Privacy Notice regarding the processing of personal data pursuant to Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (GDPR). This document is in effect from 08/04/2025

Preamble

This privacy notice takes into account what is indicated by the GDPR and the Privacy Code (Legislative Decree 30 June 2003 no. 196). The document was also drawn up on the basis of the Guidelines of the Privacy Guarantor (especially the Guidelines for combating spam issued by the Privacy Guarantor on 4 July 2013). This document can also be viewed on a new page, click here

Data Controller

Maxdesign
A Brand by FK Europe Srl
Via Montello, 67
31031 Caerano di San Marco (TV ) IT
VAT no. 05065430265
Data Controller email address: info@maxdesign.it

Website to which this privacy policy statement refers: https://www.maxdesign.it

The Data Controller has not appointed a DPO (Data Protection Officer). Therefore, you can send any requests for information directly to the Data Controller.

Personal Data processed for the following purposes and using the following services

This document describes how the Data Controller processes your personal data provided on the Website.
Below are described the main processing of your personal data. In particular, the legal basis of the processing is explained, whether the provision is mandatory and the consequences of failure to provide personal data. To better describe your rights, where necessary, we have specified whether and when certain processing of personal data is not carried out.

Responding to Your requests

Your data will be processed to respond to your requests for information. The provision is optional, but your refusal will make it impossible for the Data Controller to respond to your questions. The legal basis of the processing is the legitimate interest of the Data Controller to follow up on user requests. This legitimate interest is equivalent to the user’s interest in receiving responses to communications sent to the Data Controller.

Generic Marketing & Advertising

With your prior consent, the Data Controller may process personal data provided by you in order to send you advertising material and/or newsletters relating to products of its own or of third parties. The legal basis for this processing is your consent. The provision of personal data for this purpose is purely optional. The refusal to consent to data processing for marketing purposes will result in the impossibility for you to receive advertising material relating to products/services of the Data Controller and/or of third parties as well as the impossibility for the Data Controller to conduct market research, also aimed at assessing the degree of user satisfaction, as well as to send you newsletters. The sending of these communications will take place at the e-mail address provided by you on the Website.

Registration on the Website

The Website does not offer the possibility of registration. Therefore, the Data Controller does not process your personal data for this purpose.

Purchases on the Website

It is not possible to make purchases on the Website. Therefore, your personal data will not be processed for this purpose. The Data Controller does not process user data to send “reminder” emails for purchases of products and/or services of the Data Controller itself.

Transfer of data to third parties

The Data Controller does not transfer your personal data to third parties.

Profiling

With your prior consent, the Data Controller may process your personal data for profiling purposes, that is for analyzing your consumption choices through the detection of the type and frequency of purchases made by you, in order to send you advertising material and/or newsletters relating to products of its own or of third parties, of specific interest to you. The legal basis for this processing is your consent. The provision of data for this purpose is purely optional. The refusal to consent to the processing of your personal data for profiling purposes will result in the impossibility for the Data Controller to develop your commercial profile, through the detection of your choices and purchasing habits as well as to send you advertising material, relating to products of the Data Controller and/or of third parties, of specific interest to you. These communications will be sent to the e-mail address provided by you on the Website.

Geolocation

The Website does not implement tools for geolocation of the user’s IP address.

Communication of personal data

In the course of its ordinary activities, the Data Controller may communicate your personal data to certain categories of subjects. In Article 2 you can find the list of subjects to whom the Data Controller communicates your personal data. To facilitate the protection of your rights, Article 2 may specify in some cases when your data is not communicated to third parties.
The “communication” of personal data to third parties is different from “transfer” (governed at the preceding point). In fact, in the communication the third party to whom the data is transmitted may use it only for the specific purposes described in the relationship with the Data Controller. In the transfer, instead, the third party becomes an autonomous Data Controller of the personal data. Furthermore, in order to transfer your personal data to third parties, your consent is always required.
Without prejudice to the above, it is understood that the Data Controller may nevertheless use your personal data to ensure proper compliance with the obligations set forth by applicable laws.

SPECIFIC PRIVACY NOTICE

Art. 1 Processing Methods

• 1.1 The processing of your personal data will be carried out mainly with the aid of electronic means or otherwise automated, according to the methods and with the instruments suitable to guarantee its security and confidentiality in compliance with the GDPR.
• 1.2 The information acquired and the processing methods will be relevant and not exceeding with respect to the type of services provided. Your data will also be managed and protected in secure IT environments suitable to the circumstances.
• 1.3 Through the Website no “special categories of data” are processed. Special categories of data are those that can reveal racial and ethnic origin, religious, philosophical or other convictions, political opinions, membership of parties, trade unions, associations or organizations with a religious, philosophical, political or trade union character, health status and sexual life.
• 1.4 Through the Website no judicial data are processed.

Art. 2 Communication of personal data

The Data Controller may communicate your personal data to determined categories of subjects. Below are indicated the subjects to whom the Data Controller reserves the right to communicate your data:

• The Data Controller may communicate your personal data to all those subjects (including Public Authorities) that have access to personal data by virtue of legislative or administrative measures.
• Your personal data may also be communicated to all those public and/or private subjects, natural and/or legal persons (legal, administrative and tax consulting firms, Courts, Chambers of Commerce, Labor Offices and Chambers, etc.), where the communication is necessary or functional to the correct fulfillment of obligations arising from the law.
• In its ordinary activity of managing the Website, the Data Controller avails itself of companies, consultants or professionals entrusted with the installation, maintenance, updating and, in general, the management of hardware and software of the Data Controller or which the latter uses for the provision of its services. Therefore, only with reference to these purposes, your data may also be processed by these subjects.
• The Data Controller avails itself of employees and/or collaborators in any capacity. For the correct functioning of the Website the Data Controller may communicate your personal data to these employees and/or collaborators.
• For the sending of its communications the Data Controller avails itself of external companies entrusted with the sending of this type of communications (CRM platforms). Your personal data (in particular the email) may therefore be communicated to these companies.

The Data Controller reserves the right to modify the above list based on its ordinary operations. Therefore, you are invited to access this information regularly to check which subjects the Data Controller communicates your personal data to.

Art. 3 Retention of personal data

3.1 This article describes for how long the Data Controller reserves the right to retain your personal data:

• Your personal data will be retained for the time necessary only to ensure the correct provision of services offered through the Website.
• For marketing purposes, personal data will be retained until the possible revocation of consent. For inactive users, personal data will be deleted after one year from the sending of the last email possibly viewed.
• As provided for by article 2220 of the civil code, invoices, as well as all accounting records in general, are retained for a minimum period of ten years from the date of registration, so that they can be presented in case of inspection.

3.2 Without prejudice to what is provided for in article 3.1, the Data Controller may retain your personal data for the time required by specific regulations, as modified from time to time.

Art. 4 Transfer of personal data

4.1 The Data Controller is based within the European Union. Therefore, the processing of your data is secure from a regulatory point of view as it is governed by the GDPR. Where the transfer of your personal data takes place in a country outside the EU and for which the European Commission has expressed an adequacy judgment, the transfer is in any case considered secure from a regulatory point of view. This article 4.1 indicates from time to time the Countries in which your personal data may be eventually transferred and where the European Commission has expressed an adequacy judgment.

• The Data Controller may transfer your personal data to the United Kingdom. The European Commission has indeed ruled, with the decision of 28 June 2021, that the United Kingdom offers a level of protection of personal data adequate based on what is established by the GDPR.

4.2 Without prejudice to what is indicated in article 4.1, your data may also be transferred to countries outside the EU and for which the European Commission has not expressed an adequacy judgment. You are therefore invited to review this article 4.2 regularly to ascertain in which of these Countries your data is eventually transferred.

Art. 5 Rights of the data subject

Pursuant to art. 13 of the Privacy Regulation, the Data Controller informs you that you have the right to:

• revoke consent at any time. The User can revoke the consent to the processing of your Personal Data previously expressed.
• obtain the deletion or removal of your Personal Data. When certain conditions occur, the User can request the deletion of your Data by the Data Controller.
• access your Data. The User has the right to obtain information on the Data processed by the Data Controller, on certain aspects of the processing and to receive a copy of the Data processed.
• verify and request rectification. The User can verify the correctness of your Data and request its update or correction.
• obtain the restriction of processing. When certain conditions occur, the User can request the restriction of processing of your Data. In this case the Data Controller will not process the Data for any other purpose than its retention.
• receive your Data or have it transferred to another controller. The User has the right to receive your Data in a structured, commonly used and machine-readable format and, where technically feasible, to obtain its transfer without obstacles to another controller. This provision applies when the Data is processed with automated tools and the processing is based on the User’s consent, on a contract to which the User is a party or on contractual measures connected to it.
• lodge a complaint. The User can lodge a complaint with the competent personal data protection authority or take legal action.

The above rights may be exercised by sending a request without formalities to the contacts indicated in the Preamble.

Art. 6 Amendments and variations to this privacy policy

The Data Controller reserves the right to make changes to this information at any time, giving appropriate notice to Website users and in any case guaranteeing adequate and similar protection of personal data. Please therefore consult this page frequently, referring to the date of last modification indicated in the header.
Should the amendments concern processing the legal basis of which is consent, the Data Controller will proceed to collect the User’s consent again, if necessary.