1. Data controller

The data controller is the company that runs the Maw Poké shops in Mariano Comense, Lissone and Cesano Maderno. You can reach the controller at info@mawpokeria.com or by calling one of the numbers published on the Contacts page.

The full details of the controller, including company name, registered office and VAT number, are set out in the dedicated section of this document.

2. What data we collect

2.1 Browsing data

The systems that run this site collect, as part of normal operation, some data whose transmission is implicit in the use of Internet protocols. This includes IP addresses, browser type, operating system, date and time of the request and the page requested. The hosting provider processes this data for security and diagnostics and it is not used to identify visitors.

2.2 Data you provide

Job applications: first name, last name, date of birth, phone, email, preferred shop and whatever you write in the free text field.
Phone contact: whatever you choose to tell us during the call.

2.3 Data we do not collect

This site uses no analytics tools, does not profile visitors, installs no advertising pixels and never sells data to third parties.

3. Purposes and legal bases

Purpose	Data	Legal basis	Retention
Running and securing the site	Browsing data	Legitimate interest, art. 6.1.f GDPR	Up to 12 months in provider logs
Assessing applications	Work with us form data	Pre contractual measures, art. 6.1.b GDPR	24 months from receipt
Remembering cookie choices	Preference stored in the browser	Legitimate interest and legal obligation	12 months

4. Who receives the data

Data may be processed by parties acting as processors under article 28 GDPR, in particular:

the hosting provider that serves this site;
the service that delivers messages sent through the site forms;
the technical consultants who maintain the site.

If you consent to functional cookies, the Contacts page loads Google Maps, a service provided by Google Ireland Limited. At that point your IP address is disclosed to Google. Without your consent the map is never loaded.

5. Transfers outside the European Economic Area

The providers listed above may process data outside the European Economic Area. Where that happens, the transfer relies on the standard contractual clauses approved by the European Commission or on an adequacy decision, such as the Data Privacy Framework for certified United States providers.

6. Your rights

You can exercise the rights set out in articles 15 to 22 GDPR at any time:

access to the data concerning you;
rectification of inaccurate data;
erasure of data;
restriction of processing;
data portability;
objection to processing based on legitimate interest;
withdrawal of consent at any time, without affecting the lawfulness of processing carried out before withdrawal.

To exercise your rights write to info@mawpokeria.com. We reply within one month. If you believe the processing breaches the law you can lodge a complaint with the Italian supervisory authority, Garante per la protezione dei dati personali, Piazza Venezia 11, 00187 Rome.

7. Security

The site is served only over an encrypted HTTPS connection. Forms carry a trap field to limit automated submissions. We apply technical and organisational measures appropriate to the risk, as required by article 32 GDPR.

8. Children

This site is not aimed at children under fourteen and does not knowingly collect their data. Job applications are open only to people who meet the minimum working age set by law.

9. Changes

This notice may be updated. The date of the latest update is shown at the top of the page. Please check it from time to time.