UASHMAMA SRL LEGAL PRIVACY POLICY 

This privacy policy is provided in accordance with and for the purposes of art. 13 of Reg. (EU) 679/2016 (GDPR), by Ms Emanuela Sarti (SRTMNL58E46A944N), born in Bologna, on 6 May 1958, resident at via Ponchielli, no. 11, Montecatini Terme, legal representative for the company Uashmama Srl (VAT no. 02398910469 – Economic and Administrative Index no. 222511), with registered offices at piazza dell’Anfiteatro no. 30/31, Lucca, Tel: 0572 771880, e-mail: [email protected], certified e-mail: [email protected], in her capacity as Data Controller. 

In compliance with current law, all operations involving the personal data collected are performed in accordance with the principles of fairness, lawfulness and transparency. 

PROFESSIONAL ACTIVITIES 

Based on the professional activities performed, the Data Controller and Processor may process personal, identification and financial data and details of the data subject for reasons associated with protecting their rights. 

Processing will be performed using electronic and physical methods for the following purposes: 

a) Fulfilling orders received; 

b) Facilitating communication with the data subject; 

c) Complying with legal obligations concerning fiscal, tax, 

and accounting matters and to meet the requirements of anti-money laundering regulations; 

USING THE www.uashmama.com WEBSITE 

Signing up to the newsletter 

d) By visiting the specific section of the website, users can 

give their consent to sign up to the company newsletter, and will therefore receive: articles, promotional information, details of events and other initiatives organised by us or that we are involved in, and other information on activities promoted by the company. 

Contact requests 

e) The Data Controller will process data provided 

by users by filling out the specific contact form, for the purposes of responding to the contact request/request for information submitted. 

LEGAL BASES FOR PROCESSING 

-The legal basis that makes the processing referred to in points 

a) and b) lawful is consent. 

-The legal basis that makes the processing referred to in point 

c) lawful is compliance with legal obligations. 

-The legal basis that makes the processing referred to in point 

d) lawful is consent given freely by the data subject in the form 

and according to the methods provided for by the GDPR, by filling out the specific "enter your e-mail address to sign up" section of this website. 

NATURE OF THE PROCESSING 

Provision of the data is optional, but required to fulfil the orders placed. Any refusal to provide the aforementioned data may, and usually will, make it impossible to fulfil the order. Provision of data for the purposes of signing up to the newsletter is optional and refusal to provide it will merely make it impossible to receive the newsletter, but will not affect any existing relationship with the Data Controller. 

Provision of data when submitting a contact request is optional and any refusal to provide such will merely make it impossible to respond to the data subject's request or consider that request. 

DISCLOSURE OF PERSONAL DATA 

The data provided by the user may be accessed by: 

-the Data Controller and the Processor, as well as persons 

who have access to them for the purposes of complying with legal obligations. 

They may also be disclosed to: 

-experts, technicians, consultants; 

-shipping agents and carriers in accordance with privacy regulations. 

To fulfil orders placed, as well as to third-party data processors. 

Data provided by signing up to the newsletter may also be accessed by the company that runs the website and the company hired to handle the technical process of sending the newsletters, both appointed as data processors. An up-to-date list of data processors is available from the Data Controller, by submitting a request to the e-mail address provided above. 

Data provided for the purposes of responding to contact requests may only be accessed by appointed employees and the company's collaborators. 

The data provided will not be disseminated under any circumstances. 

TRANSFER OF PERSONAL DATA 

The data collected may be transferred to third countries outside the European Union, only if necessary for the purposes of shipping the goods ordered, and in relation to use of software such as Google Drive and any other software used by the company. In such cases, transfer take place according to the forms and methods provided for by current laws, and in any case guaranteeing adequate protection, such as checking the security measures used by such software. 

RETENTION PERIOD 

Personal data processed for reasons associated with performing the contract will be stored for the entire duration of that contract and, in any case, until the data subject exercises the right to be forgotten. In any case, the data collected will be stored for the period provided for by law and for the entire period required to comply with obligations arising from tax and accounting laws. Data collected for the purposes of signing up to the newsletter will be stored until the data subject exercises his/her right to withdraw the consent provided. 

RIGHTS OF THE DATA SUBJECT 

The data subject has the right to exercise the rights referred to in articles 7, 15-22 of Reg. (EU) 679/2016. In particular, for processing based on consent, the data subject has the right to withdraw such at any time, by following the specific instructions provided in the newsletter (technicians must therefore provide for a specific section) or by contacting the Data Controller or Data Protection Officer at the e-mail addresses specified below. 

Using the same methods, the Data Subject has the right to obtain confirmation from the Controller as to whether or not personal data relating to him/her exist and to receive such data in an intelligible format; the right to request access to personal data that concerns him/her, the right to receive personal data from the Controller and send it to another Controller without restriction (so-called portability), the right to update the data, restrict its processing, obtain rectification of the data and erasure of any data processed in conflict with current laws. 

The data subject also has the right, on legitimate grounds, to object to the processing of personal data concerning him/her and to processing for advertising, direct sales and market research purposes. He/she also has a right to submit a complaint to the Italian Data Protection Authority. 

It is also hereby noted that the Controller has appointed the following Data Protection Officers:

• Marconi Giulia
• Marconi Gemma
• Federica Ferretti
• Tiziana Frosali
• Daniela Batino
• Robert Kerr
• Andrea Cecilia Kerr
• Camilla Fibbi
• Aiko Harada
• Ilaria Giusti
• Claudia Seifert
• Yasuko Takahashi
• Elene Efimova
• Sara Lucarelli
• Marconi Marco
• Manuela Maltinti