Privacy Policy of www.morana-international.com

For information about your collected personal data, purposes, and entities with whom the data is shared, please contact the Data Controller.

Data Controller

Morana International by Enzo S. Morana, viale stazione 24 33053 Latisana (UD)

Data Controller’s email address: emorana@morana-international.com

Types of Data collected

The Data Controller does not provide a list of types of Personal Data collected.

Complete details on each type of Personal Data collected are provided in the dedicated sections of this privacy policy or through specific informative texts displayed before the data is collected.

Personal Data may be freely provided by the User or, in the case of Usage Data, collected automatically during the use of this Application.

Unless specified otherwise, all Data requested by this Application is mandatory. If the User refuses to provide it, this Application may be unable to provide the Service. In cases where this Application specifically states that some Data is optional, Users are free to refrain from communicating such Data, without affecting the availability or operation of the Service. Users who have doubts about which Data is mandatory are encouraged to contact the Data Controller.

The possible use of Cookies – or other tracking tools – by this Application or by the owners of third-party services used by this Application is intended to provide the Service requested by the User, in addition to any other purposes described in this document and in the Cookie Policy.

The User assumes responsibility for Personal Data of third parties obtained, published, or shared through this Application.

Methods and location of processing of collected Data

Processing methods

The Data Controller adopts appropriate security measures to prevent unauthorized access, disclosure, alteration, or destruction of Personal Data.

Processing is carried out using computers and/or IT enabled tools, following organizational procedures and modes strictly related to the purposes indicated. In addition to the Data Controller, in some cases, the Data may be accessible to certain types of persons involved in the operation of this Application (administration, sales, marketing, legal, system administration) or external parties (such as third-party technical service providers, mail carriers, hosting providers, IT companies, communications agencies) appointed, if necessary, as Data Processors by the Data Controller. An updated list of these parties may be requested from the Data Controller at any time.

Location

The Data is processed at the Data Controller’s operating offices and in any other places where the parties involved in the processing are located. For further information, please contact the Data Controller.

The User’s Personal Data may be transferred to a country other than the one in which the User is located. To obtain further information on the processing location, the User may refer to the section detailing the processing of Personal Data.

Retention period

Unless otherwise indicated in this document, Personal Data is processed and stored for the time required by the purposes for which it was collected and may be retained for a longer period due to legal obligations or based on User consent.

Therefore:

Personal Data collected for purposes related to the performance of a contract between the Data Controller and the User will be retained until such contract has been fully performed.

Personal Data collected for purposes related to the legitimate interests of the Data Controller will be retained until such interests are satisfied. Users can find further information regarding the legitimate interests pursued by the Data Controller in the relevant sections of this document or by contacting the Data Controller.

When processing is based on the User’s consent, the Data Controller may retain Personal Data for a longer period until such consent is revoked. Furthermore, the Data Controller may be obliged to retain Personal Data for a longer period in compliance with a legal obligation or by order of an authority. At the end of the retention period, Personal Data will be deleted. Therefore, upon expiration of this period, the right to access, delete, correct, and the right to data portability cannot be exercised.

User rights

Users may exercise certain rights regarding the Data processed by the Data Controller.

In particular, within the limits established by law, the User has the right to:

withdraw consent at any time. The User can withdraw previously given consent for the processing of their Personal Data.

object to processing of their Data. Users may object to the processing of their Data when it occurs on a legal basis other than consent.

access their Data. The User has the right to obtain information about the Data processed by the Data Controller, certain aspects of the processing, and to receive a copy of the processed Data.

verify and request rectification. The User can verify the accuracy of their Data and request its update or correction.

obtain the limitation of processing. The User may request the limitation of processing of their Data. In this case, the Data Controller will not process the Data for any purpose other than their storage.

obtain the erasure or removal of their Personal Data. The User may request the erasure of their Data by the Data Controller.

receive their Data or have it transferred to another controller. The User has the right to receive their Data in a structured, commonly used, and machine-readable format and, if technically feasible, to have it transmitted to another controller without any hindrance.

file a complaint. Users may lodge a complaint with the competent data protection authority or take legal action.

Users have the right to obtain information about the legal basis for the transfer of Data abroad, including to any international organization governed by public international law or set up by two or more countries, such as the UN, as well as information about the security measures taken by the Data Controller to protect their Data.

Details on the right to object

When Personal Data is processed in the public interest, in the exercise of public authority vested in the Data Controller, or for the purposes of the legitimate interests pursued by the Data Controller, Users have the right to object to such processing on grounds related to their particular situation.

Users are reminded that if their Data is processed for direct marketing purposes, they can object to that processing at any time without providing any justification. If Users object to processing for direct marketing