Privacy policy
muayfarang.com – Privacy Policy
Who we are and what we do with your personal data
Last update: 06/29/2023
We provide you with this information on the processing of personal data pursuant to Regulation (EU) 2016/679 (hereinafter for brevity “GDPR”) to summarize what we do with your personal data when you use our services and/or access our content and how you can, at any time, exercise the rights that the law recognizes (hereinafter, you will also be referred to as “interested party”).
We are committed to processing your personal data in accordance with the GDPR, Legislative Decree 196/2003 and subsequent amendments (hereinafter for brevity “Privacy Code”), the relevant provisions and guidelines of the national and European data protection authorities and judicial authorities, as well as the applicable national and European legislation.
We have done our best to provide you with all the information you need, requiring you to read it as little as possible and allowing you to delve deeper, where you deem it useful, into some aspects through a series of notes. We invite you to carefully read this information regarding the processing of your personal data carried out by muayfarang.com through its sites and/or applications (hereinafter for brevity, cumulatively, the “Sites”) and to write to us for any clarification or even to suggest how to improve this document to make it clearer, more transparent and more accessible.
Specific information is also present in the individual sections dedicated to particular initiatives and/or services: please refer to the specific indications reported therein, in order to identify the characteristics of the processing carried out. These information notices are to be understood as completed – where expressly referred to – by this information notice regarding the processing of personal data of users of the Sites. In the event of a conflict, the information provided within the information notices dedicated to specific initiatives and/or particular initiatives shall prevail.
Finally, we remind you that any processing of personal data carried out by the owners of other websites, even if reachable through links / plug-ins present on the Sites, will be subject to the information on the processing of such third parties.
1. Who processes your personal data and how you can contact us
The data controller of personal data is DAM SRL, Viale Gandhi 3 – 10051 Avigliana (TO). (hereinafter for brevity “muayfarang.com”, the “Data Controller” or “We”). For any additional information you wish to obtain, the navigator of this site can write to the e-mail address muayfarangstore@gmail.com or can send requests directly to the address of the registered office of the owner.
2. What personal data concerning you we process and where we collect them
The Data Controller, for the purposes indicated in the following section 3, may process common personal data concerning you. By way of example, the Data Controller may process personal data, contact data, financial data necessary for the purchase of products and/or services on the Sites and/or via vocal order, access credentials to the reserved areas of the Sites (i.e. user ID/email and password to log in), data relating to your preferences and consumption habits, socio-demographic data, personal data contained in comments published by you on the Sites, images, data relating to your navigation (for more information on this type of processing, we invite you to consult our cookie policy), further categories of personal data, as requested from time to time depending on the type of service you intend to use. We invite you to refer to what is specifically indicated in the information dedicated to particular initiatives and/or services to verify whether different categories of personal data are processed.
muayfarang.com does not intentionally collect special categories of personal data (i.e. those suitable to reveal your ethnic origin, your political opinions, your religious or philosophical beliefs, or your trade union membership, as well as your genetic data, biometric data intended to uniquely identify you, data relating to health or sexual life or sexual orientation), as well as data relating to criminal convictions and offences, and invites you not to provide such data and/or information from which they could be deduced (e.g. in the context of comments published by you on the Sites).
muayfarang.com may collect your personal data when you register or in any case during the relationship with muayfarang.com:
directly from you (e.g. to allow you to register on one of the Sites and/or purchase products and/or services on the Sites themselves, when you contact our Customer Service or by writing to the contact addresses on the Sites, in the context of comments you have published on the Sites);
from companies of the Group or, possibly, from our commercial partners to whom you have provided them, for example, for participation in specific initiatives organized or promoted by the same subjects (e.g. events, loyalty programs, initiatives, competitions or prize operations), to access our services (e.g. Facebook log-in). Such data may be communicated to us by the subjects indicated in accordance with their respective privacy policies.
Without prejudice to the above, please note that muayfarang.com may collect personal data of third parties in the following cases:
(i) if one of our members intends to give a subscription to one of our services as a gift, and to this end provides us with the data necessary to allow the registration of such person; (ii) if the user communicates to muayfarang.com the identification and contact data of the person who will benefit from any advantages; (iii) if our users publish personal data of third parties (e.g. in comments or in connection with our initiatives). Please remember that you are required, in cases where you provide personal data of third parties, to provide this information (and any information/s specifically associated with the relevant initiative), to such persons.
muayfarang.com, however, will provide suitable information to such persons, on the occasion of the first contact with them. In such cases, this information takes value pursuant to art. 14 GDPR, providing data subjects with relevant information regarding the processing of their personal data.
We also invite you not to provide us with personal data that is not strictly necessary.
3. For what purposes do we process your personal data
We illustrate below the purposes for which we process and/or may process your personal data.
A. Use of the content and services offered through the Sites
We will process your Personal Data in order to satisfy your request to create an account – according to the methods indicated in the General Conditions available [here] – to access all the Sites of the muayfarang.com Network and use the services offered that require registration (e.g. the newsletter service, initiatives, competitions or prize operations), purchase our paid services (also by telephone via voice order), use the services offered through the Sites that do not require registration or the purchase of a subscription, as well as to personalize the content offered through the Sites.
In relation to the aforementioned activities, your Personal Data will also be processed for all related administrative, financial and/or legal operations.
B. Customer Service
We will process your personal data to manage requests for assistance, including those relating to the activation or deactivation of a purchased subscription, made by you to our customer service, through any of the available platforms (e.g. telephone, chat, e-mail) (“Customer Service”), as well as to satisfy your request to obtain information and/or clarifications, following the sending by you of a communication using the contact addresses on the Sites.
C. Compliance with legal obligations
We will process your personal data in order to comply with legal obligations to which we are subject and any other obligation arising from orders of the competent authorities.
D. Corporate operations and defense of rights
We may also process your personal data to carry out any corporate operations (e.g. due diligence, mergers, demergers, acquisitions, transfers of assets and/or branches of companies, etc.) and to ascertain, exercise or defend a right or interest of the Data Controller or a third party (including other companies of the Group) in court and/or out of court.
E. Verification of the level of user satisfaction and functioning of the services
We will process your personal data in order to verify the correct functioning of our services, measure the level of satisfaction of our users and, with specific reference to our Customer Service, improve the quality of customer care processes and direct more effectively the training of the personnel assigned to this service. In order to know your level of satisfaction, and improve our services, we may also send you customer satisfaction questionnaires to the email address provided by you and/or we may make them available on our Sites and/or through other methods, in which you may participate on an optional basis. We also inform you that in order to allow us to pursue our legitimate interest in verifying the quality of the service provided to our customers, the telephone calls received by Customer Service may be recorded.
F. Soft Spam
Limited to our products and/or services similar to those you already use or have used, we may send you commercial communications using the email address you provided when using and/or purchasing one of the services referred to in the previous letter A. You may exercise your right to object to receiving the aforementioned commercial communications at any time.
For more information on your right to object to processing based on legitimate interest, please see the following section 8.
G. Profiling
With your consent, we will process your personal data, including through tracking technologies such as cookies, to carry out analysis and processing activities of information relating to you aimed at defining a profile of your preferences, habits, consumer choices and/or browsing experiences. Such profiling activities may also be conducted using tools made available by third parties, such as, for example, social networks (e.g. Facebook) or third-party advertising service providers (e.g. Google), and adopting, where possible, security measures such as “hashing” (which consists of associating your personal data, e.g. your email, with strings of numbers and letters, practically anonymizing your data). To this end, we may also associate the personal data acquired through tracking technologies such as cookies (where you have given your consent) and/or the personal data provided by you in the context of our specific initiatives and/or initiatives of our third-party partners (and, in the latter case, in any case in accordance with the respective privacy policy), with those that we acquire as a result of your registration on one of the Sites or as a result of their use. In order to pursue this processing purpose, muayfarang.com may also use anonymous information, not referring to any interested party, present on public databases and information systems (e.g. census data).
H. Commercial communications
With your prior consent, we will process your personal data to inform you, also through automated contact tools (e-mail, SMS, push notifications and/or other online positioning, also on social networks, telephone with or without operator), about our commercial initiatives, including offers dedicated to you even after the deactivation of your subscription, to carry out market research and to send advertising material, as well as to send you, through the tools indicated, communications regarding commercial initiatives of other companies in the Group and/or our commercial partners.
I. Communications of your personal data to third parties for commercial purposes
With your prior consent, we will process your personal data to communicate them, so that they can use them for commercial and/or promotional purposes, to other companies in the Group and/or our commercial partners.
J. Statistical Analysts
We will process your personal data for the production of aggregate and anonymous statistics in order to evaluate and improve our services. In any case, personal data processed for statistical purposes will not be used to make decisions or measures aimed at individual interested parties, nor for the pursuit of purposes of another nature
4 .What legal basis do we use to process your personal data
Below we indicate the legal basis of the processing for each of the purposes indicated in the previous section.
Performance of a contract or pre-contractual measures (art. 6, par. 1, lett. b) GDPR) The Personal Data collected for the purposes referred to in letters A and B will be processed as necessary to perform a contract to which you are a party and/or pre-contractual measures adopted at your request. Such processing is necessary and, therefore, failure to communicate personal data, when mandatory, will not allow us to provide you with the requested service. Fulfillment of a legal obligation (art. 6, par. 1, lett. c) GDPR) The personal data collected for the purpose referred to in letter C will be processed to fulfill a legal obligation to which muayfarang.com is subject. Their provision is therefore necessary and your refusal will not allow us to provide you with the requested service. Legitimate interest (art. 6, par. 1, lett. f) GDPR). Personal Data collected for the purposes referred to in letters D, E, F and J will be processed on the basis of the legitimate interest of muayfarang.com or third parties. The provision of your data for these purposes is not necessary to provide the services requested by you; however, failure to provide them or your opposition to the processing will not allow us to evaluate the functioning of our services and improve the level of satisfaction of our customers for the same, as well as in the cases provided for by letter F, send you commercial communications on products and/or services similar to those purchased and/or used by you. For more information on your right to object, we invite you to consult the following section 8. Furthermore, for more information on the legitimate interests pursued and on the related balancing judgments conducted by us, you can contact us at the addresses indicated in this information. Consent (art. 6, par. 1, lett. a) GDPR) The data collected for the purposes referred to in letters G, H and I will be processed only with your free, specific, informed and unequivocal consent. The provision of your personal data for these purposes is not necessary to provide the services requested by you; however, failure to provide consent – or revocation of consent, where initially provided – will not allow you to receive communications, including possibly profiled, on the commercial initiatives of muayfarang.com and/or other companies of the Group and/or our commercial partners. With reference to purpose H only, we remind you that, in the event of failure to provide or revocation of consent, you may still receive commercial communications relating to products and/or services similar to those you have already purchased and/or subscribed to for which the processing is based on a legitimate interest of the Data Controller with respect to which you may always exercise your right to object.
For more information regarding your right to revoke the consent given at any time or regarding your right to object to the processing based on legitimate interest, we invite you to consult the following section 8.
We remind you that muayfarang.com does not intentionally collect special categories of personal data concerning you. If such data is voluntarily provided by you (for example in comments published by you on the Sites or photos depicting your image sent by you to the editorial staff for publication), these will be processed solely for the purpose of allowing you to use the services referred to in section 3.A. and in consideration of the fact that such personal data has been made manifestly public by you (art. 9, par. 2, letter e) of the GDPR).
5. How and for how long we process your personal data
We process your personal data in electronic and paper form, ensuring their protection from the design stage and by default, and after adopting technical and organizational security measures aimed at guaranteeing a level of security appropriate to the risk.
Your personal data will be processed for the time strictly necessary to achieve the purposes for which they are collected and will be stored for different periods of time, depending on the purpose pursued. At the end of the indicated storage period, your personal data will be deleted or made anonymous, unless it is necessary to store them longer for different purposes for which the data were legitimately collected (e.g. provision of the service requested by you and/or in order to comply with a legal obligation, an order of an Authority or to defend one of our rights). For more information on the retention periods identified by muayfarang.com for each of the purposes referred to in the previous section 3, please contact us
6. To whom we may communicate your personal data and why
For the purposes above, we may communicate your personal data to the following categories of subjects:
third parties and/or companies that provide services connected and/or instrumental to the activities carried out by muayfarang.com and described in the previous section 3 (e.g. companies that carry out activities in the publishing, marketing and advertising sector, including social networking providers or other advertising platforms, companies that provide IT, archiving and/or other administrative, accounting or legal services to muayfarang.com, as well as operators who carry out call center activities on our behalf);
Group companies that need to use them for administrative, accounting or legal reasons; with your prior consent, Group companies and/or our commercial partners so that they can process them, as independent data controllers, for marketing purposes; legal and/or tax advisors and/or companies involved in possible mergers, splits, acquisitions, transfers of assets and/or branches of companies or other extraordinary transactions independent authorities, law enforcement agencies or judicial authorities for their institutional purposes within the limits established by law.
With reference to the personal data communicated to them, the subjects indicated may act, depending on the case, as data controllers, on the basis of a specific agreement for the processing of personal data with muayfarang.com, or as independent controllers, on the basis of their own privacy policy (in which case the communication of personal data will be limited to what is necessary to achieve the purposes of the processing referred to in the previous section 3, and will take place under the same legal bases referred to in section 4). A detailed and updated list of such subjects and their privacy qualifications can be requested from the Data Controller.
Your personal data may also be known by personnel appointed by the Data Controller, who have been specifically trained for this purpose on the methods and purposes of the processing.
7. Transfer of personal data outside the European Economic Area
If this is necessary to pursue the purposes indicated in the previous section 3 of this information, your personal data may be transferred outside the European Economic Area (hereinafter for brevity “EEA”).
Whenever your personal data should be transferred outside the EEA and, in particular, to States that do not benefit from an adequacy decision by the European Commission, we will adopt one of the guarantees for this purpose provided for by the legislation in force on the protection of personal data, for example by signing the Standard Contractual Clauses adopted by the European Commission, taking care to keep them updated, and we will adopt any further technical, organizational and/or contractual measures suitable to guarantee an adequate level of protection of your personal data and, in any case, essentially equivalent to that guaranteed within the EEA. Following the ruling of the Court of Justice of the European Union of 16 July 2020 in case C311/18, with reference to third countries that are not recipients of one of the adequacy decisions by the European Commission, muayfarang.com carries out specific assessments regarding the additional guarantees to be adopted, in order to prevent interference by local public authorities that may undermine the level of essential equivalence of protection of the data transferred there, compared to the level enjoyed under European law.
The list of countries outside the EEA to which we can transfer your personal data is available upon request, by contacting us at the contact details indicated in this notice.
8. What are your rights and how can you exercise them
In relation to the processing of your personal data carried out by muayfarang.com, you may, at any time, ask us to access, rectify and delete your personal data, as well as limit the processing. You may also object to processing based on our legitimate interest and/or exercise the right to portability of your personal data. Finally, you may, at any time, revoke any consent you may have given.
If you believe that the processing of your personal data violates the principles set out in the legislation in force on the protection of personal data, you may lodge a complaint with the Judicial Authority or the Supervisory Authority for the protection of personal data in the Member State in which you habitually reside, work or the place where the alleged violation occurred.
To exercise these rights, make reports or ask for clarifications on the processing of your personal data, you can write to the email address muayfarangstore@gmail.com or you can send requests directly to the address of the registered office of the owner, DAM SRL, Viale Gandhi 3 – 10051 Avigliana (TO).
9. Personal data processed by the publisher in the exercise of journalistic activity – Right to be forgotten
We inform you that this information concerns exclusively the processing of personal data that you have provided or will provide to muayfarang.com – possibly also by purchasing or subscribing to our products and/or services or by participating in our promotions and/or offers – and those that, possibly, muayfarang.com will acquire during the course of this relationship and/or further relationships between you and us.
If, however, you wish to assert the right to be forgotten with reference to your personal data possibly contained in the articles of the newspaper and processed by the publisher in the exercise of journalistic activity, we remind you that the data controller is the publisher himself, as indicated in the management of the relevant Site, to whom you can contact, for the purposes of exercising this right pursuant to art. 17 of the GDPR, by writing to the contact details indicated in the “Management” or “Editorial Staff” (or similar) section of the same Site.
10. How we may modify this information
If this becomes necessary following any regulatory changes or following the evolution of some of our services or the technologies used to provide them, we may need to update this document.
We will take care of informing you of any significant changes.
However, we invite you to periodically visit this page to verify that nothing has changed.
In no case, however, will we expand the purposes for which we process your data without first notifying you of this need and, where necessary, having obtained your consent.
DAM SRL, Viale Gandhi 3 – 10051 Avigliana (TO). VAT no. IT07852480016
