Privacy policy

Data controller

Mediabook S.r.l. operates the platform that publishes and displays the documents, and is the data controller for the data needed to run the service: browsing session, optional user account, shopping list and consent register.

The publisher of the document is responsible for its own measurement tools, where configured. Write to the contact below to obtain its details.

• Mediabook S.r.l., Via Peschiera 40, 42024 Castelnovo di Sotto (RE) , abuse@mediabook.net

To exercise your rights or for any question about this policy, write to abuse@mediabook.net.

Data processed

Depending on how you use the site, the following categories of data are processed.

• Technical browsing data: IP address, browser and device type, date and time of the request. Generated by the servers to serve the documents and to keep the service secure.
• Account data: name, email address and hashed password, where the publisher has set up restricted access to its documents.
• Shopping list: the products you add to the list, linked to a random identifier stored on your device. It contains no data identifying you.
• Consent register: the choice you made about cookies, its date, the policy version and a hashed fingerprint of the IP address, kept as proof of consent. The IP address is never stored in the clear.

Purposes and legal basis

• Delivering the service, that is displaying documents, handling optional restricted access and the shopping list. Legal basis: performance of a contract or pre-contractual measures, and legitimate interest in the security of the service.
• Measuring how documents are used and, where the publisher provides for it, marketing activities. Legal basis: your consent, which you can withdraw at any time without affecting processing already carried out.
• Keeping proof of the consent given, as required by article 7 GDPR. Legal basis: legal obligation.

Recipients and transfers

Data is processed by authorised staff and by the suppliers hosting the infrastructure, appointed as data processors. The measurement tools listed in the cookie policy are provided by third parties acting as independent controllers for processing carried out after collection.

Some of those providers may transfer data outside the European Economic Area, on the basis of the standard contractual clauses approved by the European Commission or of an adequacy decision. Details are set out in their own policies, linked from the cookie policy.

Go to the cookie policy

Retention

Session data is deleted automatically a few hours after the last activity. The shopping list and its identifier are kept for six months from last use. The consent register is kept for six years, the period needed to demonstrate consent. Data collected by measurement tools follows the retention periods set by their providers.

Your rights

You may at any time request access to your data, its rectification, erasure, restriction of processing and portability, and you may object to processing based on legitimate interest. Where processing relies on consent, you can withdraw it at any time from the cookie preferences.

You also have the right to lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it).