This cookie policy illustrates the types and methods of use of cookies on the website, in accordance with the provision of the Italian Data Protection Authority of May 8, 2014 ("Simplified Arrangements to Provide Information and Obtain Consent Regarding Cookies"). What are cookies? Cookies are text strings sent by the web server to the user's browser. They are automatically stored on the user's computer or mobile device and automatically sent back to the server each time the site is accessed. By default, almost all browsers are set to automatically accept cookies. In the browser settings, users can prevent cookies from being saved, delete those already saved, or select which ones they wish to keep. What cookies are used by the "MIWO.IT" website? The cookies used by the "Miwo.it" website are exclusively technical and therefore strictly necessary for the operation and provision of the service. Specifically, they are used to store the following information: The language selected by the user, valid for 1 year The unique browser session identifier to ensure that the user accesses the site from only one location at a time, valid for 24 hours Privacy Policy Information pursuant to Art. 13 of Regulation (EU) 2016/679 on the Protection of Personal Data (GDPR) and request for consent for the processing of personal data collected from the Data Subject This information is provided to inform you of the processing of your personal data. 1. Identity and contact details of the Data Controller. The Data Controller is Miwo.it srl., with registered office at Via Carrucci, 50063 Empoli, Florence. Email: info@miwo.it 2. Data provided voluntarily by users. The DPO designated by VGI, who will be the point of contact for data subjects, can be reached through the following contact channels: Email: info@miwo.it Mail: Miwo srl, Via Carrucci 218, 50063 Empoli, Florence 3. Purpose and legal basis of the processing. The user's personal data will be processed for the following purposes: a) Provision of services requested by the user; b) Direct and indirect marketing and market research; c) Profiling The processing referred to in letter a) is necessary to provide the service requested by the user, while the processing referred to in letters b) and c) requires your express consent through the use of specific cookies. Please note that direct marketing (carried out by miwo srl) and indirect marketing (carried out by miwo srl through appointed third parties) is aimed at collecting and using data that is relevant and limited to what is necessary for the purposes for which it is processed, to conduct studies, research, and market statistics, send advertising and informational materials, conduct direct sales or placement of products or services, send commercial information, and conduct interactive commercial communications. Profiling, on the other hand, consists of collecting information on industry behavior and habits in order to improve the services offered based on the needs of customers who have given specific consent. With regard to marketing and profiling activities, it is specified that, in the absence of specific consent from the user, the aforementioned activities cannot be carried out. 4. Recipients of personal data Within the scope of the indicated purposes, your data may be communicated to: 1) Miwo srl; 2) to companies and professional operators providing electronic data processing and software and IT consulting services, as well as the management of information services related to the above; 3) to companies and professional entities used for statistical surveys and/or market research and/or customer satisfaction surveys; 4) to professional advertising, marketing, and mailing agencies in Italy, always in relation to commercial initiatives related to the sector. For the entities indicated in points 1) and 3) to 5), only the category of recipients is indicated, as it is subject to frequent updates and revisions. Therefore, interested parties may request an updated list of recipients by contacting the Data Controller through the channels indicated in Article 1 of this Privacy Policy. 5. Data retention period: Personal data will be retained for the period of time strictly necessary to achieve the specific processing purposes for which the user has given his or her consent, and specifically: For the purposes indicated in letter a) of Article 3, for the time necessary to fulfill contractual obligations and, in any case, no later than 10 years from the time your data is collected for compliance with regulatory obligations and, in any case, no later than the legally established limitation periods for rights; For the purposes indicated in letter b) (i.e., for direct and indirect marketing and market research purposes) of Article 3, for 24 (twenty-four) months from the time consent is given to the processing; For the purposes indicated in letter c) (i.e., for profiling purposes) of Article 3, for 12 (twelve) months from the time consent is given to the processing. 6. Rights of the Data Subject The user may, at any time, exercise the rights indicated below. a. Access to personal data: obtain confirmation as to whether or not personal data concerning you are being processed and, where that is the case, access to the following information: the purposes, categories of data, recipients, retention period, the right to lodge a complaint with a supervisory authority, the right to request rectification or erasure, restriction of processing, or objection to processing, as well as the existence of automated decision-making; b. Request rectification or erasure of personal data or restriction of processing concerning you; "restriction" means the marking of stored data with the aim of limiting its processing in the future; c. Objection to processing: object, on grounds relating to your particular situation, to processing of data for the performance of a task carried out in the public interest or for the pursuit of a legitimate interest of the Data Controller; d. Data portability: in the case of automated processing based on consent or in performance of a contract, to receive the data concerning you in a structured, commonly used, and machine-readable format; specifically, the data will be provided to you by the Data Controller in .xml or similar format; e. Withdrawal of consent to processing for marketing purposes, whether direct or indirect, market research, and profiling; exercising this right does not in any way affect the lawfulness of processing carried out before its withdrawal; f. File a complaint pursuant to Art. 77 of the GDPR with the supervisory authority competent for your habitual residence, place of work, or the place where your rights were infringed. For Italy, the competent authority is the Italian Data Protection Authority (Garante per la protezione dei dati personali), which can be contacted using the contact details provided on the website http://www.garanteprivacy.it. The aforementioned rights may be exercised by sending a specific request to the Data Controller using the contact details indicated in Art. 1 of this policy. Requests relating to the exercise of your rights will be processed without undue delay and, in any case, within one month of the request; only in particularly complex cases and in the number of requests may this deadline be extended by an additional two (2) months. 7. Communication and provision of data. The provision of data by the user is mandatory as it is necessary to provide the requested service. Therefore, any refusal by the user to provide the data may result in the failure to provide the service, to the extent that such data is necessary for these purposes.