Privacy Policy

This Privacy Policy describes how we collect, use, and manage personal data in accordance with Article 13 of Italian Legislative Decree No. 196/03 (Personal Data Protection Code) and Articles 13 and 14 of European Regulation 679/2016 (hereinafter also referred to as the “GDPR”).

This notice applies solely to this website and not to any other websites that may be accessed by the user via links. This Policy is based on Recommendation No. 2/2001 adopted on May 17, 2001, by the European Data Protection Authorities, gathered in the Working Party established under Article 29 of Directive 95/46/EC. The recommendation identifies minimum requirements for the collection of personal data online, and in particular, the methods, timing, and nature of the information that data controllers must provide to users when they access web pages, regardless of the purpose of the connection.

We therefore invite you to review our Privacy Policy as set out below.

1. Data Controller

The Data Controller is Messina Carmelo Roberto, with registered office at VIA KAHN, 4, 39044 – EGNA (BZ), Italy.
Email: info@ilmiosmoking.com
Phone: +39 02 87159289

2. Data Processor

The Data Processor is Messina Carmelo Roberto.
For any request relating to the processing of your personal data, you may contact us at info@ilmiosmoking.com or by phone at +39 02 87159289.

3. Types of Personal Data Collected

This website collects the following personal data:

• Identification data (first name, last name, email address, phone number, etc.).

• Browsing data (IP address, browser type, usage data).

• Payment and billing data, where applicable.

• Any other information voluntarily provided by users through forms or direct communications.

It is important to note that the software procedures used to operate this website acquire certain personal data during their normal operation, the transmission of which is implicit in the use of Internet communication protocols.

Although such information is not collected to be associated with identified users, by its very nature it could, if combined with data held by third parties (e.g., the user’s Internet service provider), allow users to be identified. This category includes IP addresses or domain names of the computers used by users connecting to the site, URI (Uniform Resource Identifier) addresses of requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the server’s response (successful, error, etc.), and other parameters relating to the user’s operating system and IT environment.

Such data are used solely for the purpose of obtaining anonymous statistical information on website use and to ensure its proper functioning.

The Data Controller and, depending on the requested service, the designated Data Processor retain connection/navigation logs for a limited period in accordance with applicable laws, in order to respond to any requests from judicial authorities or other authorized public bodies investigating potential cybercrimes.

Apart from what is specified for browsing data, users are free to provide personal data requested in service registration forms. However, certain fields may be marked as mandatory. These data are necessary to provide the requested service. Failure to provide such data will make it impossible to deliver the service.

At the time personal data are provided, pursuant to Article 13 of Legislative Decree No. 196/03 and Articles 13 and 14 of the GDPR, the data subject is provided with a concise, complete, and transparent privacy notice regarding the purposes and methods of processing, whether the provision of data is mandatory or optional, the consequences of refusal, the subjects or categories of subjects to whom personal data may be disclosed, the scope of data dissemination, the rights provided under Article 7 of Legislative Decree No. 196/03 and Articles 15 et seq. of the GDPR (access, rectification, updating, correction, erasure due to legal violations, objection to processing, etc.), and the identity and registered office of the Data Controller and any Data Processors.

Where required by law, the data subject is asked to provide free, specific, informed, and documented consent. If personal data are provided at different stages, additional notices may be supplied and new consents requested in accordance with the Privacy Code and the GDPR.

4. Purpose of Processing

Personal data will be processed for the following purposes:

• To provide the services requested by the user.

• To improve user experience and our website.

• To respond to user inquiries.

• To comply with legal or regulatory obligations.

• To manage any disputes or complaints.

Any new processing activities unrelated to the stated purposes will only be initiated after providing a new notice to the data subject and, where required, obtaining consent in accordance with Legislative Decree No. 196/03 and the GDPR.

In any case, personal data will not be disclosed or disseminated to third parties without the prior consent of the data subject, except in cases expressly provided for by Article 24 of Legislative Decree No. 196/03 and the GDPR.

5. Legal Basis for Processing

The processing of your personal data is based on:

• The user’s consent for the specified purposes.

• The necessity to perform a contract or to take pre-contractual steps at the data subject’s request.

• Compliance with legal obligations to which we are subject.

• The legitimate interest of the Data Controller, such as improving our services and ensuring security.

---

6. Recipients of Personal Data

Your personal data may be shared with:

• Service providers acting on behalf of the Data Controller (e.g., hosting providers, IT maintenance services, etc.).

• Competent authorities, where required by law.

In any event, your personal data will not be sold or transferred to third parties for commercial purposes without your explicit consent.

7. Data Retention

Personal data will be retained for the time strictly necessary to achieve the purposes for which they were collected, taking into account applicable legal and regulatory obligations.

8. User Rights

You have the right to:

• Access your personal data.

• Request rectification or erasure of your data.

• Object to processing or request restriction of processing.

• Obtain data portability.

• Withdraw consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal.

To exercise your rights, you may contact the Data Processor using the contact details provided above.

9. Security Measures

The Data Processor adopts appropriate technical and organizational measures to ensure the security of personal data and prevent unauthorized access, loss, or damage. These measures comply with the minimum security requirements established by the Italian legislator (Technical Regulations concerning minimum security measures under Articles 33 to 36 of Legislative Decree No. 196/03).

Data subjects have the right at any time to obtain confirmation of the existence or non-existence of their personal data and to know their content and origin, verify their accuracy, request integration, updating, rectification (Article 7 of Legislative Decree No. 196/03 and Article 16 of the GDPR), as well as request erasure, anonymization, or blocking of data processed unlawfully, and object, for legitimate reasons, to their processing.

The Company assumes no responsibility for:

• The rules and methods governing the processing of personal data by other websites accessible through links on our pages.

• The content of any email services, web spaces, or chat forums provided to users.

Processing related to web services offered by this website takes place at the Company’s premises and, where applicable, at the offices of the Data Processors, and is handled by authorized personnel responsible for managing requested services, marketing activities (where requested by the user), data retention, and occasional maintenance operations.

10. Changes to the Privacy Policy

This Privacy Policy may be updated periodically. Users will be informed of any changes through notices published on the website or through other appropriate means.

Last updated: September 26, 2025