Privacy Policy prepared pursuant to EU Regulation 2016/679 of 27 April 2016 - GDPR.
This Privacy Policy is related to the site medmodelforest.net ("Site") managed by
Compagnia delle Foreste S.r.l., with registered office in via Pietro Aretino n ª 8, 52100 Arezzo - Italy. P.I. 01726650516.
In compliance with the provisions of Reg. EU 2016/679 (European Regulation for the protection of personal data) we provide you with the necessary information regarding the processing of personal data provided. The information is not valid for other websites that may be consulted through links on the websites in the domain of the owner, which is not to be considered in any way responsible for the websites of third parties. This is an information that is provided pursuant to art. 13 of Reg. EU 2016/679 (European Regulation for the protection of personal data) and is also inspired by the provisions of Directive 2002/58/EC, as updated by Directive 2009/136/EC on Cookies, as well as the provisions of the Provision of the Authority for the Protection of Personal Data of 08.05.2014 regarding Cookies and the EDPB Guidelines 05/2020 on consent under the GDPR, adopted on 04.05.2020.
Personal data that can be processed
«personal data» means any information concerning an identified or identifiable natural person («concerned»); the natural person who can be identified, directly or indirectly, with particular reference to an identifier such as name, identification number, location data, shall be considered identifiable, an online identifier or one or more characteristic elements of its physical, physiological, genetic, psychological, economic, cultural or social identity; (C26, C27, C30).
Navigation data
The computer systems and software procedures used to operate a website acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols. This category of data includes the IP addresses or domain names of computers and terminals used by users, the addresses in URI/URL (Uniform Resource Identifier/Locator) notation of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters related to the operating system and computer environment of the user (for more information v. Cookies policy of this site).
Data communicated by the data subject
The optional, explicit and voluntary sending of messages to contact addresses, as well as the completion and forwarding of forms on the site of the Owner, involves the acquisition of the sender’s contact data, necessary to respond, and any personal data included in the communications.
Specific information
Specific information will be present on the pages of the Site in relation to particular services or processing of the Data provided.
Cookies For more information on the cookies used by this website, see the cookie policy.
1. Who is the Data Controller? How to contact him?
Data controller, pursuant to art. 4 and 24 of Reg. UE 2016/679, is Compagnia delle Foreste S.r.l. with registered office in Via Pietro Aretino n.8 - 52100 Arezzo (AR) in the person of the legal representative.
To contact the Data Controller send an email to: This email address is being protected from spambots. You need JavaScript enabled to view it.
2. Purpose of processing, legal basis, data retention period and nature of the provision
THE CATEGORIES OF DATA REQUESTED FOR THE FOLLOWING PURPOSES ARE STRICTLY NECESSARY FOR THE EXECUTION OF THE PROCESSING, FOR ANY FURTHER REQUESTS FOR PERSONAL DATA SPECIFIC CONSENT WILL BE REQUIRED.
Purpose A) Navigation on the website.
• LEGAL BASIS: legitimate interest (Art. 6, par. 1 lett. f) and recital 47 GDPR): processing is necessary for the pursuit of the legitimate interest of the controller or third parties, provided that the interests or fundamental rights and freedoms of the data subject which require the protection of personal data do not prevail, taking into account the reasonable expectations of the data subject based on his or her relationship with the controller. Activities strictly necessary for the operation of the site and the provision of the navigation service on the platform.
• DATA RETENTION PERIOD: up to the duration of the browsing session. See the cookie policy
• NATURE OF THE CONFERRAL: necessary in order to allow navigation of the website.
Purpose B) Possible compilation form collect data for contacts.
• LEGAL BASIS: legitimate interest | request of the interested party (Art. 6, par. 1 lett. f) and recital 47
GDPR).
• DATA RETENTION PERIOD: for the time necessary to provide feedback to the request and in any case no later than 1 year.
• NATURE OF THE PROVISION: the provision of data is necessary to allow the owner to provide feedback to requests received through the form. Failure to provide data will make it impossible to obtain the requested information.
Purpose C) User registration
• LEGAL BASIS: Fulfilment of contractual obligations arising from the registration (art. 6, par. 1 lett. b) GDPR) legal obligation (art. 6 par. 1 lett. c)
• DATA RETENTION PERIOD: for the time necessary to provide feedback to the request and in any case until the request for cancellation of the account.
• NATURE OF THE PROVISION: the provision of data is necessary to allow the owner to provide feedback to requests received through the registration form. Failure to provide data will make it impossible to obtain the requested information.
Purpose D) Acquisition of goods or services
• LEGAL BASIS: Fulfilment of contractual obligations arising from the registration (art. 6, par. 1 lett. b) GDPR) legal obligation (art. 6 par. 1 lett. c)
• DATA RETENTION PERIOD: for the time necessary to respond to the request and in any case not beyond the legal retention obligations (10 years)
• NATURE OF THE PROVISION: the provision of data is necessary to allow the owner to provide feedback to requests received through the purchase form. Failure to provide data will make it impossible to use the requested service.
Processing of the purchase order
We collect and process user data in order to process, accept and ship orders: the email address to send documentation, receipts, order confirmations and invoices, as well as to arrange delivery and communicate the shipping confirmation. The specified payment service provider (e.g. paypal, mastercard, etc.) processes credit card details to manage payments.
Payment management services allow this Application to process payments by credit card, bank transfer or other means. The data used for the payment are acquired directly from the operator of the payment service requested without being in any way treated by this Application. Some of these services may also allow the scheduled sending of messages to the User, such as emails containing invoices or notifications regarding payment.
Paypal (Paypal) Paypal is a payment service provided by Paypal Inc., which allows the User to make online payments. Personal Data processed: various types of Data as specified in the privacy policy of the service.
Place of treatment: Consult the privacy policy of Paypal - Privacy Policy.
Purpose E) Commercial and promotional communications activities
• LEGAL BASIS: consent to processing (art. 6 par. 1 lett. a)
• DATA RETENTION PERIOD: for the time necessary to provide feedback to the request and in any case no later than 12 months.
• DATA RETENTION PERIOD:The data subject may object to the processing in an easy and free way.
• NATURE OF THE PROVISION: The provision of data is optional and in the absence of the same, your data will not be processed for the pursuit of this purpose, the refusal of the provision will not affect the usability of other services.
Purpose G) Sending activities Newsletter for information purposes
• LEGAL BASIS: consent to processing (art. 6 par. 1 lett. a)
• DATA RETENTION PERIOD: for the time necessary to provide feedback to the request and in any case no later than 24 months.
• DATA RETENTION PERIOD: The data subject may object to the processing in an easy and free way
• NATURE OF THE PROVISION: The provision of data is optional and in the absence of the same, your data will not be processed for the pursuit of this purpose, the refusal of the provision will not affect the usability of other services.
3. To whom will the personal data collected be communicated?
The personal data provided will be shared with subjects who will process the data as data processors (art. 28 of Reg. EU 2016/679) and/or as natural persons acting under the authority of the Data Controller and Data Processor (art. 29 of Reg. EU 2016/679), for the purposes listed above.
Precisely, the data will be shared with:
- companies contractually linked to Compagnia delle Foreste S.r.l.;
- persons providing services for the management of the information system used by Compagnia delle Foreste S.r.l. and telecommunications networks;
- self-employed persons, firms or companies in the field of assistance and counselling;
- persons providing services for the management of the above-mentioned activities (subjects for communication, brochure printing, leaflets, websites, films);
- operators of platforms for the services listed above (hosting of sites, Youtube);
- commercial partners / sponsors, only with prior consent;
- competent authorities for the fulfilment of legal obligations and/or provisions of public bodies,
- to other members on request.
The list of Data Processors is constantly updated and available by writing to This email address is being protected from spambots. You need JavaScript enabled to view it. or at the registered office of the Data Controller.
4. Compagnia delle Foreste S.r.l. transfers data outside the EU?
Some of the third parties listed in the previous paragraph "Who will process your data?" may be based in countries outside the European Union which nevertheless offer an adequate level of data protection, as established by specific decisions of the European Commission.
So, in case it is necessary to transfer your data to non-EU countries, this will be in compliance with the limits and conditions set out in articles. 44 and s.s. del Reg. EU 2016/679.
5. Is there an automated process?
We do not use decision-making processes based on automatic processing, including profiling.
6. What are your rights? How can you practice them?
You can assert your rights as expressed by art. 15, 16, 17, 18, 19, 20, 21, 22 of EU Regulation 2016/679, by contacting the owner at This email address is being protected from spambots. You need JavaScript enabled to view it. . You have the right, at any time, to ask the Data Controller for access to your personal data, rectification, deletion of the same, restriction of processing and portability of your data. In addition, you have the right to object, at any time, to the processing of your data based on legitimate interest and, in the cases provided for, you have the right to revoke the consent given without affecting the lawfulness of the processing based on consent before revocation.
To no longer receive information and/or promotional/commercial communications, it will be sufficient to write at any time an e-mail to This email address is being protected from spambots. You need JavaScript enabled to view it. or using our automatic deletion systems provided for e-mail only.
You have the right to lodge a complaint with the Data Protection Authority (Supervisory Authority www.garanteprivacy.it). In the case of a request for data portability, the Data Controller will provide you with personal data concerning you, without prejudice to paragraphs 3 and 4 of art. 20 of Reg. (EU) 2016/679.
7. Further information
The Data Controller reserves the right to change, update, add or remove parts of this Privacy Policy at its discretion and at any time. In order to facilitate such verification, the information will contain the update date.
Date of last update: 29/03/2021
COOKIE POLICY
Cookies are small text files created by a server and are stored on the device used by the User to navigate the site. They allow the site to provide the User with all the features, a better and complete browsing experience, and to be aware of the preferences and behaviors of the User.
Compagnia delle Foreste S.r.l. uses two types of cookies, session and persistent.
Technical cookies allow the User to safely and efficiently browse the website; these cookies are not permanently stored on the User's device and are deleted when the browser is closed.
All cookies other than technical cookies, as indicated above, are installed or activated only with the consent expressed by the user the first time he visits the site. Consent can be expressed in a general manner, interacting with the short notice banner on the landing page of the site, in the manner indicated in that banner (by clicking on the OK button or the X button, or continuing navigation, including scrolling or through a link), or can be provided or denied selectively, in the manner indicated below. This consent is tracked during subsequent visits. However, the user always has the possibility to revoke all or part of the consent already given.
Compagnia delle Foreste, on its website www.medmodelforest.net, uses a NON-TECHNICAL statistical cookie, i.e. GOOGLE ANALITICS, the useful links below:
Google Analytics Cookie Policy: https://developers.google.com/analytics/devguides/collection/analyticsjs/cookie-usage
Deactivating Google Analytics cookies: https://tools.google.com/dlpage/gaoptout?hl=en
The user has the possibility to oppose also through the deactivation via browser:
INTERNET EXPLORER https://support.microsoft.com/it-it/help/17442/windows-internet-explorer-delete-manage-cookies
GOOGLE CHROME https://support.google.com/accounts/answer/61416?hl=en
SAFARI https://www.apple.com/legal/privacy/
DATA 25.05.2018