INFORMATION ACT PURSUANT TO ART. 13 OF EU REGULATION N. 2016/679

MJ Baltica di Baran Malgorzata (VAT number: 02220860460) (infra “MJ Baltica”), in the person of its legal representative pro tempore, with registered office in Ponsacco (Pi), Via Bagnaia, 18, as Data Controller ex articles 4 no. 7) and 24 of EU Regulation no. 2016/679 (GDPR), informs you, pursuant to art. 13 of the GDPR, that your personal data described in the following art. 1 will be processed for the purposes illustrated in the following art. 2.

1. Category of personal data being processed.

1.1. The Data Controller will process your personal data pursuant to art. 4 no. 1) of the GDPR (e.g. name; surname; email address (ordinary and/or certified); so-called financial/banking data).

2. Purpose and legal basis of the processing.

2.1. In compliance with the art. 6 paragraph 1 letters b) and c) and Recital no. 44 and 45) of the GDPR (as well as in compliance with Guidelines no. 2/2019 of the EDPB), your personal data will be processed by FAYYIA for the execution of the following purposes:

1. Execution of your registration request on the website www.fayyia.com (hereinafter “Site”);
2. Execution of a purchase order and consequent conclusion of the related sales contract (including what is necessary and expected in the context of a usual contractual relationship: e.g. corrections of delays, errors or defects in the execution of a contract; return of a good or a payment received) between you and MJ Baltica concerning one or more goods offered for sale, by MJ Baltica, within the Site;
3. Execution of a pre-contractual measure formulated by you on the Site (e.g. contact; request for information);
4. Fulfillment of one or more regulatory obligations connected, directly or indirectly, to the pre-contractual or contractual relationship between you and MJ Baltica (e.g. fraud prevention; accounting, tax or administrative charges).

In this regard, MJ Baltica specifies that, in compliance with the art. 2 quinques of the new Legislative Decree no. 196/2003 (Privacy Code), registration on the Site is permitted only to persons over the age of 14 or, failing that, to the holder of parental responsibility for the relevant minor. Furthermore, MJ Baltica specifies that, in compliance with the art. 13 paragraph 2 letter e) of the GDPR, any failure to communicate your personal data for the execution of the processing purposes referred to in the art. 2.1. determines the impossibility of a correct and complete execution of any pre-contractual or contractual relationship between you and MJ Baltica, including the consequent obligations referred to in the art. 2.1. upstairs.

2.2. In compliance with the art. 6 paragraph 1 letter f) and Recital no. 47) of the GDPR and in compliance with the art. 130 paragraph 4 of the Privacy Code, your personal data will be processed by MJ Baltica for the execution of the following purposes:

1. Direct marketing activities (soft spam), to be carried out via email.

2.3. In compliance with the art. 6 paragraph 1 letter a) of the GDPR, your personal data will be processed by MJ Baltica for the execution of the following purposes:

1. Marketing activities (to be understood as commercial, advertising and promotional communication or market research), to be carried out using the so-called method. automated (e.g. email) and/or cd. traditional (e.g. post);
2. Profiling pursuant to art. 4 no. 4) of the GDPR concerning the analysis of personal preferences and interests, to be carried out on the basis of the products purchased and/or selected on the Site.

In compliance with the art. 13 paragraph 2 letter c) of the GDPR, MJ Baltica informs you of your right to revoke, at any time, any consent given for one or more of the processing purposes indicated in the art. 2.3., without this event however being able to prejudice the lawfulness of the processing based on the consent provided before the revocation.

3. Recipients.

3.1. In compliance with the art. 13 paragraph 1 letter e) of the GDPR, MJ Baltica specifies that your personal data may be communicated to one or more recipients pursuant to art. 4 no. 9) of the GDPR (which generally belong to the following categories: subsidiaries, parent companies or in any case connected to MJ Baltica; IT companies, including those that provide hosting, mail service or IT storage services; professional consultants of various nature (e.g. fiscal, legal); transport and/or shipping companies; analysis companies; marketing and/or communication companies), in order to correctly execute the processing purposes described in the articles. 2.1., 2.2. and 2.3.

3.2. MJ Baltica also specifies that your personal data will not be disclosed in any way.

4. Retention period.

4.1. In compliance with the art. 13 paragraph 2 letter a) of the GDPR, MJ Baltica communicates that: i) the retention period of your personal data, processed for the execution of the purpose referred to in the art. 2.1. letter a), will last until you decide to irreversibly delete the account created on the Site or until MJ Baltica decides to delete your account where a violation of the documents illustrated on the Site occurs (term which may possibly be extended to order to comply with regulatory and/or judicial obligations); ii) the retention period of your personal data, processed for the execution of the purposes referred to in the art. 2.1. letters from b) to d), will coincide with a term not exceeding the pursuit of the underlying purposes (identifiable, approximately, up to the end of 10 years, starting from the definitive termination of the contractual relationship between you and MJ Baltica or starting from last request for a pre-contractual measure formulated by you to MJ Baltica), possibly extendable in order to comply with regulatory and/or judicial obligations; iii) the retention period of your personal data, processed for the execution of the purpose referred to in the art. 2.2., will last until you decide to communicate the relevant opposition pursuant to art. 21 of the GDPR; iv) the retention period of your personal data, processed for the execution of the purposes referred to in the art. 2.3. letters a) and b), will last until you decide to communicate the revocation pursuant to art. 17 of the GDPR to one or more consents previously given.

5. Transfer.

5.1. MJ Baltica specifies that your personal data will be stored in archives (electronic and/or paper) located at one or more offices of the Data Controller (or companies directly or indirectly connected to them), but in any case within the EU.

6.Rights of the interested party.

6.1. In relation to your personal data, MJ Baltica informs that, in compliance with Guidelines n. 260/2018 of the WP Art. 29 (now EDPB), you have the right to exercise the following rights: right of access pursuant to art. 15 of the GDPR: right to obtain confirmation as to whether or not personal data concerning the relevant interested party is being processed, as well as the information referred to in art. 15 of the GDPR (e.g. processing purposes, retention period); right of rectification pursuant to art. 16 of the GDPR: right to correct, update or integrate personal data; right to cancellation pursuant to art. 17 of the GDPR: right to obtain the cancellation or destruction or anonymization of personal data, where however the conditions listed in the same article apply; right to limit processing pursuant to art. 18 of the GDPR: right with a markedly precautionary connotation, aimed at obtaining the limitation of processing where the hypotheses governed by the same art. 18; right to data portability pursuant to art. 20 of the GDPR: right to obtain personal data, provided to the Data Controller, in a structured format, commonly used and readable by an automatic system (and, where requested, to transmit them, directly, to another Data Controller), where the specific conditions indicated by the same article exist (e.g. legal basis of consent and/or execution of a contract; personal data provided by the interested party); right of opposition pursuant to art. 21 of the GDPR: right to obtain the permanent cessation of a certain processing of personal data; right to lodge a complaint with the Supervisory Authority (i.e. the Italian Privacy Guarantor) pursuant to art. 77 of the GDPR: right to lodge a complaint where it is believed that the processing under analysis violates national and community legislation on the protection of personal data.

6.2. In compliance with the art. 12 paragraph 1 of the GDPR, MJ Baltica undertakes to provide the communications referred to in the articles. from 15 to 22 and 34 of the GDPR in a concise, transparent, intelligible, easily accessible form and with simple and clear language: such information will be provided in writing or by other possibly electronic means or, at the request of the interested party, it will be provided orally provided the identity of the interested party is proven by other means.

6.3. In compliance with the art. 12 paragraph 3 of the GDPR, the Data Controller informs that it undertakes to provide information relating to the action taken regarding a request pursuant to the articles. from 15 to 22 of the GDPR without unjustified delay and, in any case, at the latest within one month of receiving the request; this deadline can be extended by no. 2 months if necessary, taking into account the complexity and number of requests (in this case, the Data Controller undertakes to inform the interested party of this extension and the reasons for the delay, within one month of receiving the request).

6.4. You may exercise, at any time, the rights described above (with the exception of the right pursuant to art. 77 of the GDPR) by using the contact details illustrated in the following art. 7.

7. Contact details.

7.1. MJ Baltica can be contacted at the following address: mj.baltica@interia.eu

7.2. The Data Protection Officer (DPO) pursuant to art. 37 of the GDPR, appointed by MJ Baltica, can be contacted at the following address: mj.baltica@interia.eu

Rome (RM), 30.03.2022 (date of last update)

MJ Baltica

(in the person of its legal representative pro tempore)