Shopping Cart
Privacy Policy
Index
Welcome to our website www.mannabag.it (the Site).
For us, your privacy and the security of your personal data are very important; therefore, we collect and manage your personal data with the utmost care and adopt specific measures to keep them safe.
Below you will find our “Privacy Policy”, which contains detailed information regarding the processing of personal data and the conditions related to our services.
1. General information
Who is the Data Controller?
Pelletterie Manna S.r.l.s. with registered office at Via Melito Iangano 9 - 83029 Solofra (AV) - VAT No.: 02882910645 - REA: AV 189868, is the Data Controller, that is, the entity that decides how and why to process your personal data.
You can always contact us by sending an email to customercare@mannabag.it or by calling 0825 1931148.
Who is the Data Processor?
The Data Processor, to whom you can address to exercise the rights under Art. 12 of GDPR 2016/679 and/or for any clarifications regarding data protection, is reachable by sending an email to: customercare@mannabag.it
2. What personal data do we collect?
The categories of personal data that the Site collects and processes when you browse or purchase on mannabag.it are as follows:
- a) We collect the personal data necessary to conclude and execute your purchase on mannabag.it, such as first and last name, email address, shipping address, billing address, telephone number and tax code;
- b) We collect your email address when you subscribe to our newsletter service;
- c) We process the personal data you provide when you contact our Customer Service to provide the requested assistance;
- d) With your prior consent, we collect and use your personal data for marketing purposes;
- e) For the registration of your user account (Private Area) and the use of services reserved for registered users, we collect your first and last name, your email address, your password and your date of birth. If you are a registered user, we collect information about your logins to the Private Area of the Site. With your express consent, by analyzing your personal data we can derive information regarding your interests and preferences in relation to our products and services, in order to present you with proposals and offers in line with your tastes. In case of authentication to the user account (Private Area) via external social networks, we collect from these third parties the data necessary for registration/authentication via Facebook and via Google. We also collect information about you from third parties, in particular Facebook. This information includes the following category of data: email address;
- f) We collect information about your navigation on the Site, such as the pages you visit and how you interact with each page, and we store this information on our servers;
- g) If you provide personal data of third parties, for example when you decide to purchase a product to be delivered to a friend or as a gift, the Site will ensure that the privacy notice is delivered to the third party at the time of first communication. We remind you that the use of third-party personal data is subject to data protection regulations.
We inform you that we do not process personal data relating to minors. By accessing the Site and using the services offered, you declare that you have reached the age of majority.
3. How do we use the personal data collected?
The Site collects and processes your personal data for the following purposes:
- Concluding and executing the contract for the purchase of the products offered. When you complete your purchase, we ask for the personal data necessary for contract execution activities, such as payment, anti-fraud checks if you choose to pay by credit or debit card, invoicing, shipping of the product and any return processing;
- Registration to the Site and use of services offered to registered users. Registration to the Site is possible by providing certain personal information necessary to guarantee your identification and the provision of services to registered users;
- Provision of the proposed services. To this end, the Site needs to collect, in relation to each service and its characteristics, the personal data necessary to perform the requested service;
- Management of requests to our Customer Service, which uses the personal data you provide to satisfy your information and assistance requests;
- Statistical analysis and surveys. We use certain information about your use of the Site to carry out analyses and statistical surveys in order to improve our offerings and services;
- Sending commercial and promotional communications after the purchase of one of our products, so-called “soft spam.” After purchasing one of our products on the Site, we will send to the email address you provided communications containing our commercial proposals on related products and services;
- With your express consent, we may use the contact details you provided for commercial communications about our products and services, to update you on news, new arrivals, exclusive products, our offers and promotions;
- Only with your consent, the Site may personalize your experience as a registered user, offering you previews and offers in line with your tastes and sending you personalized commercial communications according to your interests; these communications will be delivered exclusively by the methods you have chosen (email, SMS, phone, postal mail, WhatsApp).
Personalization is carried out by analyzing your previous purchases and the other information described in the previous paragraph “What personal data do we collect?”.
For all the activities described above, we will process your personal data mainly through IT and electronic tools; the tools we use guarantee high security standards, fully complying with the applicable legislation.
4. Cookie Policy
This Site uses tracking tools. To learn more, consult our Cookie Policy.
5. Legal basis for processing
We process your personal data only if at least one of the conditions provided by the current legislation is met, specifically:
- a) for the conclusion and execution of a contract to which you are a party.
When we process your data to conclude the purchase contract, we ensure that we use only the minimum information necessary for its execution. This legal basis covers data processing within the following activities:- Conclusion and execution of a contract for the purchase of products offered on mannabag.it;
- Registration to the Site and use of services reserved for registered users;
- Provision of services offered on mannabag.it;
- Management of your requests by our Customer Service.
- b) to fulfill a legal obligation.
In the event of concluding a contract for the purchase of goods, processing of the User’s data takes place to comply with the legal obligations to which the Site is subject in accordance with tax provisions and other applicable laws. You are free to decide whether to enter into a contract and whether to provide us with your data, but if you do, your data will be necessary and processed to fulfill those legal obligations. - c) for our legitimate interest.
Some of your personal data when purchasing products with a credit or debit card may be processed to perform anti-fraud activities: we have a legitimate interest in conducting such activities to prevent and pursue any fraudulent activities. - d) based on your consent.
We will carry out the following processing only if you have given us your express consent:- Conducting marketing activities and opinion polls and market research;
- Analysis of your browsing and consumption habits within your account usage (Private Area), in order to personalize your experience on our Site.
6. Who will process your data?
Your personal data will be processed by internal staff specifically instructed and authorized for processing. Your personal data will also be transmitted to third parties we use to provide our services; these parties have been properly selected and offer adequate guarantees for compliance with personal data protection regulations. These parties have been appointed as Data Processors and operate according to our instructions.
These third parties belong to the following categories: banking operators, internet service providers, companies specializing in IT and telematics services; couriers; companies conducting marketing activities; companies specializing in market research and data processing.
Your data may be transmitted to law enforcement and judicial and administrative authorities, in accordance with the law, for the ascertainment and prosecution of crimes, the prevention and safeguarding of public security, to allow us to ascertain, exercise or defend a right in legal proceedings, as well as for other reasons related to the protection of the rights and freedoms of others.
7. Transfer of data abroad
Management and storage of personal data will take place on servers of the Data Controller and/or third-party companies duly appointed as External Data Processors located within the European Union.
Personal data may be transferred abroad, in accordance with the current legislation, including to countries outside the European Union. Transfers to non-EU countries, beyond cases covered by Commission Adequacy Decisions, will be carried out with appropriate and suitable safeguards pursuant to Articles 46, 47 or 49 of the Regulation.
8. How long do we keep the data?
We retain your personal data for a limited period of time, varying depending on the type of activity involving the processing of your personal data. Once this period expires, your data will be permanently deleted or irreversibly anonymized. Your personal data is stored in compliance with the terms and criteria specified below:
- Data collected to conclude and execute contracts for the purchase of goods on mannabag.it: until the completion of administrative-accounting formalities. Billing-related data will be kept for ten years from the billing date;
- Data of registered Users: data will be kept until you request the deletion of your user account (Private Area);
- Payment data: until payment certification and the completion of related administrative-accounting formalities following the expiration of the withdrawal right and the deadlines for contesting payment;
- Data collected in the context of using the services offered: these data are kept until the service is terminated or the User unsubscribes from the service;
- Data related to Users’ requests to our Customer Service: data needed to assist you will be kept until your request is satisfied;
- Data used for commercial communications to users who purchase products (soft spam): these data are kept until service termination or until the User unsubscribes;
- Data provided for commercial communications, opinion polls, and market research: until the User requests termination of the activity and in any case within two years of the User’s last interaction of any nature with the Site;
- Data used to personalize the Site and display personalized commercial offers: until the User requests termination of the activity and in any case within two years of the User’s last interaction of any nature with the Site;
- Data used for market research and satisfaction surveys: until the User requests termination of the activity.
In any case, for technical reasons, the cessation of processing and the subsequent permanent deletion or irreversible anonymization of the personal data will be completed within thirty days from the periods indicated above.
9. Your rights
You may exercise your rights at any time regarding the specific processing of your personal data by the Site. Below you will find a general description of them and how to exercise them.
- Access and modify your data: you have the right to access your personal data and to request that they be corrected, modified or supplemented with additional information. If you wish, we will provide you a copy of your data in our possession.
- Withdraw your consent: you can withdraw at any time consent you have given for processing your personal data for any marketing activities. We remind you that marketing activities include sending commercial and promotional communications, conducting market research and satisfaction surveys to personalize the website and commercial offers based on your interests. Once we receive your request, we will promptly cease processing your personal data based on that consent, while processing based on other grounds will continue in compliance with applicable law.
- Object to processing: you have the right to object at any time to the processing of your personal data based on our legitimate interest, explaining your reasons; we will evaluate your request before acting on it.
- Delete your data: in cases provided by law, you can request the deletion of your personal data. After reviewing your request, if valid, we will promptly cease processing and delete your personal data.
- Request restriction of processing: you can ask to restrict processing when you contest data accuracy, when processing is unlawful but you oppose deletion, when data are no longer needed but you need them to exercise a right in court, or when you object to processing while we evaluate your objection. During restriction, we will retain but not process your data, except as needed for establishing, exercising or defending rights in court.
- Request your data or transfer them to another party (“data portability”): you can request to receive your data that we process based on your consent or contract with you in a structured, commonly used, machine-readable format. If technically feasible, we will transfer your data directly to another party you designate.
To exercise some of these rights, you can access your account (Private Area) or contact us at the details provided in section 1.
To ensure that user data is not misused, before fulfilling your request, we will ask for information to verify your identity.
10. Security measures
We protect your personal data with specific technical and organizational measures aimed at preventing illegitimate or fraudulent use of your data. In particular, we use measures guaranteeing: confidentiality, integrity, availability of your data, as well as resilience of systems and services processing them; the ability to restore data in case of a data breach. Furthermore, we commit to regularly test, verify, and evaluate these measures to ensure continuous improvement in data processing security.
11. Complaints
If you believe the processing of your personal data has been conducted unlawfully, you may file a complaint with the competent data protection supervisory authority. In Italy, complaints can be submitted to the Garante per la Protezione dei Dati Personali. More information on how to file is available on their website: http://www.garanteprivacy.it.
12. Changes to this notice
The constant evolution of our services may lead to changes in the processing of your personal data as described above. Consequently, this privacy notice may be updated and supplemented over time, including to reflect new legal developments in personal data protection.
We therefore invite you to periodically review its content: where possible, we will inform you promptly of any changes and their implications. The updated version of the privacy notice will always be published on this page, with the date of its last update.
13. Legislative references and useful links
The processing of your personal data is carried out in full compliance with Regulation (EU) 2016/679 (General Data Protection Regulation), Italian data protection laws and decisions of the Italian supervisory authority (http://www.garanteprivacy.it).
Last update: 29/04/2025