Subscribe to our Newsletter and receive a 10% discount on your next purchase!

Privacy policy

Pursuant to article 13 and 14 of the European Regulation 2016/679 (GDPR) and in line with the Legislative Decree n. 196 of June 30 2003, and subsequent amendments and additions introduced by the Legislative Decree n. 101 of 10 August 2018, Moretti S.r.l., as Data Controller for Personal Data Processing, acting through its legal representative, hereby informs you about the purposes and modalities of the collected personal data, their scope of communication and dissemination, as well as their nature and provision and specifically about the following.
1.Ā Purpose
Any personal data related to your person that are object of the processing and that are held by the Data Controller or which shall be requested at a later stage or communicated by third parties are necessary and come from data processing operations that you provided when registering for the services provided by Moretti S.r.l. and shall be used to:
1.1.Ā without your express consent (pursuant to article 6 letter b), e) of the GDPR), for the following purposes:
  • execution of the services as promoted in the website www.paolomoretti.shop; www.fur.it, www.paolomorettifurs.com, www.paolomoretti.ru
  • fulfill pre-contractual, contractual and tax obligations deriving from an existing relationship with you;
  • fulfill legal or regulation requirements as well as a European norm or order from Authorities;
  • exercise the rights of the Data Controller such as the right of defence;
  • finalise the purchase of the selected items and fulfil the agreement with you, as well as exercise our rights, including our right of defence in court;
  • manage the services related to your purchase even at the post-sale stage (e.g. Customers Service);
  • verify, directly or indirectly, the Userā€™s methods of payment to prevent insolvency, fraudulent activities or in line with the applicable money laundering regulations as applicable.
1.2. only with your prior and specific consent (pursuant to article 7 of the GDPR and subsequent amendments and additions and to article 130 of Legislative Decree 196/2003), for the following Marketing Purposes:
  • to send you by e-mail, mail and/or text message and/or phone calls, newsletter, commercial communications and/or advertising material on products or services offered by the Data Controller and customer satisfaction
    surveys on the quality of services provided;
  • to send you by e-mail, mail and/or text message and/or phone calls commercial communications and/or advertising material from third parties (e.g. business partners, insurance companies);
  • to send you, also by e-mail, market research requests, related to the products or services offered by the Data Controller.
We hereby inform you that if you are already our customer, we could send you commercial communications related to services and products of the Data Controller similar to those you already used, except if you deny your consent (pursuant to article 130 c. 4 of Legislative Decree 196/2003 and subsequent amendments and additions).
2.Ā Modalities
Personal data is processed using automated means and/or paper support by persons who are specifically appointed and it is carried out by means of the operations outlined in article 4 n. 2) of the GDPR and in detail: collection, recording, organisation, storage, consultation, adaptation or alteration, selection, extraction, comparison, use interconnection, blocking, dissemination, erasure or destruction of data. Your personal data are subject to both paper, electronic and or automated processing.
We also inform you that your personal data shall be processed in compliance with the modalities set forth in the GDPR 2016/679, namely:
  1. processed lawfully and fairly;
  2. collected and recorded for specific, explicit and legitimate purposes;
  3. accurate and, where necessary, kept up to date;
  4. relevant, complete and not exceeding the purposes of the processing
3. Data Communication and Dissemination
Personal data may be processed by the employees of Moretti S.r.l. for the purposes indicated in point 1) above. These designated employees shall receive adequate training and operating instructions from Moretti S.r.l. and shall work under direct authority of the designated Data Processor..
Moretti S.r.l. might communicate personal data to third parties belonging to the following categories, to perform functional purposes such as administrative, accounting and tax activities and only if these activities are deemed necessary to comply with the obligations within the parties:
  • public authorities and supervisory bodies;
  • subjects who carry out collection and processing of data necessary for the purposes required in the contractual relationship with customers;
  • insurance companies;
  • credit verification companies;
  • companies carrying out customer satisfaction activities;
  • companies carrying out storage or data entry;
  • companies involved in the purchase order execution, both during the selling and the post-selling phase, such as mail order catalogue companies, customer service and email service providers.
Personal data processing by third parties, acting as independent data processors, shall be carried out under the principle of fairness and the provisions of the laws. The collected personal data will not be disseminated by Moretti S.r.l.
4.Ā DataĀ Transfer
Personal data are stored in servers located within the European Union. It is understood that the Data Controller, if deemed necessary, reserve the right to move the servers outside of the EU. In such a case, the Data Controller
guarantees that the transfer of data outside of the EU shall take place in line with applicable legal provisions and subject to entering into the standard contractual clauses provided for by the European Commission.

5.Ā Incorrect or no communication
The provision of data for the purposes referred to in article 1.1 is mandatory. In their absence, we shall not be able to guarantee the services outlined in Article 1.1.
The provision of data for the purposes referred to in art. 1.2 is optional. You can, therefore, decide to not provide any data or to subsequently deny the possibility of processing data which had been provided earlier. In this case, you shall
not be able to receive newsletters, commercial communications, and advertising material concerning the services offered by the Data Controller. However, you shall still be entitled to the services referred to in Article 1.1.
6. Rights of the Data Subject
We inform you that as Data Subject you have the rights listed below, that you may exercise by sending a specific request to the Data Controller and/or to the Data Processor.
Art. 15- Right of Access
The data subject shall have the right to obtain from the Data Controller confirmation as to whether or not personal data concerning him or her are being processed, and, where that is the case, access to the personal data and information on the processing.
Art. 16 ā€“ Right to rectification
The data subject shall have the right to obtain from the controller without undue delay the rectification of inaccurate personal data concerning him or her. Taking into account the purposes of the processing, the Data Subject shall have the right to have incomplete personal data completed, including by means of providing a
supplementary statement.
Art. 17 ā€“ Right to erasure (right to be forgotten)
The data subject shall have the right to obtain from the Data Controller the erasure of personal data concerning him or her without undue delay and the Data Controller shall have the obligation to erase personal data without undue delay.
Art. 18 ā€“ Right to restriction of processing
The Data Subject shall have the right to obtain from the Data Controller restriction of processing where one of the following applies:
  1. the accuracy of the personal data is contested by the data subject, for a period enabling the Data Controller to verify the accuracy of the personal data;
  2. the processing is unlawful and the Data Subject opposes the erasure of the personal data and requests the restriction of their use instead;
  3. the Data Controller no longer needs the personal data for the purposes of the processing, but they are required by the Data Subject for the establishment, exercise or defense of legal claims;
  4. the Data Subject has objected to processing pursuant to Article 21 paragraph 1 pending the verification whether the legitimate grounds of the Data Controller override those of the data subject.
Art. 20 ā€“ Right to data portability
The data subject shall have the right to receive the personal data concerning him or her, which he or she has provided to a controller, in a structured, commonly used and machine-readable format and have the right to transmit those data to another controller without hindrance from the controller to which the personal data have
been provided.
In exercising his or her right to data portability pursuant to paragraph 1, the data subject shall have the right to have the personal data transmitted directly from one controller to another, where technically feasible.
Art. 21 ā€“ Right to object
The data subject shall have the right to object, on grounds relating to his or her particular situation, at any time to processing of personal data concerning him or her pursuant to point (e) or (f) of Article 6, paragraph 1, including profiling based on those provisions.
Art. 22 - Automated individual decision-making, including profiling
The data subject shall have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning him or her or similarly significantly affects him or her.
The Data Subject shall also have the right, at any time, to withdraw consent to process personal data as well as the right to lodge a complaint with a supervisory authority in case of unlawful processing of personal data.
The Data Subject shall exercise his or her rights addressing the Data Controller.
7. Data Controller
The Data Controller is Moretti S.r.l., a company under the Italian law with registered office in Passaggio Duomo, 2 ā€“ 20123 Milano, in the person of its legal representative pro tempore.
The external Data Processor managing the website is Ensolab S.r.l.s., Via private del Gonfalone, 3 ā€“ 20123 Milano.
8. Storage Period
Your personal data shall be stored for a period of time not exceeding the necessary for the above-mentioned purposes. In particular, your personal data shall be processed for the entire period of the signed contract in relation with the service we provide and also for the subsequent period:
  • within the terms established by the current legislation;
  • within the limits under the legislation and regulations about the data storage (for instance tax deductions);
  • within the period necessary to protect the rights of the data subject in case of any disputes in connection with the services provided by us.
Moretti S.r.l. has identified the risks that may affect privacy and has implemented procedures, technical and organizational measures (including physical ones) to safeguard your personal data and prevent destruction, loss, improper use or unauthorized disclosures of these data.

9. Nature of the data provision and processing without consent
In line with the current legislation on the processing of personal data, some of the aforementioned personal data may be processed without consent as they are collected to comply with legal obligations or for the execution of obligations arising from the contract.
Pursuant to article 7 of the Legislative Decree n. 196 of June 30 2003, and subsequent amendments and additions introduced by the Legislative Decree n. 101 of 10 August 2018 in line with the European Regulation 2016/679 (GDPR), some types of data may be processed only with the explicit consent of the data subject.
The provision of data and the related consent to process the personal data are thus mandatory in relation with contractual or legal obligations even outside of the European Community.
The refusal to provide the data will obligatorily lead to the termination of any relationship whatsoever, not allowing the processing of personal data.
In order to improve services and products, the Site may send emails to customers containing communications, promotions, discounts, feedback requests or updates. Clients are free to withdraw their consent to receive these communications at any time (for instance, by clicking on the link inside the email).