Information pursuant to and for the purposes of art. 13, REG. EU 2016/679 Effective from 25/05/2018 - Updated on 02.12.2025
Dear Customer,
Pursuant to art. 13 of REG. EU 2016/679, we provide you with the following information specifying that for each processing you are free to provide your personal data, thus giving explicit consent to the related processing, for the purposes highlighted in the following paragraphs.
1) Joint Data Controllers - Art. 26 GDPR
Pursuant to Art. 26 of EU Regulation 2016/679 ("GDPR"), we inform you that your data is jointly processed by:
1. ORA SRL with registered office in Naples at Via Giovanni Porzio SC Centro Direzionale Isola E7 VAT number 08278161214
2. MMP Srl, with registered office in Naples at Via Giovanni Porzio SC Centro Direzionale Isola E7, VAT number 10837791218,
The internal data processing manager for both companies is Dr. Boccia Valentina, domiciled at Via Nuova Saviano no. 142, San Gennaro Vesuviano.
The companies (jointly "Joint Controllers") have signed a joint processing agreement pursuant to Art. 26 GDPR for the shared management of the website www.modamarepositano.com, the customer database, and related activities.
In particular, they have transparently defined:
- the technical and organizational security measures;
- the single point of contact for Data Subjects;
- the management of requests to exercise rights;
2) Essential parts of the Joint Controller Agreement Art. 26 par. 2 GDPR
The obligations of the parties regarding have been determined:
- Data collection and management of the e-commerce platform;
- Order management, administrative activities, and customer support;
- Marketing activities and promotional communications;
- Data security and management of breaches (data breach).
- Exercise of data subjects' rights.
3) Single point of contact for data subjects
The single point of contact designated for the exercise of privacy rights is: info@modamarepositano.com jointly managed by both Co-Owners.
4) Purposes of the processing for which the data are intended
The processing of the provided personal data has the following specific purposes:
IF YOU PLACE A PURCHASE ORDER: The Co-Owners collect and process the Customer's personal data for the collection and execution of purchase orders, for any complaints following the purchase, and to provide the Customer with available services. Such data are necessary for managing purchase orders, also with commercial partners (e.g., logistics service providers, couriers, banks, etc.). It is advisable to provide a correct delivery address and phone number to allow the Co-Owners to promptly and correctly execute an accepted purchase order. A phone number is also necessary to allow the Co-Owners to contact the Customer for any clarifications and to enable commercial partners to correctly execute the Customer's purchase orders. The e-mail address is finally necessary for the Co-Owners to communicate the order receipt confirmation to the Customer and for other possible communications. The e-mail address is also used at the time of Customer identification to allow access to their account.
IF YOU ACCESS THE RESERVED AREA: The Customer's personal data and those concerning their purchase orders are saved in the Co-Owners' system, but will not be freely accessible for security reasons. The Co-Owners guarantee each Customer access to a reserved area through a protected password. In this area, the Customer can view all data concerning completed and ongoing purchase orders and can also manage their personal data, any bank details, and those related to the subscription to the newsletter service. The Customer is required to handle access data in compliance with current regulations and not to disclose them to third parties. The Co-Owners will not be in any way responsible for incorrect or improper use of the password by the Customer. The Co-Owners use the Customer's data for promotional purposes. The Customer's e-mail address will be used exclusively within the limits prescribed by applicable law. The Customer will regularly receive purchase advice via e-mail. It is possible to stop receiving these promotional messages free of charge by requesting it via e-mail to Info@modamarepositano.com
IF YOU ACCEPT THAT YOUR DATA BE PROCESSED FOR "MARKET RESEARCH AND OPINION POLLS": the Customer's personal data is also processed for the purpose of conducting market research and opinion polls. Their use is anonymous and exclusively for the purpose of compiling statistics for the Co-Controllers. The Customer has the right to object to the processing at any time. The answers provided by the Customer in such market research and opinion polls are neither disclosed to third parties nor made public. The answers to our survey questions are not stored together with the email address.
IF YOU DECIDE TO SUBSCRIBE TO THE NEWSLETTER: in the newsletters the Customer will find information on advantageous offers from time to time. The Co-Controllers invite the Customer to also enter personal data (for example, their name) in the newsletter settings so that they can personally address the Customer. The Co-Controllers process the data collected within the newsletter service in order to personalize and adapt the services to the interests and preferences of the Customer, as well as for promotional purposes and market research. The Co-Controllers store the collected data, it being understood that such data will in any case be used solely for the purposes of this information notice.
IF YOU BROWSE WEBSITES AND NEWSLETTERS: when the Customer visits the websites owned by Ora srl and MMP srl (for example modamarepositano.com ), even when accessed from a newsletter link, some data is collected and saved. Other data such as the access date, the http response code, and the website from which the redirection occurred (for example www.google.it) as well as the amount of data (bytes) transmitted may also be saved. Data analysis is carried out only in a strictly anonymous form. This process allows the Co-Controllers to tailor the information contained in the offers to the interests of the newsletter subscribers. The Customer is free to stop receiving any communication free of charge by requesting it via e-mail at info@modamarepositano.com
SAVING OF PERSONAL DATA THROUGH COOKIES: It is not necessary to accept the use of cookies while browsing the websites owned by Ora srl and MMP srl (for example: modamarepositano.com ) However, the Customer is informed that the use of the "cart" function and the sending of any orders are only possible with the activation of cookies. On the websites owned by ORA srl and MMP srl (for example modamarepositano.com), cookies are used. Cookies are text files recorded on a computer medium that allow the recording of certain parameters and data communicated to the data controller's IT system through the browser used by the Customer and enable an analysis of their habits in using a particular website. This saving allows the data controllers to adapt their website to the Customer's needs and also facilitates its use. Many of the cookies used are automatically deleted from the Customer's computer hard drive at the end of each browsing session (hence the name "session cookie"). However, there are cookies that remain on the hard drive. Their permanence is quite long (a few years) for reasons of greater convenience. After a first visit to the site, the system will be able to recognize on each subsequent visit that the Customer has already been on that site and the Customer's requests and preferred data will therefore be retrieved (long-lasting cookies). These cookies will allow the Customer not to have to re-enter their password and fill out forms at each new access. Browsers generally limit the use of cookies, although these allow freer access to the offers present on the websites owned by ORA srl and MMP srl (for example modamarepositano.com). Cookies can also be disabled. The Customer can refuse the installation of cookies by selecting the corresponding parameters in the specific browser options. It should be noted, however, that in this way the Customer will not be able to fully enjoy some functions of the site. The Customer consents to the registration of the username and password in cookies after the browsing session is closed and their activation at the time of the next visit. The Customer can revoke this authorization at any time, with effects on the future.
SECURE TRANSFER OF PERSONAL DATA: The Customer's personal data is transferred using SSL protection certificates. This applies both to browsing and to placing purchase orders as well as to the Customer's reserved access to their own account.
TRANSFER TO THIRD PARTIES OF YOUR PERSONAL DATA: To fulfill the purposes set out in this Privacy Policy, it may be necessary for ORA srl and MMP srl to process Your Personal Data to the extent that they are directly involved in each purpose (whose activities concern the sectors of clothing, household items as well as any other complementary sector, in addition to development and support for e-commerce activities). It may also be necessary to transfer Your Personal Data to third parties who provide us with support services, such as financial institutions, entities combating fraud, providers of technological, logistical, transport and delivery services, customer support services and/or services that analyze transactions carried out on the Platform in order to offer users sufficient guarantees in commercial operations, etc. These entities are appointed Data Processors or data processors and will therefore process the data in accordance with this Privacy Policy.
The Joint Controllers also declare that Personal Data may be transferred to third parties for marketing and/or promotional purposes.
5) Methods of processing and data retention period
We remind You that You are free to provide Your personal data for the purposes highlighted in the previous paragraph. Failure to provide Your personal data for these purposes may mean that it will not be possible to manage Your request in relation to that specific data processing.
The processing of data will take place in full compliance with the principles of confidentiality, correctness, necessity, relevance, lawfulness and transparency imposed by the Regulation for the time necessary to achieve the purposes for which the data were collected and in any case no longer than 10 years from their collection for Service purposes or, in the case of purchase of goods, for the time necessary to execute the contractual conditions relating to the coverage of the Legal warranty. For the analysis of Your consumption choices, where authorized by You, Your purchases with a historical depth of no more than 5 years will be examined.
6) Scope of communication and dissemination of data
In relation to the purposes indicated in point 1, data may be communicated to the following subjects:
a) all subjects who have the right of access to such data by virtue of regulatory provisions, for example Police and Public Administration bodies in general;
b) our collaborators, employees, within the scope of their respective duties, who have been appointed and authorized to process the data provided by you;
c) all those natural and/or legal persons, public and/or private when the communication is necessary or functional to guarantee legal obligations in the ways and for the purposes illustrated above
d) service providers who process personal data on behalf of ORA srl and MMP srl, for example to process data related to credit cards and payments, shipping and deliveries, hosting, to manage data, for sending e-mails, sms and other types of communication, for research and analysis, to manage product promotions, as well as to administer certain services. When we use third-party service providers, we enter into agreements that require them to adopt appropriate technical and organizational measures to protect personal data.
e) Other third parties, where consent has been given.
7) Rights pursuant to arts. 15, 16, 17, 18, 20, 21 and 22 of REG. EU 2016/679
Reminding L that if we have obtained consent for the processing of personal data, You have the right to withdraw consent at any time. We inform You that in Your capacity as Data Subject, You have, in addition to the right to lodge a complaint with a supervisory authority, the rights listed below, which You may exercise by submitting a specific request to the Joint Controllers and/or the data processor, as indicated in point 9.
Art. 15 – Right of access
The data subject has the right to obtain from the data controller confirmation as to whether or not personal data concerning them are being processed and, where that is the case, access to the personal data and information about the processing.
Art. 16 – Right to rectification
The data subject has the right to obtain from the data controller the rectification of inaccurate personal data concerning them without undue delay. Taking into account the purposes of the processing, the data subject has the right to obtain the completion of incomplete personal data, including by providing a supplementary statement.
Art. 17 – Right to erasure (right to be forgotten)
The data subject has the right to obtain from the data controller the erasure of personal data concerning them without undue delay and the data controller has the obligation to erase personal data without undue delay.
Art. 18 – Right to restriction of processing
The data subject has the right to obtain from the data controller restriction of processing when one of the following applies.
a) the data subject contests the accuracy of the personal data, for the period necessary for the data controller to verify the accuracy of such personal data;
b) the processing is unlawful and the data subject opposes the erasure of personal data and requests instead that their use be restricted;
c) although the data controller no longer needs them for processing purposes, the personal data are necessary for the data subject for the establishment, exercise, or defense of a right in court;
d) the data subject has objected to processing pursuant to Art. 21, paragraph 1, pending verification of the possible prevalence of the legitimate grounds of the data controller over those of the data subject.
Art. 20 – Right to data portability
The data subject has the right to receive personal data concerning them, provided to a data controller, in a structured, commonly used, and machine-readable format and has the right to transmit those data to another data controller without hindrance from the data controller to whom the data were provided.
In exercising their rights regarding data portability under paragraph 1, the data subject has the right to obtain the direct transmission of personal data from one data controller to another, if technically feasible.
Art. 21 – Right to object
The data subject has the right to object at any time, for reasons related to their particular situation, to the processing of personal data concerning them pursuant to art. 6, paragraph 1, letters e) or f), including profiling based on these provisions.
Art. 22 – Right not to be subject to automated decision-making, including profiling
The data subject has the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning them or similarly significantly affects their person.
8) Intention to transfer data abroad
We inform You that Your data may also be processed by IT service providers (for example providers and/or cloud computing) operating outside the European Union.
9) Changes to processing
If You wish to have more information about the processing of Your personal data, or to exercise the rights referred to in the previous point 7, You can write to info@modamarepositano.com, or call 0812131525.
Before we can provide or modify any information for You, it may be necessary to verify Your identity and answer some questions.
A response will be provided as soon as possible and in any case within legal limits.
10) Data transfer in case of reorganization or change of management
In the event of corporate reorganization or transfer of the e-commerce business to another company, customers' personal data may be transferred to that company, which will act as the new Data Controller or Joint Controller, exclusively for the same purposes for which the data were originally collected.
Data subjects will be informed of the change of data controller by notice on the website or through direct communication, while all rights recognized by EU Regulation 2016/679 (GDPR) remain guaranteed in any case.
11) Changes to our privacy policy
The applicable law changes over time. If we decide to update our privacy policy, we will publish the changes on websites owned by Ora srl and MMP srl (for example: modamarepositano.com) If we change the way we handle personal data, we will provide notice, or where required by law, consent will be requested before implementing such changes. We strongly recommend reading our Policy and staying informed about our policies.
The privacy policy was last updated on 12/02/2025.
Naples, 12/09/2025
ORA srl
MMP srl