Privacy Policy

Privacy Policy pursuant to Articles 13 and 14 of Regulation (EU) 2016/679


Pursuant to Articles 13 and 14 of Regulation (EU) 2016/679 (the “Regulation”), Maelha VOF hereby provides its customers, including potential customers, as well as third parties in general (e.g. delegates, legal representatives, etc.) who come into contact with it on behalf of or on behalf of customers, including potential customers (the “Interested Parties”), the information required by the legislation relating to the processing of their personal data (“Personal Data”).


1. Data Controller and Data Protection Officer


Maelha VOF NL861254326B01 Schieweg 182 C 02, 3038BK Rotterdam - The Netherlands , in the person of its legal representative pro tempore, is the entity that processes the data of the Interested Parties and, for the purposes of the Law, is considered the Data Controller of the Personal Data. In this capacity, it is responsible for ensuring the application of appropriate organizational and technical measures for data protection in compliance with the provisions of current legislation.


Maelha VOF has appointed a Data Protection Officer (DPO), responsible for ensuring compliance with the rules for the protection of Privacy, who can be contacted for questions relating to the processing of Personal Data at the following address: info@maelha.com



2. Methods of collecting Personal Data


The Personal Data subject to processing activities by the Data Controller may be acquired from the Data Subject, including through remote communication techniques used by the Data Controller (e.g. websites, smartphone and tablet apps, call centers, etc.);


3. Categories of Personal Data processed


The Personal Data processed by the Data Controller includes, by way of example:


i. navigation data (e.g. IP addresses or domain names of computers used by users connecting to the site, the time of the request, the method used to submit the request to the server, the numeric code indicating the status of the response given by the server and other parameters relating to the operating system and browser used by the user, logs);

ii. personal data (e.g. name, surname, tax code, address, date and place of birth, nationality);

iii. contact details (e.g. landline and/or mobile telephone numbers, email address);

iv. profiling and marketing data (e.g. interests and passions);

v. other data attributable to the categories indicated above.


4. Purpose and legal basis of the processing


Personal Data, when the specified conditions apply, will be processed for the purposes indicated below:


  • - registration on the website and management of requests for contact and/or information material


The processing of the interested party's personal data takes place in order to carry out preliminary and consequent activities to the request for registration on the website, if foreseen, as well as for the management of requests for information and contact and/or sending of informative material, as well as for the fulfillment of any other obligation arising.


The legal basis for such processing is the fulfillment of the services relating to the request for registration, information and contact and/or sending of information material and compliance with legal obligations.


The provision of data is optional, however any refusal by the interested party to provide the data will make it impossible for the Data Controller to follow up on the requested service.


  • - Execution of the contract


The Personal Data will be processed for the management of the contractual relationship (for example, for the invoicing of the fees, for the management of payments or complaints that you may send us) and for the provision of the requested services available through the website.


The legal basis for such processing is the fulfillment of the services inherent to the contractual relationship and compliance with legal obligations.


The provision of data is optional, however any refusal by the interested party to provide the data will make it impossible for the Data Controller to follow up on the requested service.


  • - Fulfilment of legal obligations, defence of a right in or out of court and prevention of fraud


Personal Data will be processed to fulfill legal obligations, as well as to ascertain, exercise or defend a right of the Data Controller and/or defend against claims of others, in or out of court. In particular, the Data Controller may process Personal Data to fulfill accounting and tax obligations and to fulfill provisions of the Judicial Authority aimed at preventing and repressing crimes.


The legal basis for such processing is the pursuit of the legitimate interest of the Data Controller, taking into account the balancing of the rights of the latter and of the Interested Party.


  • - Promotional activities on Services/Products similar to those purchased


The processing of the interested party's personal data takes place for the sending of communications relating to promotions and offers of Services/Products of the Owner identical and/or similar to those covered by the contract in progress with the interested party, unless the latter has opposed such processing initially or on the occasion of subsequent communications.


The legal basis for such processing is the legitimate interest of the Data Controller to promote products or services in which the customer may reasonably be interested, taking into account the balancing of the rights of the latter and of the Data Controller.


The interested party has the right to object at any time, for reasons related to his personal situation, to the processing of personal data concerning him for the purpose in question.


  • - Promotional activities on Services/Products offered by Maelha VOF


The processing of the interested party's personal data takes place for the sending, with specific consent, of communications of promotions and offers of the Owner's Services/Products through traditional methods (e.g. ordinary mail, telephone calls with an operator) and/or automated methods (e.g. e-mail, SMS, MMS, fax, pre-recorded telephone calls).


The legal basis for such processing is the consent given by the interested party prior to the processing itself, which can be freely revoked at any time, without prejudice to the lawfulness of the processing previously carried out.


Any refusal by the interested party to give consent will make it impossible to use the related services, without this having detrimental consequences for the contractual relationship with the owner.


  • - Marketing purposes relating to products or services of Maelha VOF partners


The processing of the interested party's personal data takes place for the sending, with specific consent, of communications of promotions and offers of Services/Products of commercial partners of Maelha VOF through traditional methods (e.g. regular mail, telephone calls with an operator) and/or automated methods (e.g. e-mail, SMS, MMS, pre-recorded telephone calls).


The legal basis for such processing is the consent given by the interested party prior to the processing itself, which can be freely revoked at any time, without prejudice to the lawfulness of the processing previously carried out.


Any refusal by the interested party to give consent will make it impossible to use the related services, without this having detrimental consequences for the contractual relationship with the owner.


  • - Profiling


The processing of Personal Data, including location data, socio-demographic data acquired during the provision of electronic communication services and from public sources, of the Interested Party occurs, subject to specific consent, for profiling purposes such as analysis of the data transmitted and of the Services/Products purchased in order to propose advertising messages and/or commercial proposals in line with the choices expressed by the users themselves. This activity will be carried out in aggregate and anonymized form through the implementation of models for the analysis of customer data using statistical algorithms, predictive models and aggregations only for the time strictly necessary for the purposes pursued, the type of goods marketed or services rendered.


In any case, Personal Data will not be subject to decisions based solely on automated processing, including profiling, which produce legal effects or similarly significantly affect the interested party.


The legal basis for such processing is the consent given by the interested party prior to the processing itself, which can be freely revoked at any time, without prejudice to the lawfulness of the processing previously carried out.


Any refusal by the interested party to give consent will make it impossible to use the related services, without this having detrimental consequences for the contractual relationship with the owner.


5. Recipients of personal data


The personal data collected may be communicated to subjects who will act, depending on the case, as independent Data Controllers or Data Processors, for the purposes indicated above, in compliance with legal, regulatory and/or EU legislation obligations or because they are holders of a legitimate interest.


In particular, Personal Data may be made available to:


– persons in charge of carrying out activities connected and instrumental to the processing (archiving service companies, IT service companies, social media management service companies, marketing companies, insurance companies, banking institutions);


– Maelha VOF business partners ;


– Public administrations, authorities and other entities in compliance with legal obligations;


The Personal Data will not be disclosed (made available to unspecified subjects).


6. Transfer of data to third countries


The Personal Data of the Interested Party are stored in archives located in countries of the European Union. Where necessary for the pursuit of the declared purposes, the Data of the Interested Party may be transferred abroad, to countries/organizations outside the European Union that guarantee a level of protection of personal data deemed adequate by the European Commission with its own decision, or in any case on the basis of other appropriate guarantees, such as the Standard Contractual Clauses adopted by the European Commission or the consent of the Interested Party. The Interested Party has the right to obtain a copy of the Data possibly transferred abroad, as well as the list of Countries/organizations to which the data has been transferred by writing to info@maelha.com



7. Period of retention of personal data


The Data will be stored in a form that allows the identification of the Interested Party for a period of time not exceeding that necessary to achieve the purposes for which they were collected, taking into account the laws applicable to the activities and sectors in which the Data Controller operates. After the terms thus established, the Data will be deleted or transformed into anonymous form, unless their further storage is necessary to fulfill obligations (e.g. tax and accounting) that remain even after the termination of the contract (art. 2220 cc) or to fulfill orders given by Public Authorities and/or Supervisory Bodies.


The duration of the cookies used on the site can be consulted in the specific Cookie Policy below.


In the event of a dispute, the retention period indicated above may be extended up to 10 years from the resolution of the dispute.


8. Methods of processing


The processing will be carried out by authorised personnel who need to have knowledge of it in carrying out their activities, with the aid of electronic tools, according to principles of lawfulness and correctness, in order to protect at all times the confidentiality and rights of the interested party in compliance with the provisions of current legislation.


Marketing-related profiling (analysis of consumer habits and choices) occurs through an automated process with the aim of studying and analyzing behavioral profiles and aspects characterizing the customer base to optimize promotional activities for products and services.


9. Rights of the interested party


The interested party has the right to ask the Data Controller:


i. confirmation as to whether or not your Personal Data is being processed and, where that is the case, to obtain access to it (right of access);

ii. the rectification of inaccurate Personal Data or the integration of incomplete Personal Data (right of rectification);

iii. the deletion of the Personal Data if one of the reasons provided for by the Privacy Regulation exists (right to be forgotten);

iv. the limitation of the processing of Personal Data when one of the hypotheses provided for by the Privacy Regulation occurs (right to limitation);

v. to receive the Personal Data provided to the Data Controller in a structured, commonly used and machine-readable format and to transmit such data to another Data Controller (right to portability);

vi. to object at any time, in whole or in part, to the processing carried out for the pursuit of a legitimate interest of the Data Controller and for marketing and profiling purposes (right to object);

vii. to revoke any consent to the processing of Personal Data, at any time, without prejudice to the lawfulness of the processing based on the consent given before the revocation.


The consent given for the performance of marketing activities with automated contact methods (for example sms, mms, fax, phone calls, e-mail, web applications) also extends to traditional contact methods (paper mail or telephone call with operator). Similarly, the opposition to the performance of marketing activities with automated contact methods also extends to traditional contact methods. Your right to provide consent or to exercise the right of opposition in relation to only one of the two methods of carrying out marketing activities remains intact.


To exercise his/her rights, the interested party may send a message to the email address info@maelha.com or a written communication to the Owner at the registered office of Maelha VOF


The interested party also has the right to lodge a complaint with the competent supervisory authority in Italy (the Personal Data Protection Authority) or with the authority that carries out its duties and exercises its powers in the member state where the violation occurred, as provided for by art. 77 of the Regulation, as well as to take appropriate legal action pursuant to art. 78 and 79 of the Regulation.



10. Cookie

The information regarding the use of cookies can be found at the following link .