Product has been added to your basket.

Privacy Policy of mb-fix.store

This Website collects some Personal Data from its Users.

This document can be printed using the print command found in the settings of any browser.

Summary of the policy

Personal data processed for the following purposes and using the following services:

Contact the user Contact form Personal Data: surname; email; name

Purchase order and payment management WooPayments (Stripe and PayPal) Personal Data: surname; email; first name; billing address; shipping address; telephone number; order-related data; payment data (processed directly by Stripe and PayPal)

Contact management and newsletter dispatch Mailchimp Personal Data: surname; email; name; Tracking Tools

Heat mapping and session recording Microsoft Clarity Personal Data: Usage Data; Trackers

Statistics Google Analytics 4 Personal Data: number of Users; session statistics; Tracking Tools

Advertisement Google Ads Personal Data: Tracking Tools; Usage Data

Displaying content from external platforms Google Fonts Personal Data: Usage Data; Tracking Tools

Information on how to opt out of interest-based advertising

In addition to any opt-out feature provided by any of the services listed in this document, Users may read more about how to disable interest-based advertising in the dedicated section of the Cookie Policy.

Contact details

Data Controller MB FIX SRL SB, with registered office at Via Beata Giovanna, 64, 36061 Bassano del Grappa (VI) – IT (Email: marketing@mb-fix.com, PEC: mb.amministrazione@cert.assind.vi.it, tel +39 0423 913800)

Data Controller's email address: marketing@mb-fix.com

Full policy

Data Controller

MB FIX SRL SB, with registered office at Via Beata Giovanna, 64, 36061 Bassano del Grappa (VI) – IT (Email: marketing@mb-fix.com, PEC: mb.amministrazione@cert.assind.vi.it, tel +39 0423 913800)

Data Controller's email address: marketing@mb-fix.com

Types of Data collected

Among the Personal Data collected by this Website, independently or through third parties, are: Tracking Tools; number of Users; session statistics; Usage data; email address; first name; last name; billing address; shipping address; telephone number; data relating to the order.

Payment data (e.g. credit card numbers) is neither collected nor stored directly by this website: transactions are managed via WooPayments, which uses the Stripe and PayPal payment networks for secure payment processing.

Full details on each type of Personal Data collected are provided in the dedicated sections of this privacy policy or through specific information texts displayed before the Data is collected.

Personal Data may be freely provided by the User, or, in the case of Usage Data, collected automatically when using this Website.

Unless specified otherwise, all Data requested by this Website is mandatory. If the User refuses to communicate it, it may be impossible for this Website to provide the Service (for example, it will not be possible to complete a purchase order). In cases where this Website indicates some Data as optional, Users are free to refrain from communicating such Data, without this having any consequence on the availability of the Service or its operation.

Users who are in any doubt as to which Data are mandatory are encouraged to contact the Data Controller.

The potential use of Cookies – or other tracking tools – by this Website or by the owners of third-party services used by this Website has the purpose of providing the Service requested by the User, in addition to the further purposes described in this document and in the Cookie Policy.

The User assumes responsibility for the Personal Data of third parties obtained, published or shared through this Website.

Methods and place of processing of the collected Data

Treatment method

The Data Controller adopts appropriate security measures to prevent unauthorised access, disclosure, modification or destruction of the Personal Data.

The processing is carried out using IT and/or telematics tools, with organisational methods and logic strictly related to the purposes indicated. In addition to the Data Controller, in some cases, other parties involved in the organisation of this Website (administrative, commercial, and marketing personnel, legal counsel, system administrators, logistics and order management staff) or external parties (such as third-party technical service providers, postal couriers and delivery services, payment service providers, hosting providers, IT companies, communication agencies) may have access to the Data, who are also appointed as Data Processors by the Data Controller, if necessary. The updated list of Data Processors may be requested from the Data Controller at any time.

Place

The Data is processed at the Data Controller's operating offices and in any other places where the parties involved in the processing are located. For further information, contact the Data Controller.

The User's Personal Data may be transferred to a country other than the one in which the User is located. To obtain further information about the place of processing, the User may refer to the section containing details on the processing of Personal Data.

Retention period

Unless otherwise stated in this document, Personal Data is processed and stored for the time required by the purpose for which it was collected and may be retained for a longer period due to any legal obligations (e.g. order data is retained for the period required by applicable tax and accounting legislation) or on the basis of Users' consent.

Purpose of the Processing of Collected Data

User Data is collected to allow the Data Controller to provide the Service, manage and fulfil purchase orders, comply with legal obligations, respond to requests or enforcement actions, protect its rights and interests (or those of Users or third parties), detect any malicious or fraudulent activity, as well as for the following purposes: Management of purchase orders and payments, Statistics, Advertising, Viewing content from external platforms, Contact management and sending newsletters, Heat mapping and session recording, and Contacting the User.

For detailed information on the purposes of the processing and the Personal Data processed for each purpose, the User may refer to the section “Details on the processing of Personal Data”.

Details of the processing of Personal Data

Personal Data is collected for the following purposes and using the following services:

  • Contact the user
  • Purchase order and payment management
  • Contact management and newsletter dispatch
  • Heat mapping and session recording
  • Statistics
  • Advertisement
  • Displaying content from external platforms

Purchase order and payment management

This type of service allows this Website to process payments made via credit card, bank transfer or other tools, as well as to manage and fulfil orders placed by Users.

WooPayments (Stripe and PayPal) WooPayments is the payment management service integrated into this Website's e-commerce platform, which uses the Stripe and PayPal payment processors to process transactions. Payment data (card number, PayPal account details, etc.) are transmitted directly to Stripe and/or PayPal and are not stored on this Website's servers. Personal Data processed: various types of Data as specified in the privacy policy of the service; first name; last name; email; billing address; shipping address; telephone number; order-related data. Place of processing: United States – Stripe Privacy Policy – PayPal Privacy Statement – Privacy Policy WooPayments.

Contact management and newsletter dispatch

This type of service makes it possible to manage a database of email contacts, telephone contacts or contacts of any other kind, used to communicate with the User, for example by sending newsletters.

Mailchimp Mailchimp is an email address management and message sending service provided by The Rocket Science Group, LLC. Personal Data processed: surname; email; first name; Tracking Tools. Place of processing: United States – Mailchimp Privacy Policy.

Newsletter subscription is voluntary via a dedicated form on the Website and requires the User's explicit consent. The User may withdraw the consent given at any time and unsubscribe using the dedicated link at the bottom of each communication sent.

Heat mapping and session recording

Microsoft Clarity Microsoft Clarity is a heat mapping and session recording service provided by Microsoft Corporation. Personal Data processed: Usage Data; Tracking Tools. Place of processing: United States – Microsoft Clarity Privacy Policy.

Statistics

Google Analytics 4 Google Analytics 4 is a web analytics service provided by Google Ireland Limited. Personal Data processed: number of Users; session statistics; Tracking Tools. Place of processing: Ireland – Privacy Policy Google Analytics.

Advertisement

This type of service allows the User's Data to be used for commercial communication purposes in various forms, such as banner advertising and other forms, including based on the User's interests.

Google Ads Google Ads is an advertising service provided by Google Ireland Limited, which connects the Google Ads advertising network with Google Fonts and can be used for remarketing. Personal Data processed: Tracking Tools; Usage data. Place of processing: Ireland – Google Ads Privacy Policy.

Displaying content from external platforms

Google Fonts Google Fonts is a font style visualisation service run by Google Ireland Limited that allows this Website to integrate such content within its pages. Personal Data processed: Usage Data; Tracking Tools. Place of processing: Ireland – Google Fonts Privacy Policy.

Contact the user

Contact form By filling in the contact form with their Data, the User consents to their use to reply to requests for information, quotes, or any other kind indicated by the form header. Personal Data processed: email; first name; last name.

Information on how to opt out of interest-based advertising

In addition to any opt-out feature provided by any of the services listed in this document, Users may read more about how to disable interest-based advertising in the dedicated section of the Cookie Policy.

Cookie Policy

This Website makes use of Tracking Tools. To find out more, Users can consult the Cookie Policy.

Further information for users

Legal basis for processing

The Data Controller processes Personal Data relating to the User if one of the following conditions applies:

  • the User has given consent to one or more specific purposes;
  • processing is necessary for the performance of a contract with the User (for example, for the fulfilment of a purchase order) and/or for the implementation of pre-contractual measures;
  • processing is necessary for compliance with a legal obligation to which the Data Controller is subject;
  • processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the Data Controller;
  • processing is necessary for the purposes of the legitimate interests pursued by the Controller or by a third party.

It is still always possible to request the Data Controller to clarify the specific legal basis of each processing operation and, in particular, to specify whether the processing is based on law, required by a contract or necessary to enter into a contract.

More information on the retention period

Unless stated otherwise herein, Personal Data is processed and stored for the time required by the purpose for which it was collected and may be retained for a longer period due to any legal obligations or based on the consent of the Users.

Therefore:

  • Personal Data collected for purposes related to the performance of a contract between the Data Controller and the User (for example, for the purchase of products) shall be retained until the performance of such contract is completed, and subsequently for the period required by applicable legal obligations in tax and accounting matters.
  • Personal Data collected for purposes attributable to the legitimate interest of the Data Controller shall be retained until such interest is satisfied. The User may obtain further information regarding the legitimate interest pursued by the Data Controller in the relevant sections of this document or by contacting the Data Controller.
  • When the processing is based on the User's consent (for example, for subscribing to the newsletter), the Data Controller may retain Personal Data for a longer period until such consent is revoked. Furthermore, the Data Controller may be obliged to retain Personal Data for a longer period to comply with a legal obligation or by order of an authority.

Upon expiry of the retention period, the Personal Data shall be deleted. Therefore, upon expiry of such period, the right of access, erasure, rectification and the right to data portability may no longer be exercised.

User Rights under the General Data Protection Regulation (GDPR)

Users may exercise certain rights with regard to Data processed by the Data Controller.

In particular, within the limits established by law, the User has the right to:

  • withdraw consent at any time. The User may withdraw their previously expressed consent to the processing of their Personal Data.
  • object to the processing of one's Data. The User may object to the processing of their Data when it is carried out on a legal basis other than consent.
  • access your data. The User has the right to obtain information regarding the Data processed by the Data Controller, on certain aspects of the processing and to receive a copy of the Data processed.
  • verify and request correction. The User may verify the accuracy of their Data and request its update or correction.
  • obtain the restriction of processing. The User may request the restriction of the processing of their Data. In such cases, the Data Controller will not process the Data for any purpose other than their storage.
  • obtain the erasure or removal of one's Personal Data. The User may request the deletion of their Data by the Data Controller.
  • receive your personal data or have it transferred to another controller. The User has the right to receive their Personal Data in a structured, commonly used and machine-readable format and, where technically feasible, to transmit them to another controller without hindrance.
  • lodge a complaint. The User may lodge a complaint with the competent supervisory authority for the protection of personal data (in Italy, the Garante per la Protezione dei Dati Personali) or take legal action.

Users have the right to obtain information regarding the legal basis for the transfer of Data abroad, including to any international organisation governed by international law or set up by two or more countries, such as the UN, as well as regarding the security measures adopted by the Data Controller to protect their Data.

Details on the right to object

When Personal Data is processed in the public interest, in the exercise of official authority vested in the Data Controller or to pursue a legitimate interest of the Data Controller, Users have the right to object to the processing on grounds relating to their particular situation.

Users are advised that, where their Data are processed for direct marketing purposes, they may object to the processing at any time, free of charge and without providing any justification. Should Users object to processing for direct marketing purposes, the Personal Data shall no longer be processed for such purposes. To find out whether the Data Controller processes Data for direct marketing purposes, Users may refer to the respective sections of this document.

How to exercise your rights

Any requests to exercise the User's rights may be sent to the Data Controller through the contact details provided in this document. The request is free of charge and the Data Controller will respond as quickly as possible, in any case within one month, providing the User with all the information required by law. Any rectifications, erasures or restrictions of processing will be communicated by the Data Controller to each of the recipients, if any, to whom the Personal Data have been transmitted, unless this proves impossible or involves a disproportionate effort. The Data Controller shall inform the User of such recipients should the User request it.

Further information for users in Brazil

This section of the document integrates and completes the information contained in the rest of the privacy policy and is provided by the entity that operates this Website and, where applicable, by its parent company and its subsidiaries and affiliates (for the purposes of this section collectively referred to as “we”, “our” or “us”).

This section applies to all Users in Brazil (such Users are referred to below simply as “you” or “your”), pursuant to the Lei Geral de Proteção de Dados and, for such Users, supersedes any other potentially divergent or conflicting information contained in this privacy policy.

In this part of the document, the term “personal information” is used as defined by the LGPD.

Legal bases under which we process your personal information

We process your personal data solely in the event that there is a legal basis for such processing. The legal bases are as follows:

  • your consent to the processing activities in question;
  • compliance with legal obligations to which we are subject;
  • the execution of rules laid down by laws or regulations or by contracts, agreements or other similar legal instruments;
  • studies conducted by research bodies, preferably carried out on anonymised personal data;
  • the performance of a contract and related pre-contractual steps, where you are a party to such contract (for example, the purchase of a product);
  • the exercise of our legal rights in court, in administrative procedures or in arbitration;
  • your own defence or physical safety or that of a third party;
  • healthcare – in the context of procedures carried out by entities or professionals in the healthcare sector;
  • our legitimate interest, provided that your fundamental rights and freedoms do not override those interests; and
  • debt recovery.

To find out more about the legal bases, you can contact us at any time using the contact details provided in this document.

Categories of personal data processed

To find out which categories of personal data are processed, you can refer to the “Details of the processing of Personal Data” section in this document.

Why we process your personal information

To find out why we process your personal information, please refer to the “Details of the processing of Personal Data” and “Purposes of processing collected Data” sections in this document.

Your privacy rights in Brazil, how to submit a request and how it will be handled by us

Your privacy rights in Brazil

You have the right to:

  • obtain confirmation of the existence of processing activities concerning your personal information;
  • access your personal information;
  • obtain the rectification of your incomplete, inaccurate or outdated personal information;
  • to obtain the anonymisation, blocking or erasure of personal information that is unnecessary or excessive, or of information that is processed in breach of the provisions of the LGPD;
  • obtain information regarding the possibility of giving or withholding your consent and the relative consequences;
  • obtain information regarding the third parties with whom we share your personal information;
  • upon your explicit request, to obtain the portability of your personal information (with the exception of anonymised information) to other product or service providers, provided that our trade and industrial secrets are safeguarded;
  • obtain the erasure of personal data processed where the processing was carried out on the basis of your consent, unless one or more of the exceptions provided for in Article 16 of the LGPD apply;
  • withdraw your consent at any time;
  • lodge a complaint regarding your personal information with the ANPD (National Data Protection Authority) or a consumer protection body;
  • object to processing activities where such processing is not carried out in accordance with legal provisions;
  • to request clear and adequate information regarding the criteria and procedures used in automated decision-making processes; and
  • request the review of decisions that affect your interests, made exclusively on the basis of automated processing of your personal data.

You will never be discriminated against, nor will you be subjected to any unfavourable treatment in any way, as a result of exercising your rights.

How to submit a request

You can submit an explicit request to exercise your rights free of charge, at any time, using the contact details provided in this document or through your legal representative.

How and in what timeframe we will handle your request

We will do our utmost to respond to your request as quickly as possible. In any event, should it be impossible for us to do so, we will ensure that we inform you of the factual or legal reasons preventing us from immediately fulfilling or acting upon your request.

In the event that you decide to submit a request for access or a request to confirm the existence of the processing of personal information, please ensure you specify whether you prefer to receive your personal information in electronic or paper format. You will also need to let us know if you wish to receive an immediate response, in which case you will receive a simplified response, or if instead you require a full notice. In the latter case, we will respond within 15 days from the time of your request.

Further information regarding the treatment

Legal defence

The User's Personal Data may be used by the Data Controller in legal proceedings or in the preparatory stages of their possible establishment for defence against abuse in the use of this Website or the related Services by the User. The User declares to be aware that the Data Controller may be obliged to reveal the Data by order of public authorities.

Informative specifications

At the User's request, in addition to the information contained in this privacy policy, this Website may provide the User with additional and contextual information concerning specific Services or the collection and processing of Personal Data (for example, during the checkout phase).

System logs and maintenance

For operational and maintenance purposes, this Website and any third-party services it uses may collect system logs, which are files that record interactions and may also contain Personal Data, such as the User's IP address.

Information not contained in this policy

Further information in relation to the processing of Personal Data may be requested at any time from the Data Controller using the contact details.

Changes to this privacy policy

The Data Controller reserves the right to make changes to this privacy policy at any time by giving notice to Users on this page and, where possible, within this Website and/or - to the extent technically and legally feasible - by sending a notice to Users via any contact information held by the Data Controller. Therefore, please check this page frequently, referencing the date of the last modification listed at the bottom.

Should the modifications concern processing activities whose legal basis is consent, the Data Controller shall collect the User's consent anew, if necessary.

Definitions and legal references

Personal Data (or Data) / Personal Information (or Information) Personal data is any information that, directly or indirectly, including in connection with any other information, including a personal identification number, makes a natural person identified or identifiable.

Usage Data This is information collected automatically through this Website (including third-party applications integrated into this Website), which includes: the IP addresses or domain names of the computers used by the User who connects with this Website, the URI (Uniform Resource Identifier) notation addresses, the time of the request, the method used to forward the request to the server, the size of the file obtained in response, the numerical code indicating the status of the server's response (successful, error, etc.), the country of origin, the characteristics of the browser and operating system used by the visitor, the various temporal connotations of the visit and the details relating to the itinerary followed within the Application.

User — The individual using this Website who, unless otherwise specified, coincides with the Data Subject.

Interested — The natural person to whom the Personal Data refer.

Data Processor (or Processor) — The natural person, legal person, public administration and any other body that processes personal data on behalf of the Data Controller.

Data Controller (or Controller) — The natural or legal person who, alone or jointly with others, determines the purposes and means of the processing of personal data. Unless otherwise specified, it is the Owner of this Website.

This Website (or this Application) — The hardware or software tool by means of which Users' Personal Data is collected and processed.

Service — The Service provided by this Website as defined in the respective terms (if any) on this site/application.

Sale — Sale means any exchange of Personal Information by the Owner to a third party, in exchange for money or for other valuable consideration, as defined by applicable US state privacy laws.

Sharing "Sharing" means any sharing, renting, releasing, disclosing, disseminating, making available, transferring, or otherwise communicating a consumer's Personal Information by the business to a third party for cross-context behavioural advertising.

Targeted advertising Targeted advertising means the display of advertisements to a consumer where the ad is selected on the basis of Personal Information obtained from that consumer's activities over time and across non-affiliated websites or online applications.

European Union (or EU) — Unless otherwise specified, any reference to the European Union contained in this document shall be understood as extending to all current member states of the European Union and the European Economic Area.

Biscuit — Cookies are Tracking Tools consisting of small fragments of data stored within the User's browser.

Tracking Tool — Tracking Tool means any technology – e.g. Cookies, unique identifiers, web beacons, embedded scripts, e-tags and fingerprinting – that enables Users to be tracked.

Legal references

This policy has been drafted on the basis of multiple legislative frameworks, including Regulation (EU) 2016/679 (GDPR).

Unless otherwise specified, this policy applies exclusively to this Website.

Last modified: 22/07/2026