Privacy policy

This notice explains how Magnaplana srl processes the personal data of people who visit the Nattan website, open an account, buy or write to us, under Regulation (EU) 2016/679 (GDPR).

Data controller

Magnaplana srl, Via Giacomo Puccini 1, 20121 Milan (MI), Italy
VAT no. and tax code 14890830962 - REA MI-2813465 - Share capital € 1,000.00 fully paid
Email: info@magnaplana.com - PEC: magnaplana@pec.it - Phone: +39 02 8127 8391

For any request about your data write to info@magnaplana.com.

What data we process

Account: first and last name, email, password (stored in encrypted form), phone number, delivery and billing addresses. For businesses also company name and VAT number.
Orders: products bought, amounts, addresses, payment and shipping status, tax documents, any returns.
Newsletter: email address and confirmation of the subscription.
Contacts and requests: the data you enter in the contact or retailer request forms and the content of your message.
Browsing data: the IP address, used to estimate the country you browse from and show you the right prices and shipping, and for the security of the site (request limits, access protection). The country you choose is remembered in a technical cookie.

We do not collect special categories of data and we do not profile visitors.

Purposes and legal bases

Managing the account, orders, payments, shipping, returns and support: performance of a contract or pre-contractual steps.
Meeting tax, accounting and legal obligations: legal obligation.
Answering messages and retailer requests: pre-contractual steps and legitimate interest.
Sending the newsletter: consent, which you can withdraw at any time from the link in every email.
Keeping the site secure, preventing abuse and showing prices and shipping for the right country: legitimate interest.

Who we share data with

Stripe and PayPal, for payments: they receive the data needed for the payment and process it as independent controllers under their own notices. Card details do not go through our systems.
Our hosting provider, with servers in the European Union, which processes data on our behalf.
Carriers for shipping, tax advisers and professionals, as far as necessary.
Authorities, when the law requires it.

Some providers may process data outside the European Economic Area: in that case they do so with the safeguards required by the GDPR.

How long we keep it

Order and invoice data: for the period required by law (normally 10 years).
Account: while it stays active and until you ask for its deletion, subject to legal obligations.
Newsletter: until you withdraw your consent.
Messages and requests: for as long as needed to reply and manage the relationship.

Your rights

You can ask for access to your data, rectification, erasure, restriction, portability and object to the processing (Articles 15-22 GDPR), and withdraw consent at any time. Write to info@magnaplana.com or to the PEC address magnaplana@pec.it. If you believe the processing breaches the law you can lodge a complaint with the Italian data protection authority, the Garante per la protezione dei dati personali (www.garanteprivacy.it), or with the authority of your country.

Cookies

For the cookies of the site see the cookie policy.