Dsegni informs users of the following: 

1. Data Controller 

1. The Data Controller of personal data is Dsegni S.r.l., with registered office in 20121 Milan, Italy, Via dei Bossi 2, number of registration at Milan Companies Register and VAT number 13680420968 (hereafter “Dsegni” or “Data Controller”), phone n. +39 378 081 0405 and email customer@dsegni.com. 

1. Nature of the data processed and purposes of the processing 

1. The personal data processed are exclusively of users who have reached the age of majority, where personal data is defined as any information on a physical person who is identified or may be identified, either directly or indirectly through reference to any other information. 

1. The data processed are the data provided by the user to the Data Controller when registering for the newsletter and / or requesting for supply/activation of a Dsegni’s Service and/or when sending communications to Dsegni via e-mail or through an appropriate form to be filled in. The personal data can be such as name and surname, date of birth, e-mail address, postal address, telephone number, as well as the data collected by Dsegni when browsing the Website, such as IP address, e.g. information obtained through cookies. 

1. The data will be used for the following purposes: 

1. for the performance of the Services requested, for the fulfilment of obligations under the law and EU regulations or legislation, as well as for exercising rights before the Courts; 

1. for the sale at Dsegni showroom in Milan, and the management of sales and after-sales activities of such showroom; 

1. for the participation and invitation at events organized at Dsegni showroom in Milan or at any other location, as well as the management of pre- and post-event activities; 

1. for the promotion, via e-mail, telephone calls with an operator, sms, mms of commercial proposals related and/or connected to Dsegni’s Services, and for sending advertising material exclusively regarding Dsegni’s products or services (and its business partners), and in order to conduct market surveys and to send free samples or promotional gifts of modest value; 

1. for the analysis of consumers’ habits and consumption and purchase choices, for the creation of a user’s profile on the basis of the information and preferences expressed when browsing the Website or during the use of the Services requested, for the purpose of sending personalized advertising communications. 

1. The profiling activity as identified in section 2.3.5 shall not produce legal effects on the user nor affect him personally, except for the communication and promotion of personalized offers. 

1. Obligatory/optional nature of providing data 

1. Providing the data requested at the time of activation of Services for the purposes identified in the section 2.3.1 and 2.3.2 above is mandatory, as it is strictly functional for providing the Services requested and meeting legal obligations. Refusal to supply data will make it impossible for Dsegni to complete the process of providing the Services requested and/or meeting legal obligations. 

1. Providing the data requested for the purposes identified in sections 2.3.3 to 2.3.5 above is optional. 

1. Refusal to consent to the purposes of sections 2.3.3 to 2.3.5 will have no effect on the providing of Services. Users will be able to use Dsegni’s Services anyway. 

1. Users may object to processing for the purposes identified in sections 2.3.3 to 2.3.5 either right away, by not giving their consent while activating the newsletter Service or further Services, or at a later time, by sending an e-mail to customer@Dsegni.com. Users tick off checkboxes at the time of activation of Services to consent to use of the data identified above for the purposes specified therein; if users do not select a particular checkbox, they will be considered not to have consented to processing for this purpose. 

1. Processing methods 

1. Users’ data will be collected online during the activation of the Services requested or offline at the showroom or another event organized or partner by Dsegni, by comparing items of parts of items of information, or through use of the e-mail service or the contact form. 

1. Users’ data will be processed through registration, consultation, communication, storage and deletion operations conducted primarily using electronic tools and manually, ensuring that appropriate measures are taken to protect the security and guarantee the confidentiality of the data processed. 

1. Users’ data, stored in electronic/magnetic/digital form, are stored and filed on a server located in EU; personal data stored in paper form shall be filed in specific registers and/or records whose conservation shall be guaranteed by placing the latter in specific containers, stored in suitable premises. Dsegni declares that data registered on its server and/or in suitable premises are protected against the risk of intrusion and unauthorized access, and that it has taken appropriate security measures to ensure the integrity and availability of data and protect areas and places for data storage and accessibility. 

1. Personal data will be processed by Dsegni’s employees and/or collaborators acting as data processors or persons in charge of the processing, in the context of their respective functions and in accordance with the instructions given by Dsegni. 

1. Data disclosure 

1. Users’ personal data may be disclosed to certain parties appointed by Dsegni to provide the Services requested and to meet legal obligations. 

1. Data may be disclosed to: 

1. people, companies or professionals who provide Dsegni with bookkeeping, administrative, legal, fiscal and financial assistance, consulting services and collaboration; 

1. parties delegated and/or appointed by Dsegni to perform activities or parts of activities related to the supply of the requested Services and all other external parties who collaborate with Dsegni and must be informed of the data in order to correctly fulfill Dsegni’s obligations under the contract for the supply of Services; 

1. Companies that carry out and provide additional services related to the processing purposes, banking operators, electronic payment carriers, credit card issuers, internet providers, couriers and shipping agents, companies that manage events or carry out newsletter mailing or market research activities, companies that offer data analysis services, companies that offer IT infrastructures and IT support and consulting services, legal or accountancy firms, and auditors; those entities will act in the capacity of processors or in some cases autonomous controllers; 

1. Public Authorities in the performance of their institutional functions, within the limits set by laws and regulations. 

1. Users’ data will not be disseminated. 

1. The Data Controller has appointed Data Processors for the processing of personal data. The updated list of all Data Processors may be requested at the following e-mail address legal@dsegni.com. Dsegni may update the list from time to time. 

1. Users’ rights 

1. Users (hereafter “data subject”) are entitled to obtain confirmation of the presence of their personal data and the purposes for which the data are processed at any time. Users are also entitled to request updating, correction, deletion or blocking of data and to refuse its use, entirely or in part. 

1. Users’ rights are listed below. Specifically: 

1. A data subject shall have the right to obtain confirmation as to whether or not personal data concerning him or her are being processed, and, where that is the case, access to the personal data and the following information. 

1. A data subject shall have the right to be informed of: 

1. the identity and the contact details of the controller and, where applicable, of the controller’s representative; 

1. the contact details of the data protection officer, where applicable; 

1. the categories of personal data, their source, the purposes of the processing for which the personal data are intended, as well as the legal basis for the processing; 

1. the legitimate interests, if any, pursued by the controller or by a third party; 

1. the recipients or categories of recipients of the personal data, if any; 

1. where applicable, the fact that the controller intends to transfer personal data to a third country or international organization and the existence or absence of an adequacy decision by the Commission, or reference to the appropriate or suitable protections and the means by which to obtain a copy of them or where they have been made available. 

6.2.3 In addition to the previous information, the Data Controller shall provide the data subject with the following further information: 

1. the period for which the personal data will be stored, or if that is not possible, the criteria used to determine that period; 

1. the existence of the right to request from the controller access to and rectification or deletion of personal data or restriction of processing concerning the data subject or to refuse the processing as well as the right to data portability; 

1. where the processing is based on the users’ consent, the existence of the right to withdraw consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal; 

1. the right to lodge a complaint with a supervisory authority (Data Protection Authority); 

1. whether the communication of personal data is a legal or a contractual requirement, or a requirement necessary to enter into a contract, as well as whether the data subject is obliged to provide the personal data and the possible consequences of failure to provide such data; 

1. the existence of automated decision-making, including profiling, and, in those cases where the latter automated decision-making process produces legal effects concerning him/her or similarly significantly affects him/her, relevant information about the logic involved, as well as the significance and the consequences of such processing for the data subject. 

6.2.4 The data subject shall have the right to object, at any time, to processing of personal data concerning him or her: 

1. on grounds relating to his or her particular situation, including profiling; 

1. where personal data are processed for direct marketing purposes, which includes profiling to the extent that it is related to such direct marketing. 

6.2.5 The data subject shall have the right to: 

1. obtain from the controller without undue delay the rectification of inaccurate personal data concerning him or her; 

1. receive the personal data concerning him or her, which he or she has provided to Dsegni; 

1. obtain from the controller the deletion of personal data concerning him or her the personal data have been unlawfully processed; 

1. obtain from the controller restriction of processing. 

1. To exercise the above mentioned rights and receive information on parties to whom the data are disclosed, or parties who may become aware of data while acting as data processors or persons in charge of the processing, the users may contact Dsegni, by sending a request using the contact details provided above. 

1. The controller shall provide the information related to the action taken on a data subject’s request without undue delay and no later than one month after having received the request. That period may be extended by two further months where necessary, taking into account the complexity and number of the requests. The controller shall inform the data subject of any extension within one month after having received the request, together with the reasons for the delay. Where the data subject makes the request by electronic form means the information shall be provided by electronic means where possible, unless otherwise requested by the data subject. 

1. Duration of processing 

1. Personal data will be processed with regard to the purpose mentioned in section 2.3.1 and 2.3.2 for no longer than the period necessary for the performance of Services required, and for the time necessary for the fulfilment of current civil, fiscal and tax obligations and in any case for no longer than a period of 10 years from the termination of the underlined obligation (according to statute of limitation applicable provisions). 

1. Personal data will be processed with regard to the purposes mentioned in sections 2.3.3 to 2.3.5 for no longer than 24 months starting from the date in which the consent to the processing of personal data was given. 

1. At the end of the data processing period, the data will be deleted or permanently rendered anonymous, unless the customer consents for Dsegni to keep the data for a longer period of time. 

1. Legal basis for the processing 

1. The legal basis for the processing shall be constituted in accordance with the user’s consent, the compliance with a contractual requirement and the legal provisions. 

1. Updating of Privacy Policy 

1. This Privacy Policy is subject to occasional revision. Dsegni will notify users when changes are made to data processing conditions by publishing the amendments on the Website. 

1. Transfer to non-EU countries 

1. Personal data may be transferred to Switzerland and the USA. 

1. The European Commission has made an “adequacy decision” with respect to the data protection laws of Switzerland and the USA. 

1. Transfers to the USA will be protected by appropriate safeguards, namely the Privacy Shield, more info https://www.privacyshield.gov/European-Businesses, or the use of standard data protection clauses adopted or approved by the European Commission, a copy of which can be obtained from www.garanteprivacy.it or www.garanteprivacy.it/web/guest/home/footer/contatti. 

1. Also, Dsegni may share your Data with entities which may, however, be situated both inside and outside your country of residence and both inside and outside the EEA, as Dsegni offers its products to customers in all countries in which it is present and online.  

March 2025