Privacy Policy

Privacy information pursuant to articles 13 and 14 of Regulation (EU) 2016/679

Pursuant to articles 13 and 14 of Regulation (EU) 2016/679 (the "Regulation"), Jumangi srl (hereinafter "Jumangi srl"), hereinafter provides its customers, including potential ones, as well as third parties in general (e.g. delegates, lawyers representatives, etc.) who come into contact with the same in representation or on behalf of customers, including potential ones (the "Data Subjects"), the information required by the legislation relating to the processing of their personal data ("Personal Data").


1.- Data Controller and Personal Data Protection Officer


Jumangi srl (tax code 04983230964), with headquarters in Milan, via Pontaccio 2, in the person of its pro tempore legal representative is the subject who processes the data of the interested parties and, for the purposes of the law, is considered the Data Controller personal. In this capacity, it is responsible for ensuring the application of the appropriate organizational and technical measures for data protection in compliance with the provisions of current legislation.
Jumangi has appointed a Data Protection Officer (DPO), in charge of ensuring compliance with the rules for the protection of privacy who can be contacted, for questions relating to the processing of Personal Data, at the following address: lartigianodibrera@gmail.com


2.- Methods of collecting Personal Data


The Personal Data subject to processing activities by the Data Controller could be acquired from the Data Subject, also through the remote communication techniques used by the Data Controller (e.g. websites, apps for smartphones and tablets, call centres, etc. .);


3.- Categories of Personal Data processed


The Personal Data processed by the Data Controller includes, by way of example:

  • navigation data (e.g. the IP addresses or domain names of the computers used by users who connect to the site, the time of the request, the method used to submit the request to the server, the numerical code indicating the status of the response given by the server and other parameters relating to the operating system and browser used by the user, log);
  • personal data (e.g. name, surname, tax code, address, date and place of birth, nationality);
  • contact details (e.g. telephone numbers, landline and/or mobile, email address);
  • profiling and marketing data (e.g. interests and passions);
  • bank details (e.g. payment details, IBAN and bank/postal details with the exception of the credit card number);
  • other data attributable to the categories indicated above.


4.- Purpose and legal basis of the treatment


Personal Data, upon occurrence of the specified conditions, will be processed for the purposes indicated below:

  • a) registration on the website and management of contact requests and/or information material
     The processing of personal data of the interested party takes place to carry out the preliminary activities and consequent to the request for registration on the website, if foreseen, as well as for the management of requests for information and contact and/or sending of informative material, as well as for the fulfillment of any other deriving obligation.
    The legal basis of this treatment is the fulfillment of the services inherent to the registration, information and contact request and/or sending of informative material and compliance with legal obligations.
    The provision of data is optional, however any refusal by the interested party to provide the data will make it impossible for the Data Controller to follow up on the requested service.
  • b) execution of the contract
     Personal Data will be processed for the management of the contractual relationship (for example, for the invoicing of fees, for the management of payments or complaints that you may send us) and for the provision of the requested services that can be used via the website.
    The legal basis of this treatment is the fulfillment of the services inherent in the contractual relationship and compliance with legal obligations.
    The provision of data is optional, however any refusal by the interested party to provide the data will make it impossible for the Data Controller to follow up on the requested service.
  • c) fulfillment of legal obligations, defending a right in court or out of court and fraud prevention
    Personal Data will be processed for the fulfillment of legal obligations, as well as to ascertain, exercise or defend a right of the Data Controller and/or defend oneself against claims by others, in court or out of court. In particular, the Data Controller may process Personal Data for the fulfillment of accounting and tax obligations and for the fulfillment of provisions of the Judicial Authority aimed at the prevention and repression of crimes.
    The legal basis of this treatment is the pursuit of the legitimate interest of the Data Controller taking into account the balancing of the rights of the latter and of the interested party.
  • d) promotional activities on Services/Products similar to those purchased
    The processing of personal data of the interested party takes place for the sending of communications relating to promotions and offers of Services/Products of the Data Controller identical and/or similar to those covered by the contract in progress with the interested party, unless the same is opposed to this treatment initially or on the occasion of subsequent communications.
    The legal basis of this processing is the legitimate interest of the Data Controller to promote products or services in which the customer may reasonably be interested, taking into account the balance of the rights of the latter and of the Data Controller.
    The interested party has the right to object at any time, for reasons related to his personal situation, to the processing of personal data concerning him for the purpose in question.
  • e) Promotional activities on Services/Products offered by Jumangi
    The processing of personal data of the interested party takes place for the sending, subject to specific consent, of communications of promotions and offers of Services/Products of the Data Controller through traditional methods (eg ordinary mail, telephone calls with operator) and / or automated (eg. e-mail, SMS, MMS, fax, pre-recorded phone calls).
    The legal basis of this treatment is the consent given by the interested party prior to the treatment itself, which can be revoked freely and at any time, without prejudice to the lawfulness of the treatments previously carried out.
    Any refusal by the interested party to give consent will make it impossible to use the related services, without this having prejudicial consequences for the contractual relationship with the owner.
  • f) Promotional activities on Services/Products of the Jumangi company
    The processing of personal data of the interested party takes place for the sending, subject to specific consent, of communications of promotions and offers of Services/Products of the company Jumangi through traditional methods (e.g. ordinary mail, telephone calls with operator) and/or automated (e.g. e-mail, SMS, MMS, fax, pre-recorded phone calls).
    The legal basis of this treatment is the consent given by the interested party prior to the treatment itself, which can be revoked freely and at any time, without prejudice to the lawfulness of the treatments previously carried out.
    Any refusal by the interested party to give consent will make it impossible to use the related services, without this having prejudicial consequences for the contractual relationship with the owner.
  • g) marketing purposes relating to products or services of Jumangi partners
    The processing of personal data of the interested party takes place for the sending, subject to specific consent, of communications of promotions and offers of Services/Products of Jumangi's commercial partners through traditional methods (e.g. ordinary mail, telephone calls with operator) and/or automated (e.g. e-mail, SMS, MMS, fax, pre-recorded phone calls).
    The legal basis of this treatment is the consent given by the interested party prior to the treatment itself, which can be revoked freely and at any time, without prejudice to the lawfulness of the treatments previously carried out.
    Any refusal by the interested party to give consent will make it impossible to use the related services, without this having prejudicial consequences for the contractual relationship with the owner.
  • h) profiling
    The processing of Personal Data, including location data, socio-demographic data acquired during the provision of electronic communication services and from public sources, of the interested party takes place, subject to specific consent, for profiling purposes such as analysis of the transmitted data and of the Services/ Products purchased in order to propose advertising messages and/or commercial proposals in line with the choices expressed by the users themselves. This activity will be carried out in an aggregated and anonymised form through the implementation of models for analyzing customer data using statistical algorithms, predictive models and aggregations only for the time strictly necessary for the purposes pursued, for the type of goods marketed or services rendered . In any case, the Personal Data will not be subjected to decisions based solely on automated processing, including profiling, which produce legal effects or which significantly affect the interested party in a similar way. The legal basis of this treatment is the consent given by the interested party prior to the treatment itself, which can be revoked freely and at any time, without prejudice to the lawfulness of the treatments previously carried out. Any refusal by the interested party to give consent will make it impossible to use the related services, without this having prejudicial consequences for the contractual relationship with the owner.

5.- Recipients of personal data


The personal data collected may be communicated to subjects who will act as independent Data Controllers or Data Processors, depending on the case, for the aforementioned purposes, in compliance with legal, regulatory and/or obligations deriving from Community legislation or because they are holders of a legitimate interest.
In particular, Personal Data may be made available to:
- subjects in charge of carrying out activities connected and instrumental to the processing (archiving service company, IT service company, social media management service company, marketing company, insurance company, banking institution);
- other Jumangi companies and/or commercial partners of Jumangi;
- Public administrations, to Authorities and other subjects in fulfillment of legal obligations;
Personal Data will not be disclosed (made available to indeterminate subjects).


6.- Transfer of data to third countries


The Personal Data of the interested party are stored in archives located in countries of the European Union. Where necessary for the pursuit of the stated purposes, the Data of the interested party could be transferred abroad, to countries/organizations outside the European Union that guarantee a level of protection of personal data deemed adequate by the European Commission with its own decision, or in any case on the basis of other appropriate guarantees, such as for example the Standard Contractual Clauses adopted by the European Commission or the consent of the interested party. The interested party has the right to obtain a copy of any data transferred abroad, as well as the list of countries/organizations to which the data have been transferred by writing to the address [lartigianodibrera@gmail.com]


7.- Personal data retention period


The Data will be kept in a form that allows the identification of the interested party for a period of time not exceeding that necessary to achieve the purposes for which they were collected, taking into consideration the laws applicable to the activities and sectors in which the Data Controller Opera. Once the terms thus established have elapsed, the Data will be canceled or transformed into anonymous form, unless their further conservation is necessary to fulfill obligations (e.g. tax and accounting) which remain even after the termination of the contract (Article 2220 of the Civil Code) or to fulfill orders given by Public Authorities and/or Supervisory Bodies.
The duration of the cookies used on the site can be consulted in the appropriate Cookie Information [link]
In the event of a dispute, the storage time indicated above may be extended up to 10 years from the definition of the same.


8.- Processing methods


The treatment will be carried out by authorized personnel who need to know it in carrying out their activities, with the aid of electronic instruments, according to principles of lawfulness and correctness, so as to protect the privacy and rights of the interested party at all times. compliance with the provisions of current legislation.
Profiling connected to marketing (analysis of consumption habits and choices) takes place through an automated process in order to study and analyze the behavioral profiles and the aspects characterizing the customer base to optimize the promotional activities of products and services.


9.- Rights of the interested party


The interested party has the right to ask the Data Controller:

i) confirmation that your Personal Data is being processed or not and, if so, to obtain access (right of access);

ii) the rectification of inaccurate Personal Data or the integration of incomplete personal data (right to rectification);

iii) the cancellation of the Personal Data if one of the reasons provided for by the Privacy Regulations exists (right to be forgotten);

iv) the limitation of the processing of Personal Data when one of the hypotheses envisaged by the Privacy Regulation occurs (right to limitation);

v) to receive the Personal Data provided to the Data Controller in a structured, commonly used and machine-readable format and to transmit such data to another Data Controller (right to portability);

vi) to object at any time in whole or in part to the processing carried out for the pursuit of a legitimate interest of the Data Controller and for marketing and profiling purposes (right of opposition);


vii) to revoke any consent to the processing of Personal Data, at any time, without prejudice to the lawfulness of the processing based on the consent given prior to the revocation.


The consent given for carrying out marketing activities with automated contact methods (by way of example sms, mms, fax, phone, e-mail, web applications) also extends to traditional contact methods (paper mail or telephone call with operator ). Similarly, the opposition to carrying out marketing activities with automated contact methods also extends to traditional contact methods. Your right to provide consent or to exercise the right to object in relation to only one of the two methods of carrying out marketing activities remains unaffected.
To exercise their rights, the interested party can send a message to the e-mail box lartigianodibrera@gmail.com or a written communication to the Data Controller Via Pontaccio 2 20121 Milan.
The interested party also has the right to lodge a complaint with the competent Supervisory Authority on the Italian territory (Authority for the protection of personal data) or with the one that performs its duties and exercises its powers in the Member State where it is the violation occurred, as provided for by art. 77 of the Regulation, as well as to take the appropriate judicial offices pursuant to articles 78 and 79 of the Regulation.
10.- Cookies
As regards the use of Cookies, see the appropriate Cookie Information [link]