Privacy policy

PRIVACY NOTICE

pursuant to Art. 13 of Regulation (EU) 2016/679 (GDPR)

Last update: [insert date]

Dear User,
pursuant to Art. 13 of EU Regulation 2016/679 (hereinafter, the "GDPR"), we provide you with the following information regarding the processing of your personal data collected through the website https://atlasmaterassi.it/ (hereinafter, the “Website”).

1. Data Controller

The Data Controller is MDV Srl, with registered office at Viale Europa snc, Battipaglia (SA) VAT No. 05689780659, which can be contacted at the email address: vendite@åtlasmaterassi.it.

2. Types of Data Collected

While browsing the Website, the following data may be collected and processed:

  • Browsing data: information collected automatically through cookies or similar tools (e.g. IP address, browser type, access time).

  • Data provided voluntarily: for example, first name, last name, email address, telephone number, shipping/billing address, purchase data, entered in contact forms, newsletter subscription or during registration/purchase.

  • Payment data: processed via secure external platforms (e.g. PayPal, Stripe, etc.); the Website does not directly store sensitive credit card data.

3. Purposes and Legal Basis of Processing

Personal data will be processed for the following purposes:

  • Performance of the contract (Art. 6.1.b GDPR): to manage orders, shipments, and requests for assistance or information.

  • Legal obligations (Art. 6.1.c GDPR): to comply with tax, accounting and administrative obligations.

  • Legitimate interest (Art. 6.1.f GDPR): to improve the user experience, prevent fraud, and protect the Controller’s rights.

  • Explicit consent (Art. 6.1.a GDPR): for sending newsletters, promotional and marketing communications.

4. Processing Methods

Processing is carried out using electronic and/or paper tools, in compliance with the principles of lawfulness, fairness and transparency, and with appropriate technical and organizational measures to protect personal data.

5. Data Retention

Data will be retained for the time necessary to pursue the purposes indicated above and, in any case:

  • for purchase management: up to 10 years, in compliance with legal obligations;

  • for marketing purposes: until consent is withdrawn, and in any case no longer than 24 months.

6. Data Communication and Disclosure

Data may be communicated to third parties, e.g. IT service providers, logistics providers, tax consultants, payment providers, only where necessary and subject to specific confidentiality agreements.

Data will not be disclosed, except where required by law or with explicit consent.

7. Transfer of Data Abroad

Data may be transferred to non-EU countries, exclusively to entities that ensure an adequate level of protection (e.g. EU Commission adequacy decisions or standard contractual clauses).

8. Data Subject’s Rights

You have the right to:

  • access your data (Art. 15 GDPR);

  • rectify or erase your data (Arts. 16 and 17 GDPR);

  • restrict processing (Art. 18 GDPR);

  • object to processing (Art. 21 GDPR);

  • request data portability (Art. 20 GDPR);

  • withdraw consent (Art. 7.3 GDPR), without affecting the lawfulness of processing based on consent before its withdrawal.

To exercise your rights, write to: [Controller’s email].

You also have the right to lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it).

9. Cookies

The Website uses technical, analytical and profiling cookies, including third-party cookies. For more information, please see the Cookie Policy.