Disclosure pursuant to Article 13 of the Regulation (EU) 2016/679 on the protection of personal data (RGPD) and request for consent for the processing of personal data collected from the interested party.



This information is provided to inform you of the processing of your personal data.

1.Identity and contact details of the Data Controller
The Data Controller is HIPSTER S.A.S., with registered office in Piazza Campitelli, 2   ROMA (RM) - Italy, e-mail info@magister-shop.it

2. Contact details of the Data Protection Officer ("RPD")
The DPO designated by , which will represent the point of contact for the interested parties, can be reached through the following contact channels:
- e-mail: info@magister-shop.it;
- mail: HIPSTER S.A.S. Piazza Campitelli, 2   ROMA (RM) - Italy


3. Purpose and legal basis of the processing
Your personal data will be processed for the following purposes:
a) provision of services requested by the user
b) direct marketing;

The treatment referred to in letter a) is necessary for the provision of the services requested by the user, while the treatment referred to in letters b) requires your consent expressed by the application of a specific "flag". It should be noted that the direct marketing activity, carried out by Leanfa, aims to collect and use pertinent data limited to what is necessary with respect to the purpose for which they are processed, to process studies, research, market statistics, send advertising material and information, direct sales or placement of products or services, send commercial information, make interactive commercial communications. With reference to marketing activities, it should be noted that, in the event of failure and specific consent to the processing by the user, it will not be possible to perform the aforementioned activities

4. Recipients of personal data
Within the aforementioned purposes, your data could be communicated to:
HIPSTER S.A.S. Piazza Campitelli, 2   ROMA (RM) - Italy;

5. Data transfer to third countries
Leanfa transfers data only on cloud sites in the United States to companies that adhere to the legislation in question.

6. Data retention period
Personal data will be kept for the period of time strictly necessary to pursue the specific purposes of the processing for which the user has expressed his consent and, specifically: - for the purposes indicated in letter a) of the art. 3 for the time necessary to fulfill the contractual obligations and, in any case, no later than 10 years from the time of collection of your data for compliance with legal obligations and, in any case, no later than the deadlines set by law for the prescription of rights; - for the purposes indicated in letter b) (that is for direct and indirect marketing purposes and searches of (market) of Article 3 for 24 (twenty-four) months from the moment of consent to the processing;  

7. Rights of the interested party
The user may, at any time, exercise the rights indicated below.
a. Access to personal data: obtain confirmation of whether data concerning you are being processed and, in this case, access to the following information: the purposes, the categories of data, the recipients, the retention period, the right to lodge a complaint with a supervisory authority, the right to request rectification or cancellation or limitation of processing or opposition to the processing itself and the existence of an automated decision-making process;
b. Request for rectification or limits of the same or limitation of the processing concerning him; "limitation" means the marking of data stored with the aim of limiting treatment in the future;
c. Opposition to treatment: to oppose for reasons connected to your particular situation to the processing of data for the execution of a task of public interest or for the pursuit of a legitimate interest of the Owner;
d. Data portability: in the case of automated processing carried out on the basis of consent or in execution of a contract, to receive data concerning him in a structured format, commonly used and readable by automatic device; in particular, the data will be provided by the Data Controller in .xml format, or similar;
e. Revocation of consent to processing for direct marketing purposes; the exercise of this right does not prejudice in any way the lawfulness of the processing carried out before the revocation;
f. Propose a claim pursuant to art. 77 RGPD to the competent supervisory authority based on your habitual residence, workplace or place of violation of your rights; for Italy, the Guarantor for the protection of personal data is competent, which can be contacted via the contact details on the website https://www.garanteprivacy.it.
The aforementioned rights may be exercised by sending a specific request to the Data Controller through the contact channels indicated in art. 1 of this information.
Requests relating to the exercise of user rights will be processed without undue delay and, in any case, within one month of the request; only in cases of particular complexity and in the number of requests can this term be extended by a further 2 (two) months.

8. Communication and provision of data
The provision of data by the user is mandatory as necessary to provide the service requested.
Therefore, any refusal by the user to provide the data may result in the non-provision of the service, to the extent that such data are necessary for such purposes.