Privacy Policy

User Generated Content (“UGC”)


The natural person and/or legal person who has directly or indirectly (including by sending specific hashtags) authorised the communication and/or publication or dissemination of their own contribution, of any form or nature and on any medium (including, by way of example and not limited to: images, photographs, videos, sounds, music, texts, writings and works of any nature) by Mariza Tassy di Antonella Rigante (the “Licensor”), grants to the same in a perpetual, irrevocable, non-exclusive manner, free of charge and exempt from any royalty, any and all economic exploitation rights, including copyright and related rights relating to such contributions (hereinafter “Authorised Contributions”), with the right to sub-license. To this end, the Licensor expressly recognizes Mariza Tassy di Antonella Rigante's unquestionable right to use the Authorized Contributions, to decide when to use them or to remove them, Mariza Tassy di Antonella Rigante and its assignees being the only subjects authorized and competent for this purpose, without time limits. Such rights are granted for the entire world and for any use and economic exploitation. All Authorized Contributions will be considered non-confidential. To this end, Mariza Tassy di Antonella Rigante will have the right to: use, copy, distribute, reproduce, transfer, exploit, modify, process, transform, store in a database, make cuts, changes and/or additions, insert or replace comments and/or disclose such contributions to third parties for any purpose and according to the methods and advertising and/or commercial choices that Mariza Tassy di Antonella Rigante and/or its assignees deem most appropriate (such as, by way of example and not limited to, through the reproduction and publication of the contributions through the social channels Facebook, Instagram, brochures, magazines, albums, collections, products, etc., also in the context of commercial initiatives). To this end, the Grantor also authorizes Mariza Tassy di Antonella Rigante and its assignees to combine/link, directly or indirectly, the Authorized Contributions to commercial and promotional initiatives, the image and distinctive signs of Mariza Tassy di Antonella Rigante and/or its assignees (without prejudice to the moral rights of the Grantor).
The Licensor guarantees that he/she has the rights and legal capacity to adhere to the General Conditions of Use in his/her jurisdiction and that the contribution is an original and exclusive work and that it:
it has not been derived from any third party work without their consent;
does not violate or may violate in any way the copyrights, trademarks or other intellectual or industrial property rights of third parties;
does not violate or may violate in any way the rights, patrimonial or personal, of third parties, having among other things, from any third parties (or from those exercising their authority) involved in any capacity in the contribution received, all necessary authorization and/or specific consent to the foregoing;
does not violate any provision of law, including, by way of example, the provisions of Law no. 633/1941 and subsequent amendments and additions, of Legislative Decree 30/2005 - Industrial Property Code and subsequent amendments and additions, of Legislative Decree 196/2003 - Privacy Code - as subsequently amended and of EU Regulation 679/2016;
is not obscene, racist, discriminatory, or otherwise contrary to public order or public morality;
undertaking to indemnify Mariza Tassy di Antonella Rigante and its assigns in any case in which one or more of said declarations and guarantees should in fact prove to be false or inaccurate.

Mariza Tassy di Antonella Rigante and her assigns will also have the right to communicate the identity of the Licensor to any third parties who claim that the Authorized Contributions constitute a violation of their intellectual property rights and/or of their privacy.

Mariza Tassy di Antonella Rigante and/or its assignees, will not be held liable in relation to the violation of the rights of the Grantor and/or third parties directly or indirectly deriving from the use, in any form and manner, of the Authorized Contributions, in any case, by way of contractual or extra-contractual liability (including, by way of example, for negligent conduct or violation of the law) with regard to: i) pecuniary damages (including, by way of example, any consequential damages, loss of revenues, current or expected profits, contracts, business, opportunities or expected savings); ii) loss of reputation; iii) consequential or indirect damages suffered by the Grantor or by third parties.
The Licensor agrees to be responsible towards Mariza Tassy di Antonella Rigante and/or its assignees, to indemnify and hold them harmless from all costs, direct and indirect damages, expenses, losses, including any legal and procedural costs and in relation to any claim and/or request and/or action that may be advanced in any venue by third parties, including public authorities, administrative and state bodies, due to any dispute arising from or in any way related to the use of the contribution by Mariza Tassy di Antonella Rigante and/or its assignees and to the declarations and guarantees provided by the Licensor with the General Conditions of Use.


Privacy Policy



Pursuant to and for the purposes of Article 13 of Regulation (EU) 2016/679, containing provisions for the protection of natural persons with regard to the processing of personal data and the free circulation of such data, (hereinafter also simply the “GDPR”), we inform you that the processing of personal data of users and/or visitors (hereinafter also simply the “User” or cumulatively also the “Users”) who consult and/or visit and/or register on the website “www.marizatassy.it” (hereinafter also simply the “Site”) and/or use the related services - regardless of the purchase of products - occurs in compliance with the legislation for the protection of personal data and confidentiality which our activity is duly inspired by, for the purposes and methods better described in this Privacy Policy.



We also inform you that this Privacy Policy concerns only the Site and not other websites that may be consulted by the User via other links also present on this Site.



This Privacy Policy is easily accessible as it is accessible from the home page of the Site and via links from any other page of the same, where personal data is collected. For the use of specific services provided at the request of the User, specific information will be provided and specific consents to the processing of personal data will be requested, where necessary.



Data controller
The data controller of the personal data collected through the Site is Mariza Tassy di Antonella Rigante with headquarters in Milan, Via Molino delle Armi 45 – 20123; e-mail: contact@Mariza .com (hereinafter also referred to as “Mariza” and/or the “Data Controller”).



Category of personal data processed
2.1 Data provided directly by the User

Mariza will process the following personal data provided directly by the User:

name, surname, address, telephone numbers, e-mail addresses, password for registration on the Site and the creation of a personal account;
name, surname, address, telephone numbers, address, tax code, VAT number, credit card, bank details and date of birth to allow the conclusion of an order relating to a Mariza brand product (hereinafter also referred to as “Mariza Products”);
email address and any other personal data included in the communication for the optional, explicit and voluntary sending of emails to the addresses indicated on the Site to respond to requests received.
2.2 Data collected by Mariza Tassy by Antonella Rigante

(i) The computer systems and software procedures used to operate the Site acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols.

This information is not collected to be associated with identified interested parties, but by its very nature could, through processing and association with data held by third parties, allow Users to be identified. This category of data includes IP addresses or domain names of computers used by Users who connect to the Site, URI (Uniform Resource Identifier) ​​addresses of requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numeric code indicating the status of the response given by the server (successful, error, etc.) and other parameters relating to the operating system and the User's IT environment.

(ii) Mariza Product sales data: purchase method, type, quantity and price of Mariza products purchased.

2.3 Personal data of third parties

If Mariza were to process personal data of third parties communicated directly by one of its Users (for example, in the case in which the User has purchased a product to be delivered to a different person or when the person paying the price for the purchase of the product is different from the person to whom the product is intended, or when the User intends to report a service of the Site to a friend), the User acknowledges that in this case he/she is the data controller of the personal data of the aforementioned third parties. Therefore, by providing such personal data of third parties to Mariza, he/she guarantees that: i) the personal data that should be communicated by the User to Mariza have been processed by the User in accordance with the provisions in force regarding privacy and ii) the aforementioned third parties have been previously and duly informed by the User in relation to the methods and purposes of the processing itself and have authorised him/her in this sense.

The User will remain the sole and exclusive person responsible for the communication of information and data relating to third parties without their express consent or for their possible incorrect or unlawful use.



Purpose of processing and legal basis
The User's personal data are collected and processed by Mariza for purposes strictly connected to the use of the Site and its services.

3.1. Registration on the Site and creation of a personal account

The personal data referred to in paragraph 2.1.1. will be processed by Mariza for registration on the Site and the creation and management of the User's personal account.

The legal basis for the processing of personal data for the purposes referred to in paragraph 3.1. above is the contractual relationship to which the User is a party.





3.2. Establishment, execution and management of the commercial relationship

The personal data referred to in paragraphs 2.1, 2.2 and 2.3 above will be processed for:

fulfillment of legal obligations that weigh on Mariza under civil, fiscal and accounting regulations as well as for the possible ascertainment of responsibility in the event of hypothetical computer crimes;
the establishment, execution and management of the commercial relationship and/or for the provision of services connected to the commercial relationship itself. And in particular, for the following purposes: administrative and accounting: issuing invoices and credit notes; management of customer records; processing and shipping of purchase orders; IT assistance on the use of the Site; after-sales assistance: management of returns and any complaints; contact with customer service.


The legal basis for the processing of personal data for the purposes referred to in paragraph 3.2 above is the commercial relationship to which the User is a party.



3.3 Mariza's Marketing Activities

The User's personal data referred to in paragraphs 2.1 and 2.2 above will be processed for promotional activities - via automated tools (email) by Mariza - such as the sole sending of newsletters and/or commercial and/or promotional communications of information and updates in relation to Mariza services and Products.



The legal basis for the processing of personal data for the purposes referred to in paragraph 3.3 above is the prior specific consent of the User.



3.4 Mariza's profiling activities

The User's personal data referred to in paragraphs 2.1 and 2.2 above will be processed for profiling purposes that are not fully automated. In this case, the Data Controller will limit itself to examining, in particular, the sales data of Mariza Products, i.e. purchase method, type, quantity and price of Mariza Products purchased and/or viewed by the User for:

process and/or create profiles based on the User's preferences and purchases;
personalize the User's experience with Mariza with the User's interests and purchasing habits.
It is therefore believed that profiling will not be entirely automated and will not produce legal effects that concern the User or that significantly affect the User in a similar way.



The legal basis for the processing of personal data for the purposes referred to in paragraph 3.4 above is the prior specific consent of the User.



Any processing purpose other than the specific one for which the personal data were provided will be pursued by Mariza only after specific information and acquisition, if necessary, of the express consent of the User.



Mandatory or optional nature of providing the User's personal data – consequences of any refusal
The provision to Mariza of the User's personal data requested through the Site on various collection occasions may be necessary for the pursuit of the purposes identified in this Privacy Policy, or optional.

Any refusal to communicate personal data marked as necessary makes it impossible to pursue the purpose of the specific collection.

In particular:

- the provision of personal data by the User for the purposes referred to in paragraphs 3.1 and 3.2 is optional but necessary; however, failure to provide such data will make it impossible to register on the Site and create a personal account and/or to establish and/or continue the commercial relationship and/or to provide the services connected to the aforementioned relationship;

- the provision of the User's personal data for the purposes referred to in paragraphs 3.3 and 3.4 is optional and failure to provide such data will have no consequences on the possibility of registering on the Site and/or purchasing products and/or receiving requested services, but it will not be possible to send the User newsletters or commercial communications or evaluate the User's interests and preferences.

It is also specified that where the User has given consent to authorize the Data Controller to pursue the purposes referred to in paragraphs 3.3 and 3.4 above, he/she will remain free at any time to revoke consent and/or oppose the processing of data for the aforementioned purposes, by sending, without any formality, a clear written communication to this effect to the contact details better specified in paragraph 10 "Contacts for the exercise of the rights of the interested party and for further information" below.



How we process personal data
The processing of the User's personal data will be carried out in a lawful, correct and transparent manner, for specific, explicit and legitimate purposes and in compliance with the laws, regulations and provisions on data privacy.

The User's personal data are processed mainly in electronic format and in some cases also in paper format.

The personal data provided by the User will not be subjected to fully automated decision-making processes.



Recipients of personal data
The recipients of the Users' personal data and therefore the subjects who become aware of the Users' personal data are:

(i) persons in charge of processing by Mariza who have been provided with specific written instructions;

(ii) subjects who provide services for Mariza and who are appointed in writing as data controllers by the latter:

company that provides the platform on which the Site for the management of the e-commerce of Mariza Products will be developed: Shopify International Limited;
company that provides the hosting and maintenance service of the server that hosts the personal data of the Users of the Site: Shopify International Limited;
entities providing shipping services: Sendabox.
(iii) entities who, as independent owners, manage the online payment service:

Shopify International Limited

PayPal Holdings, Inc


For a complete and updated list of the subjects to whom the data is communicated, the User can write to the addresses better indicated in art. 10 below "Contacts for the exercise of the rights of the interested party and for further information".



Personal data retention periods
7.1 For the purposes set out in paragraph 3.1 (Registration on the Site and creation of a personal account), personal data will be retained by Mariza until the User closes the account. In any case, it is understood that in the event of inoperability of the account for 2 (two) days after the last interaction (for example, last access) with the account by the User, Mariza will delete the personal data relating to registration and management of the account.

7.2 For the purposes referred to in paragraph 3.2 (Establishment, execution and management of the commercial relationship), personal data will be retained for the entire duration of the commercial relationship and for a period of 10 years following the termination of the commercial relationship, except in cases where further retention is justified by disputes and/or requests from the competent authorities;

7.3 For the purposes referred to in paragraph 3.3 (Marketing activities of Mariza), personal data will be stored for 2 years from the collection of consent or in any case until the User revokes consent.



7.4 For the purposes referred to in paragraph 3.4 (Profiling activities of Mariza), personal data will be stored for 1 year from the collection of consent or in any case until the User revokes consent.



Transfer and communication of personal data to third parties
The User's personal data is not transferred to countries outside the EU.



Exercise of rights by the interested party
Pursuant to Articles 13, paragraph 2, letters b), c) and d) and 15-22 of the GDPR, Users may exercise the following rights:

the right to request access to your personal data together with information on the purpose of the processing, the category of personal data processed, the subjects or categories of subjects to whom they have been or will be communicated (with an indication of whether such subjects are located in third countries or are international organizations), where possible, the period for which the personal data will be stored or the criteria used to determine that period, the existence of your rights to rectification and/or erasure of personal data, to restriction of processing and to object to processing, your right to lodge a complaint with a supervisory authority, the origin of the data, the existence and logic applied in the case of automated decision-making. If you exercise this right and unless otherwise indicated by the User, the latter will receive an electronic copy of your personal data that are being processed;
the right to obtain:
the rectification of your personal data, if they are inaccurate or incomplete;
the deletion of your personal data, if one of the conditions set out in art. 17 of the GDPR exists (for example: the User's personal data are no longer necessary for the purposes for which they were collected, the User decides to withdraw consent to the processing - where this represents the legal basis - and there is no other legal basis for the processing itself, the User objects to the processing and no other legitimate interest of the Data Controller prevails, the personal data are processed unlawfully);
the limitation of the processing of personal data concerning the User 1) for the time necessary for Mariza to ascertain the accuracy of the User's personal data (in the event that the User has contested it), or 2) if the processing of personal data is unlawful and the User requests, instead of the deletion of his/her personal data, the limitation of the related processing, or 3) when Mariza no longer needs the User's personal data but they are necessary for the User to ascertain, exercise or defend a right in court, or, finally, 4) for the time necessary to evaluate the possible prevalence of the legitimate reasons of the Owner with respect to those of the User, if the User has opposed the processing of his/her personal data pursuant to point c below;
the User's personal data in a structured, commonly used and machine-readable format, also for the purpose of transmitting them to another owner, if the processing is based on consent or on a contract and is carried out by automated means (so-called right to data portability). If the User is interested, the User may ask Mariza to transmit his/her personal data directly to the other owner, if this is technically feasible;
the right to object to the processing of your personal data, if such processing is carried out pursuant to art. 6.1 letter e) (i.e. for the performance of a task of public interest to which the Data Controller is subject) or letter f) (i.e. to pursue a legitimate interest of the Data Controller) of the GDPR, unless there are compelling legitimate grounds for the Data Controller to proceed with the processing, pursuant to art. 21 of the GDPR;
the right to withdraw consent at any time where given without prejudice to the lawfulness of the processing of the User's personal data based on consent and carried out before the withdrawal;
where carried out, the User also has the right not to be subjected to a decision based solely on automated processing, including profiling, which produces legal effects concerning him or her or similarly significantly affects his or her person, also having the right to obtain human intervention on the part of the owner, to express his or her opinion and to contest the decision;
If you are not satisfied with the processing of your personal data carried out by Mariza, you may lodge a complaint with the Data Protection Authority, following the procedures and indications published on the official website of this authority (www.garanteprivacy.it);
any corrections or deletions of the User's personal data or limitations of the processing carried out at the User's request - unless this proves impossible or involves a disproportionate effort - will be communicated by Mariza to each of the recipients to whom the User's personal data may have been transmitted in accordance with this Privacy Policy.
The exercise of the above rights is not subject to any formal constraint and is free of charge. Mariza may only ask the User to verify his/her identity before taking further action following the User's request.



Contacts for exercising User rights and for further information
To exercise the rights and/or to obtain any type of information regarding the management of the commercial relationship established through the Site, the User can send a written communication to: Mariza Tassy di Antonella Rigante, Via Molino delle Armi – 20123, Milan or an email to: marizatassyecommerce@gmail.com



Cookie
To allow safe and efficient exploration of the Site, the Owner uses the so-called cookies. For more information on cookies and their use on the Site, see the Cookie Policy page which is an integral part of this information.



Social sharing buttons
The Site may also contain Social sharing buttons. In particular, these are “buttons” that depict the icons of social networks, such as Instagram, and that allow Users - by "clicking" on the icon - to reach and interact with the relevant social networks. With the support of these tools, the User can, for example, share content or recommend products from the Site on social networks.

Following clicks on the Social sharing buttons, the social network may collect data relating to the User's visit to the Site. As anticipated in the introduction, this privacy policy does not concern the processing of the User's personal data by the social network for which the User must refer exclusively to the privacy policy provided by the social network.

Except in cases where the User spontaneously shares his/her browsing data with the chosen social networks by clicking on social buttons/widgets, the Data Controller does not share or disseminate any personal data of the User with the social network.


Security measures
Pursuant to art. 32 of the GDPR, Mariza and the subjects appointed as data controllers adopt adequate security measures in order to minimize the risks of destruction or loss - even accidental - of personal data, unauthorized access or processing not permitted or not compliant with the collection purposes indicated in our Privacy Policy.

However, Mariza cannot guarantee its Users that the measures adopted for the security of the Site and the transmission of personal data and information on the Site limit or exclude any risk of unauthorized access or dispersion of personal data by devices belonging to the User.

It is always advisable that the User's computer is equipped with adequate software for the protection of the transmission of personal data over the network, both incoming and outgoing, and that his/her Internet service provider has adopted suitable measures for the security of the transmission of personal data over the network.


Links to other websites
The Site contains links or references to other websites that may have no connection with the Mariza brand.

The Owner does not control or monitor such websites and their contents. The Owner cannot be held responsible for the contents of these sites and the rules adopted by them, including with regard to privacy and the processing of the User's personal data during navigation.

This Privacy Policy does not apply to third-party websites. The Site provides links to these sites solely to facilitate the User in his/her research and navigation and to facilitate hypertext links on the Internet to other sites. The activation of the links does not imply any recommendation or notification for accessing and navigating these sites, nor any guarantee regarding their contents, services or goods provided and sold by them to Internet users.


Use of the Site by Minors
The Site is intended for use and consultation only by adults. Therefore, any requests from minors will not be taken into consideration.


Applicable law
This Privacy Policy is governed by Italian law and in particular by the legislation on data privacy, including the GDPR, the Privacy Code, the provisions, authorizations and guidelines adopted by the Privacy Guarantor that regulate the processing of personal data, where applicable.


Changes and updates to the Privacy Policy
The Owner may modify or simply update, in whole or in part, the Privacy Policy of the Site, also in consideration of the modification of the laws or regulations that govern the matter. The modifications and updates of the Privacy Policy will be notified to the Users on the Home Page as soon as they are adopted and will be binding as soon as they are published on the Site and will be contained and consultable on the Site itself. It is therefore advisable to regularly access this section to verify the publication of the most recent and updated Privacy Policy.