OWNER OF DATA PROCESSING AND GENERAL INFORMATION
Madò Pastry Shops S. R L , Viale VOLGA n°129– Fiera del Levante BARI (BA) is the data controller of the personal data provided by users.
Madò Pastry Shops S. R L owner of the brand Madò horeca is committed to protecting the right to the protection of users' personal data.
You are advised to read the following carefully to understand our considerations and practices regarding your personal data and how it will be treated.
RESPONSIBLE FOR TREATMENT
The Data Controller makes use of data processors to achieve the purposes indicated below and of a designated person responsible for the protection of personal data (Data Protection Officer or DPO) to supervise the protection relating to personal data.
We remind you that you can contact the Data Protection Officer at any time and send any question or request relating to your personal data and the respect of your privacy by writing to the email address customerservice. mado@gmail. com
Data protection declaration
This data protection declaration gives you an overview of the processing of your data at Madò pasticcerie s. r L It applies to all websites, apps and other services offered by Madò pasticceria S. R L
How to read this data protection declaration: We offer you various ways of reading this data protection declaration. In this section, first of all, you will find some fundamental information. We have subsequently divided this data protection declaration into chapters according to the topics of interest to you.
We have preceded each chapter with a short introductory text. In it we briefly summarize the content of the chapter. If you therefore want to have a quick overview of all data processing, we recommend that you read the introductory texts.
Where possible we have dispensed with references in the text. This way you receive the complete information in whichever chapter you are in. This means that if you read the privacy statement from start to finish, there will be steps that repeat themselves. We could not avoid all references in the text.
For which offers and services does this declaration on data processing apply: The type and methods of data processing carried out by Madò pasticcerie s. r l are similar for most of our offers. This data protection declaration therefore applies to all services and benefits that we offer to our customers in Europe. This applies regardless of the platform on which we offer the service: website, app, in sales outlets, by telephone, at events or via social networks. For greater simplicity in these "normal cases" we use the term "services".
However, there are also services for which we process your data in a different way or for other purposes. This may depend on the type of service or country requirements. When we refer to these cases (hence "derogations from the normal case") we are talking about "service specific" or "country specific".
What you learn about this data protection declaration:
What data is stored by Madò Pasticcerie S. R L
What we do with this data and what it is needed for.
What data protection rights and choices do you have?
What technologies and what data do we use for the personalization and adaptation of our services and content do we use to offer you a safe, simple, uninterrupted and individual shopping experience.
What technologies and what data we use for advertising, including tracking technologies.
If you have any questions about this declaration on data processing or about data processing in general at Madò pasticcerie s. r l you can contact our Data Processing Manager at any time at info@melliot. it or to Madò Pasticcerie S Customer Service. R L
1. What data is processed by Madò pastry S. R L?
Madò pastry shops S. R L offers various services that you can use in different ways. Depending on whether you contact us online, by telephone, in person or otherwise, different data comes into play from different sources. Much of the data we process is communicated to us by yourself while using our services, for example when you contact us and register by giving your name, email address or address. However, we also receive technical device and access data which is automatically collected when you interact with our services. These may relate to the type of appliance you use. We collect further data on the basis of analyzes we carry out (e.g. in the context of market research or customer evaluation). We may also receive data about you from third parties, for example business information services or payment service agencies.
If we talk about "data" we are referring to personal data. This is information by which we can identify you immediately or by combination with other information. Examples: Your name, telephone number, customer number, order numbers or your email address. Any information that does not allow us to identify you (even in combination with other information) counts as non-personal data. Non-personal data is also referred to as anonymized data. If we combine personal data with anonymised data, all data in this data set count as personal data. If we delete the personal data of a data set or piece of information about your person, the remaining data of this data set no longer count as personal data. This procedure is called anonymization. In principle, it applies: If we ask you to provide certain personal information, you can of course refuse to do so. You decide what information you want to give us. However, it is possible that in this way we will not be able to offer you the desired services or we will not be able to offer them to you in an optimal way. For example, it is not possible to have parcels delivered without indicating a delivery address. If only certain data are required in connection with a service (mandatory data), we will notify you of this by marking them appropriately.
1. 1 Profile data
Profile data are personal and demographic data about you (so-called basic data) and about your individual interests, which you communicate to us when registering for your customer account. Profile data includes, for example:
your name and surname;
your contact details;
demographic data such as gender, age and place of residence.
1. 2 Contact details
If you contact us, we collect your contact details. Depending on how you contacted us (for example by telephone or email) your contact details may consist of your name, postal address, telephone numbers, fax numbers, email addresses, details of your social media profiles ( for example we receive your ID in Facebook, if you contact us via Facebook), usernames and similar contact details.
1. 3 Purchase data
If you order something from Madò pastry shops S. R There we collect your purchase data. The purchase data may, depending on the type of sale and treatment status, include the following information:
details on the goods purchased (description, quantity, price, etc. );
data on the means of payment;
delivery and billing addresses;
communications and messages in relation to purchases (p. eg declarations of withdrawal, complaints and communications to customer service);
delivery and payment status, p. eg "Completed" or "Shipped";
return status, p. eg "Successfully completed";
data on the third party service providers involved in the execution of the contract (in the case of mail order it could be the shipment number of the courier service).
1. 4 Payment data
We offer you the common means of payment in online trading. In particular they are advance payment, credit card, PayPal or bank transfer. To process the payment, we collect the payment data you have provided to us. We receive additional payment data from external payment processing services and business information services with which we cooperate for the purpose of payment processing and credit checks. We transmit to our payment management services only those data that are necessary for the payment to be processed.
Payment data can be, for example:
preferred means of payment;
IBAN and BIC or account number and bank code;
credit card details;
The payment data also includes further data directly related to the payment processing and the credit check. This affects, for example, data that external service providers use for identification, such as your PayPal ID (if you pay via PayPal).
Madò pastry shops S. R L is responsible for the management of payments, credit management and solvency checks in relation to all purchases made by private individuals on Madò pasticcerie S. R L
Creditworthiness data includes statements about a person's estimated financial capacity and availability. This is useful for businesses to avoid bad debts that arise if customers are unable to make payments or pay late. The fact that we also take into account creditworthiness data when selecting the means of payment serves to avoid, at the same time, that we offer our customers means of payment that we cannot offer them and that our customers assume payment obligations to which they cannot fulfill. Solvency data is usually collected by so-called economic information services. Based on various data, the economic information services calculate the so-called value score, which takes into account, among other things, existing payment obligations and possibly previous payment difficulties. Score values are statistically based values regarding a person's future risk of payment default and are expressed as a numerical value, such as a percentage. We have only limited influence on the data processing at business intelligence services (e.g. when we pass data on failed payments to business intelligence services).
1. 5 Interest data
During your interaction with our services, data arises that allow us to know the contents, themes, products, product ranges, brands or styles in which you are interested. For example, from purchase data, the content of the wish list, your age (as far as you make this information available to us) and through comparisons with other users with similar characteristics we can derive the styles and product categories you are interested in. So, in the next search you do, we are able to show you the products that are probably most relevant to you first.
In addition to the interests that you communicate to us directly, we can also extrapolate your interests from other data that we collect. If, for example, you repeatedly access a certain area of Madò pastry shops s. r l, as part of the usage analysis based on your access data, we can draw conclusions about your interests (for example, if you regularly visit the "Sportswear" category or order products from this category, we can conclude that you are probably interested in sport).
In addition, for this purpose, we obtain data and statistics on demographics (age, gender, region), device and access data as well as the interests of our users from our external advertising partners. We pay attention that our advertising partners only transmit aggregated, encrypted or anonymised data for Madò pasticcerie s. r l , so that we cannot match the data to a particular person, especially a username. This information can help us to better understand our users, for example in the analysis of customer structure and user segmentation.
1. 6 Communications, contents of interviews
If you communicate with us or other users by telephone, post, social media services, contact forms or otherwise about our products (p. eg product evaluations) or other topics, we collect the content of your communications.
We may forward your communications to the offices in charge of your topic, possibly our partner companies or manufacturers. In the event of a possible transfer to another company (e.g. eg if you give us feedback to the manufacturer of a product) you naturally have the possibility to inform us that you wish your data to be used only by Madò pasticcerie s. r L In this case we will not forward your communication, or we will only forward it without personal data, to the competent office, if your query can be answered in this way.
If you send us communications intended for other users through the spaces set up for this purpose (p. eg product evaluations) these may be published by us as part of our services.
For communication with customers and users of Madò Pasticcerie S. R It also uses the offers of social networks such as Facebook, Instagram. We use these communication platforms to offer you further contact and information options in addition to our own communication channels. Please note, however, that we have no influence on the conditions of use of social networks and the services offered by them and that we have limited influence on their data processing. We therefore ask you to carefully check which personal data you transmit to us via social networks. We have no possibility of influencing the behavior of the social network operators, other users or third parties who may cooperate with the social network operators or who use their services.
1. 7 Data from social networks
Possibly in the services of Madò pastry shops S. R There are integrated social network functions. These could be messaging services and so-called social plug-ins or social logins such as "Register via Facebook". If you activate or use these services and you are a member of the respective social network, we receive data from the respective operators by which you can possibly be identified. We usually receive the following data from social networks:
your public profile data deposited with the social network (p. eg name, profile);
data on the type of device you use;
your profile ID at the respective social network (p. eg Facebook ID).
Furthermore, without your consent, we do not receive data that allow your identification or to make contact with you from social network managers.
In connection with advertising via social networks we usually only receive interest-related information and general demographic data for the effectiveness of our advertisements. For example, that a man residing in Rome, aged between 25 and 34, with interests in clothing and purchases, has clicked on a specific ad from us. These data and evaluations come from the respective social network operator.
Currently Madò pastry shops s. r uses the Facebook messaging service and social plug-ins/logins of the following social networks:
Facebook Inc. , 1601 St. California Ave, Palo Alto, CA 94304, USA ("Facebook"). You can find the link to Facebook's data protection declaration here: Facebook data protection notices.
1. 8 Data for opinion polls and surveys
If you take part in an offer proposed by Madò pastry shops s. r l (p. eg a game show) or an opinion poll (p. eg customer satisfaction surveys as part of market research), please provide personal data.
For example, in a prize game we usually ask you for your name and email address, in order to be able to contact you in the event of a win and to ensure that each participant can only take part in the prize game once.
In some actions and investigations we may also ask you for additional data. This may be the case if we carry out an action jointly with a partner and the partner needs information about you in order to be able to make the prize available to you. In such cases we always inform you separately about the requested data and its use by us.
1. 9 Device data and access
When using online and mobile services, it is unavoidable that technical data is generated and processed in order to be able to provide the functions and display the content offered on your device. We refer to this category of data as "device and access data". Device and access data are created during each use of an online and mobile service. It makes no difference who the provider of this service is. Device and access data are formed when using:
newsletter email (i.e. when your newsletter interaction is detected);
Madò pastry shops s. r l detects, on the one hand, device data and access to online and mobile services offered by Madò pasticcerie s. r the same (p. eg shop Madò pastry shops s. r L)
2. For what purpose Madò pastry shops S. R L use my data?
Madò pastry shops S. R L processes your data in compliance with all applicable data protection laws. In doing so, we of course comply with the principles of data protection law for the processing of personal data. We therefore basically only process your data for the purposes explained in this data protection declaration and stated at the time of collection. These are primarily the procurement process and provision, customization and development as well as the security of our service. Furthermore, we use your data within the scope of the strict German and EU data protection regulations but also for other purposes, such as product development, scientific research (particularly in the areas of machine learning, intelligence artificial and deep learning) and market research for the optimization of business processes, the need-based design of our services as well as personalized advertising.
In this chapter we inform you on what legal (legal) basis we process data for the individual purposes. Depending on the legal basis on which we process your data, you may have – in addition to your always existing data protection rights, such as the right to information – specific data protection rights. For example, in certain cases, you have the right to object to the processing of your data.
2. 1 Development of the purchase and provision of online, local and personalized services
We process your data in each case within the scope of the fulfillment of the contract and for the provision and performance of further services requested by you, as described in the data protection declaration. The purposes of the respectively necessary data processing are therefore oriented towards the purpose of the contract concluded with you in each case (including our General Terms and Conditions of Business and, if applicable, our service-specific General Terms and Conditions of Business and Use) or the services requested by you. The main purposes are:
the execution of purchase contracts and customer service including the processing of shipping and payment, credit management and the management of returns, complaints and warranty cases;
the provision of news, notices, newsletters and other means of direct communication, insofar as they are an integral component of our contractual services or of the services requested by you.
guaranteeing the general security, system functioning and stability of our services including defense against attacks.
non-verbal communication with you regarding technical, security and contractually relevant issues (p. eg fraud alerts, blocking of the customer account or changes to the contract).
the issuance, collection and supply of Madò pasticcerie s. r L
the execution of games with prizes and actions.
Insofar as the purpose is the execution of a contract concluded with you or the provision of a service requested by you, the legal basis is Article 6 paragraph 1 letter b DSGVO. Otherwise the legal basis is Article 6 paragraph 1 letter f DSGVO, where our justified rights lie in the aforementioned purposes.
2. 2 Shopping customization
We process your data in order to provide you with useful and convenient services that best meet your needs and interests. Given that the offer of Madò pastry shops s. r l comprises of products, it is necessary for us to present content and products in a way that is appropriate to the needs, so that you can find the products that actually interest you. This requires a customer-specific assessment of the relevance of products and content.
For the personalization of shopping in Madò pastry shops S. R We use device and access data that we collect for usage analysis. We also use device and access data that we receive from partners while you visit Madò Pasticcerie s. rl Shop. If during your visit to Madò pastry shops s. r l Shop you are logged in via your customer account, we also use profile, interest and purchase data to personalize your shopping. We call this type of shopping personalization onsite optimization. Only this shopping optimization allows us to present you with suitable search results, product suggestions, style recommendations and other content that matches your actual interests. Without this personalization of shopping, as many online shops adopt it as a standard today, the search for products relevant to you would be less comfortable, longer and the benefit of our proposal would be less. Of course, despite shopping customization, you have access to all content. Only thanks to the personalization of shopping interesting content is shown to you faster.
The legal basis for the processing of your data for the personalization of shopping within the scope of personalized services is Article 6 paragraph 1 letter b DSGVO. The legal basis for the processing of your data in the context of onsite optimization is Article 6 paragraph 1 letter f DSGVO, whereby our justified rights lie in the aforementioned purposes.
2. 3 Research, machine learning and artificial intelligence
We process the data collected on our customers for scientific research in the relevant sectors for Madò pasticcerie s. r L These are especially the research fields of machine learning, artificial intelligence, natural language processing and deep learning. Research in Madò pastry shops s. r l focuses on solving real problems of everyday online shopping and is aimed at improving and developing the existing service offer. So we can develop apps that offer you products oriented to your needs and your style and can match products that actually respond to your interests.
By doing this, of course, we comply with scientifically recognized data protection standards. This also means that we only process your data in summarized, anonymised or pseudonymised form for research purposes, for example by replacing all identifiable data such as your name with other data.
The legal basis for the processing of your data in the context of the research purposes described above is Article 6 paragraph 1 letter f DSGVO, whereby our justified rights lie in the aforementioned purposes.
2. 4 Fraud prevention, selection of payment methods and credit check
To prevent the risk of data security breaches, our customers' data is only transmitted in encrypted form. This applies to both ordering and logging in via the customer account. We use the encryption system SSL (Secure Socket Layer) for this purpose. Thanks to encryption, the data is not readable by third parties. To further protect ourselves from external attacks, we use specific security technologies that continuously monitor our systems and immediately identify and report any anomalies. We also protect our systems by means of technical and organizational measures against the loss, destruction, access, tampering or disclosure of your data by unauthorized persons. In this way we want to keep the risk of unauthorized access as low as possible, ultimately the protection of your data is of the utmost importance to us. However, we – like other companies – cannot guarantee absolute protection.
We also apply manual fraud prevention methods to protect us and our users from misuse of your data, especially through fraudulent ordering. For this purpose, during the execution of the order, Madò pastry shops S. R L St. collects and evaluates your device and access data (including IP address, identifiers, usage behaviour), purchase and payment data (including address data and other creditworthiness data of business information services) under a pseudonym as well as data history of changes to your profile data (p. eg if the delivery address has recently changed). The resulting data series is then compared with your previous usage and ordering habits. Furthermore, a comparison is made with series of general data obtained from all orders placed at Madò pastry shops s. r l , in which fraudulent activity has occurred or in which there is a suspicion of fraudulent activity. This comparison serves to identify fraud patterns and, by means of the pattern comparison, to prevent identity abuse and fraud.
When registration for the customer account is completed, Madò pasticcerie S. R L St. transmits your name and the addresses you have provided to us in your profile to external business intelligence services on our behalf. This serves to verify that the addresses communicated are actually registered or reachable. Typical clues – often in combination with each other – that make a fraud attempt more likely are:
the delivery address was changed shortly before the order and/or is located in a region with a high risk of fraud;
your order is particularly important and/or includes goods that are in high demand at the moment and/or is placed at an unusual time for your region (eg. eg at night);
for the order, the payment methods direct debit to the account or invoice are used;
suspicious access attempts were made during the ordering process in relation to your customer account, the model of which indicates an automated procedure;
your customer account was used by a suspicious IP address;
your customer account has been used by an unknown or suspicious device.
If our security system identifies a fraud attempt or a high risk of fraud, the affected procedure is transmitted to the fraud department for manual verification. Taking into account the risk of fraud, appropriate preventive measures are implemented (e.g. eg temporary blocking of the customer account or limitation of the payment methods offered).
Insofar as the purpose of the processing of your data is the prevention of fraud against you, the legal basis is Article 6 paragraph 1 letter b DSGVO. Furthermore, the processing of your data takes place on the basis of Article 6 paragraph 1 letter f DSGVO, on the basis of our interest and the justified interest of other users in the identification and prevention of fraud and in the identification of criminal acts.
Selection of payment methods
Before displaying the payment methods available for a purchase, Madò Pasticcerie S. R L St. carry out a risk assessment. For the purpose of carrying out the risk analysis, the data collected up to that point on purchase, payment, creditworthiness, data on your previous payment behavior and your profile data (e.g. profile data) are used. eg surname, first name, billing and delivery addresses, e-mail address, date of birth). The verification and evaluation takes place automatically with the use of statistical values on the risk of payment default in relation to the payment methods offered by us. As part of the risk assessment Madò Pasticcerie S. R L St. also transmits your data to external economic intelligence services in order to obtain from them general data on the assessment of payment-specific default risks (e.g. eg on the plausibility and timeliness of your address data) as well as in individual cases data on creditworthiness, e.g. eg on unpaid invoices and circumstances which immediately result in the danger of payment default (e.g. eg insolvency, extension due to inability to pay). Which creditworthiness data is actually taken into account in the risk assessment can differ from country to country.
The bad debt risk for each payment method is assessed individually and expressed by an estimated value. If the risk verification is successful we can offer you all the payment methods we offer. Otherwise we can only offer you certain payment methods. Examples of factors affecting the availability of a payment method are:
the combination of address and name cannot be found. This can be due to spelling errors, moving house, marriage or integration of municipalities into others;
you have given a delivery address, collection station or company address that is different from the billing address;
there are still uncovered credits against you;
There have been payment disruptions in the past in relation to certain payment methods.
The risk assessment does not mean that you are not offered any payment methods. If you are not satisfied with the payment methods that we offer, you can report it by letter or email to customer service. mado@gmail. com We will check the decision under the aspect of your opinion.
Insofar as you have given your consent to the processing of your data described above for the selection of payment methods, the legal basis is Article 6 paragraph 1 letter a DSGVO (consent). Otherwise the legal basis is Article 6 paragraph 1 letter f DSGVO, on the basis of our justified right to avoid the risk of payment default.
Information on the right of withdrawal
You have the right to revoke any consent given for the retrieval of creditworthiness data for the selection of the payment method.
In addition to verifying the risk, before the payment methods available for a purchase are displayed, Madò Pasticcerie S. R L St. processes your data as part of an automated credit check. This verification serves to prevent payment defaults and serves our security, as attempts to defraud and other crimes can be identified in this way.
In addition to the data which Madò pastry shops S. R L St. creditworthiness data from external business intelligence services in the form of score values is already being used. Score values are statistically based values regarding a person's future risk of payment default and are expressed as a numerical value, such as a percentage. For this purpose, Madò pastry shops S. R L St. transmits the personal data required for a credit check (usually your first and last name, your address and your date of birth) to the external economic information service on our behalf. In verification, the address data can be used to calculate the score value. The business information service uses the data transmitted by us to carry out an assessment of your creditworthiness based on statistical-mathematical methods in relation to the respective order.
Depending on the outcome of the credit check, i.e. whether it is positive or negative, suitable payment methods are displayed, with which you can continue and complete the purchase.
If you do not agree with this procedure, you can notify us by letter or email to customer service. mado@gmail. com We will check the decision taking into account your point of view.
The legal basis for the aforementioned credit check is Article 6 paragraph 1 letter b DSGVO, since it is necessary for the implementation of necessary pre-contractual measures. Furthermore, the processing of your data takes place on the basis of Article 6 paragraph 1 letter f DSGVO, on the basis of our interest and the justified interest of other users in the prevention of payment defaults, in the identification and prevention of fraud and in the identification of criminal acts.
2. 5 Advertising and market research, data analysis
We also use your data in the context of data analysis for advertising and market research purposes. In doing so, we primarily pursue the following goals:
the segmentation into different target and user groups in the context of market research;
knowledge of different target groups and their respective usage habits and shopping interests;
obtaining knowledge on the demographics, interests, purchasing and use habits of our users as well as the marketing of this knowledge in the context of advertising services provided to third parties;
the timely identification of trends in the fashion and online-shopping sectors;
advertising to customers already in the portfolio;
the execution of direct advertising, for example through newsletters;
the planning, execution and control of the advertising result which corresponds to the interests of the target groups concerned (personalised advertising);
knowledge of how our services are used (analysis of use);
the marketing of the above knowledge in the context of advertising services to advertising customers.
2. 6 Product and technology development
We use your data for the development of products and technologies, including the development and improvement of customized services. In this we use aggregated or anonymized data and also machine learning algorithms, exemplarily developed from our research, which allow us to obtain estimated data, forecasts and analyzes regarding the interests of our users. So we can develop apps that offer you products oriented to your needs and your style and can match products that actually respond to your interests. Data processing for the purpose of product and technology development mainly takes place for the following purposes:
the development and improvement of personalized services and technologies for data analysis, advertising and personalized online shopping;
the development of technologies and concepts for increasing Internet security, for the prevention of fraud and for the improvement of data protection, e.g. eg through pseudonymisation, encryption and anonymisation techniques;
the development and verification of software solutions for the optimization of necessary commercial and logistic processes.
The legal basis for the processing of your data in the context of product and technology development is Article 6 paragraph 1 letter f DSGVO, whereby our justified rights lie in the aforementioned purposes.
2. 7 Management and optimization of administrative processes
If necessary, we transfer and process your data for administrative and logistical purposes and for the optimization of commercial procedures within the Madò pasticcerie s group. r l , to manage them more efficiently and legally reliably and to fulfill our contractual and legal obligations (p. eg obligation to keep commercial and tax documents). In this way we can offer a cheaper, safer, more harmonious and better personalized service.
Data processing for the purpose of managing and optimizing administrative processes also includes exemplarily the following purposes:
the execution and improvement of customer service;
the prevention and solution of crimes;
guaranteeing the security and functionality of our IT systems;
The legal basis for the processing of your data in the context of administrative process management and optimization is Article 6 paragraph 1 letter f DSGVO, whereby our justified rights lie in the aforementioned purposes. As long as we keep your data due to legal provisions, e.g. eg retention obligations for tax documents, and for checks in the context of combating money laundering, the legal basis is Article 6 paragraph 1 letter c DSGVO.
2. 8 Because of your consent
In case you have given your consent to the processing of personal data, the legal basis of our treatment is, in the first line, this consent. Which data we process on the basis of your consent depends primarily on the purpose of your consent. Typical purposes are, for example:
ordering a newsletter;
participation in a survey or market research;
the processing of particularly sensitive data, from which, for example, your political, religious or ethical opinions or your state of health can be inferred;
the recording of telephone conversations you conduct with our customer service;
the transfer of your data to third parties or to a country outside the European Union;
the execution of a credit check (unless they are necessary for the execution of the contract or for pre-contractual measures).
Information on the right of withdrawal
You can revoke your consent at any time with effect for the future. This can happen, p. eg by email, post or fax.
You can opt-out of receiving newsletters and other types of communications. The link can be found in every newsletter. Furthermore, in each newsletter there is a button which allows you to unsubscribe from the newsletter.
2. 9 Other purposes
If the data protection law allows it, we may use your data, without your consent, also for new purposes, such as carrying out data analyzes or developing our services and contents. The prerequisite for this is that these new purposes, for which the use of the data is intended, were not yet established at the time of the data collection or were not foreseeable and that the new purposes are in accordance with those for which the data they had originally been detected. For example, new legal and technical developments and new business models and services may lead to new processing purposes.
3. Personalized services
The development and provision of customized functions and services has the highest priority for us. Regardless of location, time and the type of device used, we offer you an individual shopping experience and an offer tailored to your individual interests. The processing of your data for the personalization of our services at Madò pastry shops s. r l is an integral part of the services.
3. 1 What are personalized services?
By means of personalized services we can offer you better, more practical and safer services. For this purpose, we use the data stored about you to draw conclusions about your needs and interests. On this basis we can offer you more interesting content, more suited to your needs and your interests. Of course, you still have access to all content. Through personalization you will see content that is interesting to you more quickly or content is presented specifically for you (e.g. eg in the form of individual product recommendations).
3. 2 Why do I need a customer account?
Most of our personalized services require the creation of a customer account, so that we can store the data we collect about you in a central place.
3. 3 What data is stored in my customer account?
Data that we collect about you, such as your customer number (CustomerID), is stored in your customer account. The customer number is a randomly generated sequence of numbers that does not contain any personal data. Your data is assigned to your customer number in order to link it to your customer account. In addition, the customer number also serves as a pseudonym.
3. 4 What data is used for personalization?
The selection of personalized content is generally made on the basis of all data stored in your customer account.
Insofar as device and access data that are not stored in your customer account are used, they are only pseudonymized for the respective personalization and used for the duration of use (i.e. e.g. eg in relation to your customer number, but not in relation to your name or other immediately identifying profile data).
The following are not used:
data for actions and opinion surveys;
communications (p. eg of customer service).
3. 5 Your choices
In your customer account you can view most of the data we have stored in your customer account at any time. If necessary, you can also change the data in your customer account and thus influence the personalization, for example by communicating your preferences to us.
Insofar as the personalization is based on device and access data, you can prevent the collection of this data by deactivating the collection of this data via tracking tools. In this case, however, please note that you will receive less personalized services or no personalized services and assistance. Please also note that the data used for the personalized services is also required for other purposes (including the provision of our services). The collection of data used for this purpose therefore does not cease with deactivation. The advertising that will be presented to you will no longer be personalized.
4. Information on websites
We use your data to make the Madò pastry shops websites available. r L In addition to the device and access data, which are generated during each use of these services, the type of data processed and the purpose of the processing depend in particular on how you use the functions and services provided through our services. We also use the data generated during the use of our services to find out how our online offer is used. We use this information, among other things, in the context of shopping personalization, to improve our services as well as for personalized advertising.
4. 1 Bidders
You can identify the responsible provider of the service from the imprint of the respective website.
4. 2 What data is collected?
As a matter of principle, we collect all data that you communicate to us directly via our services.
Device and access data
For every access to our servers and databases, device and access data are generated and logged in so-called server log files. At the end of the respective session, the IP address contained therein is anonymised for a short time, as soon as storage is no longer necessary for maintaining the functionality of the respective website.
As far as available and activated on your device, we also detect the identification code of your device (p. eg the so-called "Advertising ID" if you use an Android device, or the "Ad-ID" if you use an Apple device). This device code is issued by the manufacturer of your device's operating system and can be read and used by websites and apps to present content to you based on your usage habits. If you do not want this to happen, you can deactivate this at any time in the browser or system settings of your device.
For each user who registers for a customer account or for another service, we create a password-protected personal login. If you do not log out after logging in with your login credentials, you will automatically remain logged in to most of our services. Depending on the type of service, a cookie or comparable technology is used for this purpose. This function allows you to use a part of our services even without reconnecting each time. For security reasons, you will be asked to re-enter your password if, for example, you want to change your profile data or place an order.
Our services may contain social plug-ins ("plug-ins") of various social networks. With the help of these plug-ins you can, for example, share content or recommend certain products to others. Plug-ins are normally deactivated and therefore do not transmit data. By clicking on the corresponding button (p. eg "Activate social media") you can activate the plug-ins. With a further click on the same button the plug-in can be deactivated. If the plug-in is activated, your web browser establishes a direct connection to the respective social network. The content of the plug-in is transmitted directly from the social network to your web browser and placed by it on our website. By integrating the plug-in, the social network obtains the information that you have called up the corresponding page of our website and can collect your device and access data. If you are logged in to the social network, it can associate this visit with your account in the respective social network. If you interact with the plug-ins, for example if you click the Facebook "Like" button or write a comment, the corresponding information is transmitted directly from your browser to the social network and stored there. For information on the purpose and scope of the data collection and on the further use and dissemination of the data via social networks, as well as your rights in this regard and setting options to protect your privacy, see the information on data processing. data of the respective social networks or websites. The links for this purpose can be found further down. Even if you are not connected to social networks, it is possible that websites with activated social plug-ins transmit data to the networks. Each time a website is called up, a cookie with an ID is inserted via an activated plug-in. Since your browser transmits this cookie without requiring confirmation at each connection with the social network server, the latter could, in principle, compile a profile of which sites the user associated with that identification has visited. Furthermore, it would easily be possible that later, perhaps on the occasion of a subsequent connection with the social network, this identification could be associated with a person.
Facebook social plugin
We use plug-ins from the social network facebook on our websites. com, which is operated by Facebook Inc. , 1601 St. California Ave, Palo Alto, CA 94304, USA ("Facebook"). You can find the link to Facebook's data protection declaration here: Facebook data protection notices.
In our services, we may offer you the option of registering with us directly with your social network customer account. If you want to use this function, you will be forwarded to the offer of the respective social network. There you will be invited to connect with your credentials. Obviously we do not take knowledge of your credentials. If you are already registered, this step is skipped. The respective social network will then inform you, and ask you for confirmation, which data is transmitted to us (e.g. eg public profile, friends list, email address and current place of residence). We create a customer account with the data transmitted to us. Of course, for example, we do not store your friends list. In addition, there is no permanent connection between your customer account and your social network account. We also receive social network data from the respective social network providers.
In our services, the device and access data generated during use from the usage analysis are used to personalize shopping. Depending on the type of service, common tracking technologies are used that use tracking pixels and identification cookies or comparable IDs (so-called tagging). Furthermore, our advertising partners can also collect your device and access data in this way in order to provide us with information about your interests and demographic data when you use our services (e.g. eg age, gender, region). In this way we can present you with specific content and/or offers and services, the content of which is suited to your interests (e.g. eg product recommendations that are oriented towards the fact that in the last few days you have exclusively looked at sports shoes). Our goal is to make our offer as attractive as possible for you and to present you with advertising that corresponds to your areas of interest. Of course, you can continue to enjoy all other content and functions. However, this onsite optimization allows us to primarily show you the content and functions that are most relevant to you. Onsite optimization takes place automatically in our systems, which recognize which users have called the most products and content in a given category.
In other services, deactivate the web analysis for this purpose.
Information about website cookies
What are cookies?
Cookies are small text files that your browser stores and that store certain settings and data for interchange with our web servers.
In principle, two types of cookies are distinguished: so-called session cookies, which are deleted as soon as the browser is closed, and permanent/temporary cookies, which are stored for an extended period. We need this memorization to be able to set up the websites and our services in a way that is more suitable for you and therefore facilitate your use, for example by memorizing certain settings, so that it is not necessary to repeat them every time.
The cookies we use may come from Madò pasticcerie s. r l or from advertising partners. If you want to accept only cookies from Madò pastry shops s. r l but not those of our advertising partners, you can choose a corresponding setting (p. eg "Block third-party cookies" in your browser) Normally the help function in the toolbar of your web browser explains how to refuse new cookies and make existing ones ineffective. If you have shared computers that are set up to accept cookies and flash cookies, we recommend that you log out completely after you have finished using our websites.
We use three categories of cookies for our services:
Necessary cookies: these cookies are necessary for optimal navigation and use of the website. For example, the shopping cart function is implemented with these cookies. In this way the products remain stored in the cart while you continue with the purchases. Necessary cookies are also used to memorize certain settings and keystrokes that you have made so that you do not have to repeat them continuously, as well as to adapt the contents of Madò Pasticcerie s. r l to your individual interests. Without the necessary cookies, the website cannot be used or the use is restricted.
Statistical cookies: these cookies collect device and access data to analyze the use of our websites, for example which sectors are used in what way (so-called surfing behavior), how fast the contents are loaded and if any errors. These cookies contain only anonymous or pseudonymous information and are only used to improve our sites and to find out what interests our users, as well as to measure the effectiveness of our advertising. Statistical cookies can be blocked, without this having repercussions on navigation or use of the site.
Marketing cookies ("Tracking-Cookies"): these cookies contain identifiers and detect device and access data to adapt personalized advertising on the Madò pastry shops website. r l to your individual interests. Our advertising partners, who operate online advertising networks, also collect device and access data on our websites. In this way we can also show you personalized advertising tailored to your interests on other websites of other providers (so-called retargeting). Marketing cookies can be blocked, without affecting navigation or use of the site. Possibly personalization of the shopping cannot take place.
For the Madò pastry shops s. r l Shop we have compiled country-specific lists of all the cookies we use.
4. 3 Online Advertising/Retargeting
Our website contains cookies and similar tracking technologies from advertising partners who operate online advertising networks. In this way, our advertising partners also gain access to your device and access data and can present you with personalized advertising that is geared to your interests, including on the websites of other providers (eg. eg advertising oriented to the products you have just seen in Madò pastry shops. r L)
You can deactivate the processing of your data for retargeting at any time:
For this purpose, in Madò pasticcerie s. r l deactivate the "data processing" function.
• For other websites, you can also deactivate retargeting by participating online networks via the deactivation page of the European Interactive Digital Advertising Alliance (EDAA): Deactivate further advertising.
4. 4 Analysis of use
In all of our services, we use tracking technologies to evaluate device and access data. In this way we can find out how our users generally use our offer. In doing so, cookies and comparable identifiers are used. In this way we learn which contents and topics are in particular demand, which pages of our services are used most frequently, from which region (up to the city level) our services are used and, in general, which type of browser and appliance our users use.
We also carry out occasional A/B tests as part of the usage analysis. A/B testing is a specific variant of usage analysis. A/B testing (also called split-testing) is a way of proceeding to compare two versions of a website or an app to find out which version performs better or makes the user find the content they are looking for faster . Through the creation of A and B versions and their testing, data is obtained on the basis of which the decision to change the services is easier and can be made faster.
We offer you various newsletter services. You receive information on the topics covered in the individual newsletters and other notices when registering for the newsletter service. In addition, there are also service-specific newsletters, which are an integral component of a specific service. When using our newsletter, we also collect device and access data.
5. 1 How do I register?
When sending newsletters requiring registration, we use the so-called double opt-in or single opt-in procedure. This means that we only send you a newsletter after you have expressly authorized us to activate the newsletter service. If the double opt-in procedure is required in your country, you must also have confirmed that the email address you communicated is yours. For this purpose, we send you a confirmation e-mail in which we ask you to confirm by clicking on a link contained in the e-mail that you are the owner of the e-mail address communicated to us. We may waive this measure if you have already confirmed to us for another purpose in this procedure that you are the owner of the e-mail address communicated to us.
5. 2 Erase
If you subsequently no longer wish to receive our newsletter, you can object to it at any time without incurring costs beyond the transmission costs according to the basic rates. For this purpose, a communication in text form is sufficient (e.g. eg email, fax or letter) to the company Madò pasticcerie s. r the respectively responsible for the newsletter. Of course, every edition of the newsletter also contains an unsubscribe link.
5. 3 What data is collected?
If you register for a newsletter, we automatically store your IP address and the date and time of the registration and confirmation. In this way we can prove that you have actually registered and possibly identify unauthorized use of your email address.
We collect the device and access data generated during your interaction with a newsletter. For this evaluation, the newsletters contain links to image files which are stored on our server. If you open the newsletter, your email program downloads these images from our web server. We collect the device and access data generated in this process in pseudonymized form and under a randomly generated customer number (newsletter ID), which we do not use to identify you without your consent. Thus we can reconstruct whether you have opened the newsletter and which issues of the newsletter you have opened. The links contained in the newsletter contain your newsletter ID, so that we can detect which content you are interested in. With the data thus obtained, we compile a user profile relating to your newsletter ID, which allows us to customize the contents of the newsletter based on your interests and your usage habits and to statistically analyze the use that our users make of our newsletters. We only combine this data with the data we collect as part of the usage analysis.
You can object to the analysis of the newsletter at any time by deactivating the respective newsletter service. Of course, every edition of the newsletter also contains an unsubscribe link.
Alternatively you can also disable the display of images in your email program. However, in this case the newsletter cannot be viewed in its entirety.
6. Product recommendations by email and push service
In relation to our services, we present information and offers from Madò pasticcerie s. r l based on your interests. You will receive such individual product suggestions even if you have not subscribed to a newsletter. For the selection of individual product proposals, in compliance with the legal provisions in force, we mainly use your data from previous purchases and your interest data from which we obtain profile and interest data based on the interests and preferences communicated to us .
If you no longer wish to receive individual product offers from us, you can deactivate this service at any time:
If you no longer want to receive individual product offers from us, you can object informally at any time, without incurring any additional costs beyond the transmission costs according to the basic tariffs (e.g. eg cost of internet connection, postage), for example by email. Of course, every email also contains an unsubscribe link.
7. Purchase vouchers
We use the data communicated in the context of an order for Madò pastry shops s. r l for checking and fulfilling the order as well as for sending and redeeming the voucher. This also includes the recording and processing of data associated with the use of the voucher, in particular for the purpose of fraud prevention.
For this purpose we also store the following data:
personalization data (as indicated by you)
name of the voucher holder (in personal vouchers)
time of redemption of the voucher
name of the collector and ID of the customer account used for the collection.
8. Like Madò pastry shops s. r l use my data for advertising?
We and our advertising partners use your data for personalized advertising that is shown to you in the Madò pastry shops services. r l and on the websites of other providers. For this purpose, we and our advertising partners use internet technologies that are common on the market. In this way we can advertise more precisely and as far as possible only present you with advertisements and offers that are relevant to you. This allows us to better respond to our users' needs for customization and discovery of new products as well as to interest them in the long term in our services through a personal shopping experience.
8. 1 Advertising formats and channels
The advertising formats used by Madò pastry shops s. r l and by the advertising partners of Madò pastry shops s. r l include presentations on Madò pastry shops. r l (within the scope of onsite optimization), advertisements in social networks (e.g. eg Facebook Ads, Instagram Ads) and advertising surfaces managed by online advertising networks used by Madò pastry shops. r l , such as DoubleClick by Google.
Madò pastry shops s. r l does not sell personal data. When our customers request an advertising format Madò pastry shops s. r l at Madò pastry shops s. r l they do not receive any data that allows you to be contacted or identified directly without your express consent. Our advertising clients receive only anonymous and aggregated reports with information on the effectiveness and reach of the advertising services provided.
8. 2 Information we use for definition of target groups
For the definition of target groups, we use our own knowledge from the analysis of the usage and purchasing behavior of our customers and users, as well as from our market research for market segmentation, which we apply to the user data collected by Madò pastry shops s. r L In doing so, we especially take into account aggregated or anonymised purchase data, search paths, interest data and demographic profile data as well as
Our advertising partners also have the option of providing us with their own data for user segmentation, which they have collected themselves. Advertising partners must undertake to send us only aggregated, encrypted or anonymised data for Madò pasticcerie s. r l , so that we cannot match the data to a specific person, in particular to a specific user of Madò pasticcerie s. r L For some target groups, the definition of the target group takes place on the basis of the surfing behavior data of the users. This happens when advertising should only be shown to those users who have recently visited a certain page of the website or searched for certain content.
8. 3 How we use this information for online advertising in Madò pasticcerie s. r l
We use the above information in the context of onsite optimization to present you with more relevant recommendations and content when you search for a product, call up your feed or visit a product section. The onsite optimization is based on cookies and comparable identification technologies for the pseudonymised collection of device and access data. This data is not used to identify you personally, but only serves the pseudonymised evaluation of your usage. Your data is not permanently merged with other personalized data about you stored with us. With this technology we can present you with advertisements and/or specific offers and services the content of which is based on information obtained from your device and access data (e.g. advertisements based on the fact that you have only viewed gymnastics clothing in the last few days).
If you don't want onsite optimization, you can deactivate it at any time:
For this purpose, in Madò pasticcerie s. r l deactivate the "data processing" function. You will find this function immediately next to the link via which you came to this data protection declaration.
8. 4 in social networks
If we place advertising via social network advertising formats (p. eg YouTube, Facebook, Instagram), we have the ability to transmit information about users of Madò pastry shops services. r l (p. eg device and access data such as cookie and advertising IDs, e-mail addresses), of which we assume that they belong to the target group of the advertising customer, or if they exhibit certain characteristics (e.g. eg age group, region, interests), in encrypted form to the respective social network.
The social network will – either on our behalf as executor of an order or with the consent of the respective user – decipher the data transmitted by us and will present to the user (if he is a member of the social network), within the of your existing user relationship with the respective social network, the advertising commissioned by us.
If you do not want us to use your data to present you with personalized advertising on social media, you can deactivate the transmission of your data:
For this purpose, in Madò pasticcerie s. r In the shop, deactivate the "data processing" function. You will find this function immediately next to the link via which you came to this data protection declaration.
In other services, deactivate the web analysis for this purpose.
If you have given your consent to the forwarding of your data to social networks, you can revoke your consent at any time.
You may also have the option of deactivating the use of your data for personalized advertising in the social networks you use directly with the respective operator. For more information, please contact the managers:
Facebook (Facebook, Instagram):
About Facebook Ads
Advertising settings for Facebook
Google (Google-Werbenetzwerk, YouTube, Google Search):
About Google Ads
Advertising settings for Google
8. 5 on advertising surfaces managed by online advertising networks (retargeting)
Get further information from the operators of the respective advertising spaces and from the online advertising networks commissioned to manage them. Find a list of advertising partners and opt-out notices under “Notices for Individual Websites”.
You can deactivate the processing of your data for retargeting at any time:
For this purpose, in Madò pasticcerie s. r l deactivate the "data processing" function. You will find this function immediately next to the link via which you came to this data protection declaration.
Disable usage analysis for other services.
You can also deactivate retargeting by participating online networks for our websites via the deactivation page of the European Interactive Digital Advertising Alliance (EDAA): Deactivate further advertising.
Please also note that the data used for retargeting is also required for other purposes (including the provision of our services). The collection of data used for this purpose therefore does not cease with deactivation. The advertising that will be presented to you will no longer be personalized.
9. To whom is my data forwarded?
Madò pastry shops s. r only forwards data if this is permitted by German or EU data protection law. We work in particularly close cooperation with some service companies, such as in the customer service sector (eg. eg hotline service), with technical companies (p. eg for the management of data centres) or with logistics companies (p. eg couriers such as UPS). In principle, these companies are only permitted to process your data under special conditions and on our behalf. Insofar as we use these companies as commissioned processors, the service companies are only granted access to your data for the scope and period necessary for the provision of the respective service. If you buy from a partner Madò pastry shops s. r l, we transmit certain of your purchase data to the partner Madò pasticcerie s. r l (p. eg your name and delivery address), so that the partner Madò pasticcerie s. r l can deliver the ordered goods to you.
9. 1 Shipping companies
For the delivery of orders, we collaborate with external service companies (p. eg UPS). These delivery companies receive the following data from us for the fulfillment of their respective order:
the delivery address.
possibly your postal number (if you have placed an order for delivery to the Packstation);
possibly your email address (if the courier wants to inform you by email of the estimated delivery time and date).
9. 3 Public bodies and other third parties
Insofar as we are required by a decision of public bodies or courts, or for prosecution and legal purposes, we will, if necessary, pass on your data to criminal prosecution institutions or other third parties.
10. What data protection rights do I have?
Under the respective legal basis you have the following legal data protection rights: right to information (Article 15 DSGVO), right to erasure (Article 17 DSGVO), right to correction (Article 16 DSGVO), right to restriction of dissemination ( Article 18 DSGVO), right to data portability (Article 20 DSGVO), right of appeal to a public data protection institution (Article 77 DSGVO), right to withdraw consent (Article 7 paragraph 3 DSGVO) as well as the right to objection to certain data disclosure measures (Article 21 DSGVO). The contact details for your requests can be found in chapter 13.
To ensure that in the event of requests for information, your data is not transmitted to third parties, please attach suitable evidence of your identity to your request and send it to us by post or email.
Usually, it is sufficient for you to send us your request using the email address stored in your customer account.
You can edit most of the data in your customer account yourself. In other cases, please contact customer service.
The powers of the public data protection bodies are oriented towards the location of the respective responsible office. However, you can also contact the public data protection agency at your place of residence, who will forward your appeal to the competent public agency.
If you have given your consent to the processing of your data, you can revoke it. Revoke it at any time. The revocation does not affect the permissibility of processing of your data carried out before the revocation.
You can object to the processing of your data for advertising purposes, including direct advertising (also in the form of data analysis), at any time and without giving reasons.
If we justify the processing of your data with an assessment of interests according to Article 6 paragraph 1 letter f DSGVO (p. eg the reporting of creditworthiness data to an external economic information service, you can lodge an objection against the processing. When exercising an appeal, please explain the reasons why we should not process your data. If the objection is justified, we will check the situation and either stop processing your data, or we will adjust it, or we will inform you of our mandatory and legitimate reasons which allow us to continue the processing.
11. When is my data deleted?
We store your personal data as long as it is necessary for the purposes of this data protection declaration, in particular for the fulfillment of our legal and contractual obligations. We will also store your personal data for other purposes if necessary, if and as long as the law permits us to further store it for certain purposes, including to defend against legal claims.
If you close your customer account, all data stored about you will be deleted. If the complete deletion of your data is not permitted or required by law, the data will be blocked for further processing.
What does locking mean?
By blocking data, it is ensured by restricting access rights and other technical and organizational measures that only a few employees have access to the data in question. These employees are only allowed to use the data for predetermined purposes (eg. eg in the event of a tax audit for submission to the tax administration).
Blocking takes place, for example, in the following cases:
Your order and payment data and possibly other data are subject to various legal retention obligations, which can be those of the Commercial Code (in Germany HGB) or in the tax regulations (in Germany AO. No d t ) The law obliges us to store data for tax audits and economic audits for a period of ten years. We can only permanently delete the data concerned when this period has expired.
Even if your data is not subject to a retention obligation, we can, in the cases permitted by law, waive an immediate deletion and instead arrange a blocking initially. This applies in particular to cases in which we may need the data in question for the further execution of the contract or for legal prosecution or legal defense (eg. eg in case of complaints). The decisive criterion for the duration of the blockade is then the statute of limitations. After expiry of the relevant limitation period, the data will be permanently deleted.
In the cases provided for by law, we can waive the cancellation, as long as we are dealing with anonymised or pseudonymised data and the cancellation makes it impossible or would seriously jeopardize the processing for scientific research or statistical purposes.
12. Like Madò pastry shops s. r l protect my data?
Your personal data is transmitted securely with us using encryption. This also applies to your order and customer login. We use the encryption system SSL (Secure Socket Layer) for this purpose. We also protect our web pages and other systems by means of technical measures against the loss, destruction, access, tampering or disclosure of your data by unauthorized persons.
13. Changes to this data protection declaration and contact persons
As we develop our websites and implement new technologies to improve our services for you, changes to these privacy notices may become necessary. We therefore recommend that you read this data protection declaration from time to time.
If you have any questions, you can contact our data protection officers at any time. The easiest way to contact them is info@melliot. it
Contact details of data protection officers Madò pasticcerie s. r l :
Madò Pastry Shops S. R L
Viale Volga n°129 Levante Bari Fair
70132 Bari (BA)
E-Mail: info@melliot. it