, we specifi cally use databases and computerisedplatforms that may be managed by both us and third parties. Each type of treatment guarantees therespect and the confi dentiality of the data treated. We store such data and general information in thedatabase and in the servers as logfi les. In order to provide you with a unique navigation experience, weneed to collect some technical data that are necessary for the correct operation of the website:
Browser type and browser version
Operating system

The „referrer“ website
The on our website linked webpages
Date and time of access
IP address

Other similar data and information
The legal basis for this type of treatment is article 6 of the GDPR. By accessing the website,computerised systems and management software automatically and indirectly collect and/or managethis number of data and information.
At fi rst, the collection of these data in anonymous format is static. However, later on the data aretreated to ensure a high level of protection and safety for any data that we collect.
Period of data conservation
In compliance with current laws, the owner of the treatment has defi ned diff erent periods of dataconservation depending on their usage:
1. As far as handling and answering your questions about products and activities, your personaldata will be stored for a period of time strictly necessary for processing your request.
2. As far as managing activities connected with the navigation through our website, your personaldata will be stored for a period of time strictly necessary to satisfy your requests.
3. As far as internal management and operational activities (for example time of conservation ofinvoices, administration, and tax information), your personal data will be treated for a period oftime in line with the legal requirements for the specifi c purpose.
4. As far as the handling of disputes and litigations, your personal data will be stored for the wholetime strictly necessary for pursuing such matters, and in any case not beyond the applicableprescription limits.
5. Use of cookies
In order to constantly improve the navigation of our website, our company uses cookies. Cookies aretext fi les containing data, which during the navigation to a website are stored in the visitor’s computerthrough the browser. The storage of these data is necessary for the access recognition. You can deleteany cookies stored in your computer at any time through the settings of your browser, or even set thebrowser so that cookies are no longer stored in the future. Should you decide on the latter, we cannotensure that you will be able to use our website normally, and some services and functionalities may nolonger be available. More information on cookies and their usage is available in the dedicated section.

Contact form
Should you decide to contact us using the contact form on our website, you will be asked to enter somepersonal data. This enables us to process your query. This is also the reason why the correspondingfi elds of the contact form are marked with an asterisk, or in any another way, as mandatory fi elds. Theentering of personal or sensitive data other than those marked as mandatory will be at your discretion.Failure to enter, even in part, the mandatory information marked with an asterisk or similar charactermay result in the impossibility for us to answer your requests or deliver the requested services. Theforwarding of requests using the contact form constitutes your implicit acceptance of the treatment ofyour personal data. The data that you transmit are treated and stored for a period of time strictlynecessary for the processing of your request.

Profi ling
Profi ling is any type of automated personal data processing activity that consists in using theinformation to assess, analyse and predict certain aspects of a natural person. For this type ofmarketing activities we signed agreements with third parties.
Collaboration with third parties
When we work with our suppliers and use third-party services, we make sure that they are contractuallyobliged to apply the same privacy/safety standards that we apply, and that such standards are alsofollowed. Such third parties, who act as owners of the treatment of the personal data, guarantee thatthe data received are not stored and used for purposes other than the contractually agreed. Within theframework of these technical agreements, the mail addresses made available to them are encryptedusing technologies such as “hashing”, so that any other parties are unable to obtain the originaladdresses.
It may happen that we need to transfer your data to third parties in Non-European Countries (EEC). TheEEC (European Economic Area) consists of the countries of the European Union, plus Switzerland,Iceland, Lichtenstein and Norway. These countries guarantee the same safety standards for thetreatment of personal data. This transfer of the data may be necessary if the servers (meaning thephysical locations where the data are stored) or if the premises of our suppliers are in countries outsidethe EEC area. Should we be forced to transfer your data to a country outside the European EconomicArea (EEC), it is our responsibility to ensure that they are treated with appropriate safety standards.

Disclosure of your data
In principle, the personal data are not forwarded. Only in some specifi c cases, personal data may bedisclosed to the following suppliers:
Subcontractors for technical checks and analysis, payments, identifi cation and addressingservices, suppliers of analysis services or credit insurance companies
Public administration or authorities, should this be required by law
Credit institutions with whom we undertake commercial relations for the handling of credits /debits, fi nancial reasons
Any physical or legal persons, public and/or private (legal, administrative and fi scal consultants,courts of laws, chambers of commerce, etc.), if the data transfer is necessary or relevant forproviding our service activities.

User rights
The aff ected person’s rights may be exercised by the same, and/or by a named person, by sending awritten request with acknowledgement of receipt or e-mail to the owner of the treatment, DemetzMoritz, at the operational address of the company Maciaconi srl, Str. Plan da Tieja 10, 39048 Selva di ValGardena (BZ), South Tyrol, Italy. The aff ected person has the right to obtain a copy of the data in ourpossession, which will be made available in accordance with the terms of current regulations.
In specifi c cases, we do reserve the right to store some information for legal purposes (for example incase of suspected fraud, or breach of the general terms and conditions). Should you believe that your
rights have been violated, you can contact the relevant data protection authorities or take legal action.
Below we are summarizing the rights of an aff ected person:
Right to receive confi rmation of the data treatment
Each aff ected person has the right to ask the owner of the personal data treatment if the data arebeing treated. Anyone wishing to exercise this right may contact us at any time.

Right of information
Each aff ected person has the right to obtain at any time and free of charge information regardingthe treatment of their own personal data. The notifi cation must contain the followinginformation:
the purposes of the treatment
the types of personal data being treated
the recipients and/or the categories of recipients to which the treated personal data mayhave received, with particular reference and attention to any recipients outside the EEC, orinternational organizations. Moreover, as far as transfer of the data to countries outside theEEC area, the user also has the right to receive additional information regarding the safetyguarantees in place during the treatment
the period of conservation contemplated for the treatment and the storage of the personaldata
the possibility to issue a complaint with the data protection authorities
in those cases when the personal data were not collected or treated by the company, thepossibility of obtaining appropriate information on their source and origin
the possibility of automated decisions, even when contemplated by art. 22, par. 1 and 4 ofthe GDPR on the profi ling of personal data, and in this case obtain appropriate andsupported information regarding the logics followed for such decisions and the possibleconsequences that this solution may bring for the the aff ected person.

Right of correction of personal data
The aff ected person has the right to request the immediate correction of any errors in their ownpersonal data.

Right of cancellation
The aff ected person has the right to ask the owner of treatment to immediately delete their ownpersonal data, if at least one of the following conditions is met and that the processing of thepersonal data is not required:
The aff ected person have been collected and processed in a diff erent way and are no longernecessary.
The data subject withdraws the authorisation to the treatment, granted in accordance withart. 6, paragraph 1, letter a) of the GDPR, or art. 9, paragraph 2, letter a) of the GDPR, butalso if the treatment is in violation of other data protection regulations.
The aff ected person dissagrees the treatment according to art. 21, paragraph 1, of theGDPR, and demonstrates that there are no legitimate reasons for their processing.
The personal data are not being treated in a compliant way.
The cancellation of the personal data is required to fulfi l a legal obligation contemplated bynational or EU laws, to which the owner of treatment must abide.
The personal data have been treated following the requests of services by a minor, incompliance with the provisions of art. 8, paragraph 1 of the GDPR.
Right of limitation of the treatment
The aff ected person has the right to ask the owner of treatment to limit the processing if one ofthe following conditions persists:
The correctness of the personal data is disputed by the aff ected person. The limitation shallapply for a period of time that will give the responsible person the possibility to verify thecorrectness of the personal data.
The treatment is not in compliance with current laws; the aff ected person refuses thecancellation of the personal data, asking instead their limitation.
The owner of the treatment no longer needs the personal data for the purpose of thetreatment, but the data subject requires the same to assert, exercise or defend their rightsfor legal action.
The aff ected person has disagreed to current treatment according to art. 21, paragraph 1 ofthe GDPR and it has not yet been clarifi ed if the legitimate reasons of the owner of thetreatment have priority on those of the aff ected person.

Right of data transmission
The aff ected person has the right to receive, in a structured format, or in any case in a formatreadable by a data processing machine, the personal data originally delivered to the owner oftreatment. The aff ected person has the right to transfer these data to another owner oftreatment.
Moreover, based on the provisions of art. 20, paragraph 1 of the GDPR, the aff ected person hasthe right to request that data will be directly transferred from the original owner to the newowner if a technical solution for both parties is available.
Right of disagreement
The aff ected person has the right to object at any time to the treatment of their own personaldata due to reasons resulting from their specifi c situation. This also applies to profi ling.
In case of objection to the treatment of personal data, we will interrupt the treatment, unless wecan provide valid reasons to continue and such reasons do not aff ect the interests, the rights andthe freedom of the aff ected person in a negative way and unless the treatment is necessary foraffi rmation, exercising and defence of legal aff airs.
Automated decisions, including profi ling
The aff ected person has the right to disagree on automated data treatment, including profi ling,that has legal consequences and a signifi cant impact, unless the decision is taken to fulfi l or abideto the terms of a contract between the aff ected person and the owner of the treatment.
If the terms of a contract between the aff ected person and the owner of treatment includeprocessing a certain request, with the explicit consent of the same, we will implement reasonablemeasures to safeguard the rights and freedom of the aff ected person.
Right to withdraw the consent to the data treatment
The aff ected person has the right to withdraw at any time the consent to the treatment of theirown personal data previously granted to the owner of the treatment.
Place of the data treatment
The treatment of the personal data that you have transmitted is mainly happening within our workingstructures, in the departments where the individual responsible for such treatment is located. Theagreed contractual activities will only take place in an EU or EEC country.
Any transfers, in part or in full, of the contracted services to a diff erent country shall be subjected to theapproval of the customer, and can only take place if the data guarantee and safety conditions do agreewith art. 44 and subsequent of the GDPR.
For further information, please contact us at the addresses indicated in the “Copyright” section.
Gallery