1.Who we are and how to contact us

We are Mirage by Samir Hag S.r.l., with registered office in Strada Serre, 24 – 61010 Tavullia (PU) – Italy, p. VAT 02546770419, Owner of the processing of your personal data (hereinafter also Owner). This information is prepared in compliance with EU Regulation 679/2016 (GDPR). For any doubt or need you can reach me at the following address: mirhage @ mirhage.it.

2. What types of data we collect

2.1. The data required for subscribing to our email lists are: your email address. 2.2. Where it is possible to write us a message via the site, the information and personal data you provide are freely provided by you. I recommend, for a first contact, not to provide personal data c.d. sensitive, but to do so only in the context of subsequent contact. In any case, these data will also be subject to protection and confidentiality as described in this statement, based on the GDPR.

2.3. As regards navigation data, please refer to the specific extended Cookies information and the related banner.

3. Why we ask you for this personal data (purpose) and on what legal basis

3.1. Your personal data is necessary to process your requests, to subscribe to the newsletter and to answer your questions. You can unsubscribe from the newsletter at any time. With the newsletter you will be informed of the news.

3.2. Through the email address you left, we could send you news or commercial communications relating to products or services similar to those you have already used, without prejudice to your right to revoke or limit your consent to such mailings at any time, by clicking on the link at the bottom of each of our e-mails or by writing to us directly at mirhage @ mirhage.it. The legal basis of the processing lies in the consent given by selecting the appropriate box in the contact form.

4. How we use the collected data

4.1. The processing is carried out through: collection, registration, organization, storage, consultation, processing, modification, selection, extraction, comparison, use, interconnection, blocking, communication, cancellation and destruction of data.

4.2. Your data, once entered in the appropriate FORM, is sent and managed on our e-mail box with server in the EU.

4.3. The data sent via the contact form are managed directly by the Data Controller or by the Manager.

5. Compulsory provision of data

5.1 It is essential that you provide your e-mail in order to be able to process the newsletter subscription request or your name and surname, your telephone and your e-mail to send your message. Otherwise it is impossible to be satisfied. Under no circumstances will I use your personal data for purposes other than those indicated in this statement. In any case, there is no obligation to provide data and failure to provide it will only prevent the request from being processed. For security reasons, you will not be able to send me any data without the consent given. So all forms are designed to disallow submission, without your consent.

5.2 The provision of data is optional in the case of: – Marketing and Promotions. You can therefore decide not to provide any data or to subsequently deny the possibility of processing data already provided: in this case, you will not receive newsletters, commercial communications and advertising material relating to the Services offered by the Data Controller. In any case, you will continue to be entitled to the Services inherent to the contractual services, based on the specific information relating to these services. By selecting the appropriate box, therefore, you declare that you have read this information and that you consent to the processing of your personal data. So with this action, you provide your consent to the processing of personal data, within the limits and for the purposes indicated in this statement.

6. Recipients of the data

Your personal data may be disclosed to my collaborators who help me manage requests and organize the back office. My collaborators are responsible for the processing of personal data and are bound by my precise instructions and policies, as well as by obligations of confidentiality and secrecy. Upon request, the list of our collaborators, responsible for data processing, is available. The data processing is carried out in a partially automated way, but the decision-making processes are always assumed with human intervention.

7. Profiling

7.1. Your data provided for subscribing to email lists is stored and managed on a Mailing List platform which maintains a database containing your data and the actions you perform with the emails we send you (when you have viewed them , how many times, the links clicked on and how many times). This is useful to understand if everything is working correctly and to offer a better service, proposing topics and contents of your interest. This information is used only for the purpose of sending the Emails you have requested to receive. No further processing will be carried out with the profiling data collected during the period of receipt of the e-mails.

8. Transfer of data abroad

8.1. Your data is mostly managed within the EU: it can be transferred to non-EU countries, including the USA. In particular I use the following external platforms: Site hosting: the site is hosted on a platform based and with servers in the EU.

8.2 Forms Contact form: the data entered in the questionnaire are stored on our computers in Italy.

8.3 Designs Google Fonts, for content fonts. With the use of Google Fonts, Google collects (1) the IP address used by the respective user to access the Internet, (2) the URL requested on the Google server and (3) the HTTP headers including the user agent describing the website visitors’ Internet browser and operating system versions, as well as the referrer (i.e. the web page on which the Google font is to be displayed). When end users visit a website that embeds Google Fonts via the Google Fonts Web API, Google’s servers receive the users’ IP addresses as part of the network connection between Google and the user. Google does not record or store IP addresses and deletes them immediately after sending the character to the requesting user. More information on https://developers.google.com/fonts/faq/privacy?hl=it.

9. What are your rights and how can you get information about the data, modify it, delete it or have a copy of it

According to the European Regulation, you have the right to ask: access to your personal data (therefore knowing what personal data we hold), the rectification of inaccurate data or the integration of incomplete ones (in case any of your data has undergone changes, such as for example if you should have a new e-mail address), the cancellation of personal data (upon the occurrence of one of the conditions indicated in article 17, paragraph 1 of the GDPR and in compliance with the exceptions provided for in paragraph 3 of the same article the limitation of the processing of your personal data (for example you could ask us not to be subscribed to our newsletter while wanting to keep the access credentials to take advantage of the courses you have purchased), in the event of one of the hypotheses indicated in the art. 18, par. 1 of the GDPR. object to the processing (for example if you notice that your data is being processed in a manner that does not comply with this information) and data portability. Request and obtain your personal data in a structured format that can be read by an automatic device, also for the purpose of communicating such data to another data controller (right to portability. withdraw consent at any time, limited to cases in which the processing is based on consent for one or more specific purposes and concerns common personal data (e.g. date and place of birth or place of residence), or particular categories of data (e.g. data revealing your racial origin, political opinions, religious beliefs, health status or sex life).

The processing based on consent and carried out prior to the revocation of the same, however, retains its lawfulness.

The rights listed above, referring to personal data concerning deceased persons, can be exercised by anyone who has a personal interest, or acts to protect the interested party, as his agent, or for family reasons worthy of protection, unless the interested party has not expressly prohibited it with a written declaration presented to the data controller or communicated to the latter.

Propose a complaint to a supervisory authority (Authority for the protection of personal data – www.garanteprivacy.it).

For any problem or need, write to mirhage @ mirhage.it.

10. Storage time

We keep your personal data only for the time necessary to achieve the purposes for which it was collected or for any other legitimate related purpose. We limit access to your personal data to only those who need to use it for relevant purposes. Your personal data that are no longer necessary, or for which there is no longer a legal requirement for their conservation, are irreversibly anonymized (and in this way can be stored) or destroyed in a secure way. Below we report the storage times in relation to the different purposes listed above: Fulfillment of contractual and legal obligations: the data processed to fulfill any contractual obligation may be kept for the entire duration of the contract and in any case no later than the following 10 years, in order to verify any pending issues including accounting documents (e.g. invoices) In the event of disputes: in the event that we defend or take action or even make claims against you or third parties, we may retain the personal data that we deem reasonably necessary to process for these purposes, for as long as such a claim can be pursued . Operational management and purposes strictly connected to this for access to the website: the data processed for this purpose may be kept for the entire duration of the contract and in any case no later than the following 10 years. Marketing purposes: personal data processed for marketing purposes may be kept for 24 months from the date on which we obtained your last consent for this purpose (with the exception of opposition to receiving further communications) Contacts from mailing lists or newsletters: may be kept for 24 months from the date you subscribe to the service or from the last date on which we obtained evidence of use of the service contents.

11. Security & guarantees of your data

No computer system can be said to be 100% secure. However, we adopt all the most suitable measures to safeguard security and avoid the risk of Data Breach (abusive access to the computer network).

12. More information

Mirage Srl assumes no responsibility for data provided by the interested party that are inaccurate or do not correspond to reality. This Privacy Policy may be subject to subsequent modifications and/or additions. So we invite you to consult it periodically according to your needs.