MINT S.p.A. Website
Art.13 of Regulation (EU) 2016/679 of the European Parliament and of the Council (“GDPR”)
the following explains how personal data collected automatically or provided by you navigating or using the website https://mint.ai/ (hereinafter, the “Website”) is processed.
1. DATA CONTROLLER
The Data Controller is MINT S.p.A., in the person of its legal representative, with its registered office in Via Lodovico il Moro 25, 20143 – Milan, Italy (hereinafter “Company” or “Data Controller”).
2. DATA PROTECTION OFFICER
Due to the processing activities carried out, the Data Controller has deemed it necessary to appoint a Data Protection Officer, who can be reached by writing to the email address email@example.com.
3. TYPES OF DATA PROCESSED
In order to allow you to use our Website and its services, including the possibility to ask for a demo of our products, get a product tour, join the MAPI program and contact us (hereinafter, the “Services”), the Data Controller needs to collect and process some of your personal data.
Data voluntarily shared by the user
To allow you to ask for a demo of our products, the Data Controller needs to collect your name, your surname, your job title, the company you work for, the industry, your email address, your phone number, the range of your marketing budget, and any other information you want to provide us.
Furthermore, in order to let you get a product tour, the Company needs to collect your name, your surname, the company you work for, the industry, your job title, your email address, your phone number, and your annual digital marketing budget.
Additionally, to allow you to join the MAPI program, the Data Controller needs to collect your name, your surname, the company you work for, the type of job, your email address, and your phone number.
Moreover, in order to contact us, the Company needs to collect your name, your surname, the company you work for, the industry, your job title, your email address, your phone number, the reason why you are contacting us, and any other information you want to provide us.
The optional, explicit, and voluntary sending of mail involves the collection of your name, your surname, your email address, as well as other personal data included in the requests you submit.
The computer systems and software procedures used for the Website operations acquire, during their normal functioning, some personal data whose transmission is implicit in the use of Internet communication protocols.
This category of data includes IP addresses or domain names of computers used by users who connect to the site, URI (Uniform Resource Identifier) of requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in reply, the numerical code indicating the status of the response from the server (successful, error, etc..) and other parameters regarding the operating system and computer environment.
This data, necessary for the use of the Website, is processed for the sole purpose of obtaining statistical information on the use of the Services (most visited pages, number of visitors per hour or day, geographical areas of origin, etc.) and to check the correct functioning of the Services offered.
The navigation data does not persist for more than seven days and is deleted immediately after their aggregation, except for the possible need to ascertain crimes by the judicial authorities.
The Website uses the following types of cookies.
Technical and session cookies are used. They are small text files containing a certain amount of information exchanged between your terminal or browser and the Website, which allow it to function correctly and to be used.
No analytics cookies are used.
No first or third-party user profiling cookies are used.
The provision of all cookies can however be disabled by changing the settings of your browser. It should be noted, however, that intervening on these settings could make the site unable if you block the cookies that are essential for the provision of our Services. In any case, each browser has different settings for disabling cookies. Below you will find links to instructions for the most common browsers: Apple Safari, Google Chrome, Microsoft Internet Explorer, Mozilla Firefox, Opera.
4. PURPOSE OF THE DATA PROCESSING AND LEGAL BASIS
A. Use of the Website Content and Services(i,ii) and ensuring network and information security(iii).
This purpose includes the possibility to ask for a demo of our products, get a product tour, join the MAPI program and contact us through the Website.
In addition, this purpose includes the processing of traffic personal data to the extent strictly necessary and proportionate to ensure network and information security.
The legal basis for the purpose sub. A are the (i) Performance of a contract to which you are party; (ii) Compliance with legal obligations; (iii) Legitimate interest.
NATURE OF THE PROVISION
The provision of your personal data is mandatory.
Failure to authorize its processing would make it impossible to use the contents and Services of the Website.
Furthermore, failure to authorize its processing would make it impossible to guarantee network and information security.
B. Subscription to the newsletter and receive information of commercial nature(i) and of soft spam(ii).
This purpose includes the possibility to subscribe to our newsletter and receive communications and information of commercial, direct marketing and soft spam nature on our Services and offers, on discounts and on any other promotional and loyalty initiative adopted, both through traditional and fully automated contact systems, such as, through the use of your email address.
The legal bases for the purpose sub. B are the (i) Express consent and (ii) Legitimate interest.
NATURE OF THE PROVISION
The provision of your data is optional. Failure to authorize the processing of your data, while not preventing you in any way from using the Website, may not allow you to take full advantage of the benefits we offer to our community through information of advertising, commercial, direct marketing and soft spam nature.
5. DATA RETENTION PERIOD
The navigation data and that is acquired through the use of the Website will not be kept for more than seven days.
Regarding the processing of your personal data for direct marketing purposes, the Company has established that it will automatically delete your personal data or transform them into anonymous data in a permanent and non-reversible manner, within 24 months from the registration of the data collected.
Regarding the other personal data processed, not being able to predetermine accurately their retention period, the Data Controller commits as of now to inspire its processing to the principles of adequacy, accuracy, and minimization of data, as required by the GDPR, checking annually the need for its retention. This, except in the case where it is necessary to maintain such data to fulfill regulatory obligations, or to ascertain, exercise or defend a right in court.
6. CATEGORIES OF RECIPIENTS OF PERSONAL DATA
The personal data processed will not be disclosed to third parties, but may, however, be shared in relation to the purposes of processing set out above to the following subjects:
– those who can access the personal data according to legal provisions provided by the law of the European Union or the law of the Member State to which the Data Controller is subject;
– data controllers belonging to our business group or entities linked to a central body exclusively for internal administrative purposes;
– subjects that perform ancillary purposes to the activities and services referred to in paragraph 4, i.e. companies that offer advertising, marketing and communication services, companies that offer IT infrastructures and IT assistance and consultancy services as well as design and implementation of software and websites, companies that offer services useful to customize and optimize our services, companies that offer data analysis and development services (including those related to user interactions with our services), service centers, companies or consultants responsible for providing further services to the Data Controller, within the limits of the purposes for which they were collected.
In addition, your personal data may also be disclosed to our employees, provided that they are previously appointed as acting under the authority of the Data Controller pursuant to Article 29 of the GDPR.
7. TRANSFER OF PERSONAL DATA TO THIRD COUNTRIES
The Data Controller may transfer your personal data to third countries outside the European Union, for the purpose of providing you the Services through the Website. Such transfer is always subject to an adequacy decision, under article 45 of the GDPR, or to the Standard Contractual Clauses, under article 46 of the GDPR. For more information about the rules for transferring data to countries outside the European Union, including the mechanisms on which we rely, you can visit the European Commission’s website here. To request a copy of the Standard Contractual Clauses signed by the Data Controller you can send an email to firstname.lastname@example.org.
8. AUTOMATED DECISION-MAKING PROCESSING
The Data Controller does not use automated decision-making processes without your consent, including profiling as referred to in Article 22 paras. 1 and 4 of the GDPR.
9. DATA SUBJECTS’ RIGHTS
Regarding the processing of your personal data, you, as a data subject, have the right to withdraw your consent at any time and to obtain from the Company access to your personal data. You may also request the Company to rectify or erasure your personal data. Furthermore, you have the right to obtain the restriction of the processing of personal data concerning you, as well as the right to data portability.
In addition to the above, you have the right to object at any time, on grounds relating to your situation, to the processing of your personal data carried out pursuant to Article 6 para. 1, letter e) or f), including profiling on the basis of these provisions, as stated in Article 21 of the GDPR. In addition, where your personal data is processed for direct marketing purposes, you have the right to object at any time to the processing of personal data relating to you carried out for such purposes, including profiling insofar as it is related to such direct marketing.
Finally, you have the right to lodge a complaint with a supervisory authority or take legal action if you believe that the processing of your data is in breach of the GDPR.
To exercise any of your rights, you may contact the Data Controller, in the person of the legal representative, by addressing a communication to the registered office at Via Lodovico il Moro 25, 20143 – Milan, Italy, or by sending an email to email@example.com.