Privacy Policy


Legislative Decree 196/2003, entitled “Code on personal data protection”, brings together in one place Law 675/1996 and the other legislative decrees, regulations and ethical codes that have followed one another in recent years, relating to the processing of personal data.

The directions given below are based on Recommendation 2 / 2001 of the Group of Guarantors for the protection of personal data adopted on May 17, 2001 under Art. 29 of Directive 95/46/EC concerning the collection of personal data over the Internet. They are designed to identify the minimum measures to be implemented against the persons concerned, to ensure the fairness and legality of such practices (in application of Articles 6, 7, 10 and 11 of Directive 95/46/EC).

Under these regulations, the processing of data supplied by you must be based on principles of fairness, legality, purpose, quality, relevance, non excessiveness and transparency, while respecting fundamental rights and freedom and dignity, particularly with reference to the protection of confidentiality and personal identity and the right to the protection of your personal information. Similarly, the cited decree guarantees the rights of legal persons and any other body or association. The safeguarding of the confidentiality of our interlocutors is our primary commitment.
This information is provided pursuant to article 13 of Legislative Decree 196/2003 concerning the information provided by all those who interact with web services accessible via the Internet at the address: corresponding to the home page of the official website of Must Have S.n.C.
The disclosure was made only for the site in question and not in addition for other websites that may be accessible to the user via links.
Therefore, all this having been stated, under article 13 of Law 196/2003, Must Have, as the Data Controller in the person of its legal representative, provides the following information:

Data on persons identified or identifiable may be processed following consultation of this site.

The Data Controller Is:

Must Have S.n.C.
Viale Majno 5
20122, Milano

P.IVA – CF 07625920967

Persons In Charge And Representatives:

The List of Persons in Charge and Representatives is available on request at the headquarters of the company
Place of data processing and dissemination:
Processing related to the above-mentioned site takes place at the aforesaid office of the Data Controller and is performed by the Data Controller and by persons appointed if necessary.
The content of this site is hosted by Aruba SpA on its own servers.
No data from the web service are communicated or disseminated.
Types of data processed.
Purpose of browsing data.
During their normal operation, the computer systems and software procedures used to operate this website acquire some personal data whose transmission is implicit to the use of Internet communication protocols. This information is not collected to be associated with identified interests, but by its very nature it could, through processing and association with data held by third parties, permit the identification of users. This category of data includes IP addresses or domain names of computers used by users who connect to the site, addresses in URI (Uniform Resource Identifier) of requested resources, the time of request, the method used to submit the request to the server, the size of the file obtained in reply, the numerical code indicating the status of the response from the server (successful, error, etc.) and other parameters regarding the user’s operating system and computer environment. These data are used only to obtain anonymous statistics on site usage and to control its correct functioning, and are deleted immediately after processing. The data could be used to ascertain responsibility in the event of hypothetical computer crimes against the site. Except for this possibility, the data on web contacts are not maintained for more than seven days.
Purpose of data provided voluntarily by the user.
Optional, explicit and voluntary e-mailing to addresses on this website entails the subsequent acquisition of the sender’s address, which is only required in order to respond to requests, and any other personal data included in the letter. More precisely, the above-cited personal data will be used by the Data Controller to respond to the request for contact and will be handled for the purposes connected with what is indicated and requested through the special area. Specific summary information will be progressively reported or displayed on website pages dedicated to particular services, should these be implemented in future. Users are prohibited from sending via email sensitive data or data that may reveal racial or ethnic origin, religious, philosophical or other beliefs, political opinions, membership of parties, unions, associations or organizations of a religious, philosophical, political or trade union nature, and personal data disclosing their state of health or their sex life.


Cookies are textual elements that are placed on the hard disk of a computer only after authorization. If agreement is given, the text is then downloaded in a small file. These cookies have the function of streamlining the analysis of web traffic or indicating when a specific site is visited, and they enable web applications to send information to individual users or to allow “automatic login” to reserved areas. It is hereby stated that cookies are not used to transmit information of a personal nature, nor are so-called persistent cookies used i.e. systems for tracing users. Nor does this site use so-called session cookies (which are not stored permanently on the user’s computer and disappear when the browser is closed)

List of references

Data of third parties forwarded to Must Have are handled in accordance with the principles laid down in Legislative Decree 196/2003, these parties having been contacted by the Data Controller previously and where necessary their consent to the dissemination of the personal data supplied by them having been acquired in oral or written form. These data will be kept for the time necessary for the purposes of their collection. At any time interested parties may make a request in accordance with art. 7 of Legislative Decree 196/2003 and the Data Controller will take measures in terms of the law.

Optional supply of data

Apart from that specified for browsing data, the user is free to provide personal information through the addresses listed on the site to expedite the sending of information or other communications. Their non provision may make it impossible to obtain what was requested. You are advised that the owner cannot process a request for contact if the party concerned has not given his or her consent to the processing of the data included, at least for the purposes and with the modes and times indicated in this statement.

Mode Of Treatment

Personal data are processed exclusively by appointed personnel, with automated tools for the time strictly necessary to achieve the purposes for which they were collected. Such information will be included in an electronic database until the processing of the request by the Data Controller and the conclusion of any connected activities. Specific security measures are taken to prevent loss of data, illicit or incorrect use and unauthorized access. The user is advised that any data transmission over the Internet cannot achieve absolute security. It is therefore their responsibility to verify the correctness of their personal data and if necessary correct, update or otherwise modify data in the course of processing. It is also the user’s responsibility to take appropriate security measures to avert the danger of interception, loss, alteration or destruction of electronic mail messages.

Data communication

Personal data may be communicated to the processors and, for the purposes indicated above, to external staff, to those involved in the data protection or information technology area, to contractual counterparties and related counsel and generally to all parties with which communication is necessary for the proper fulfilment of the purpose indicated.

Dissemination Of Data

Personal data processed through this site, to the extent indicated, are not subject to disclosure.
Parties’ rights.
Art. 7 of the Code confers the exercise of specific rights on the party concerned. In particular, the right to obtain from the Data Controller confirmation of the existence or otherwise of personal data concerning him or her and its provision in an intelligible form, the right to know the source of data, the logic and purposes upon which their processing is based, and the right to know the persons or classes of persons to which the data can be communicated, including as Persons in Charge and/or Representatives and the identification thereof, the right to obtain updating, rectification, or the integration of these data if desired by the interested party, as well as the cancellation, transformation into anonymous form or blocking of data handled in violation of the law, the right to have confirmation that notification of the transactions referred to above , including their contents, has been notified to those to whom the data have been disclosed, except where such measures are impossible or require means clearly disproportionate to the protected right, the right to object in whole or in part, for legitimate reasons, to the processing of personal data concerning the interested party even if they pertain to the purpose of their collection, and the right to object fully or partially to the processing provided for, for the purpose of providing information or sending information.

For requests related to rights guaranteed by article 7 of the Data Protection code and further related information, please use the following address:
Must Have S.n.C.
Viale Majno 5
20122, Milano

P.IVA – CF 07625920967

Please indicate in the subject line that this is a request under art. 7 of Legislative Decree 196/2003 and attach a copy of a valid identity paper

We use cookies to ensure that we give you the best experience on our website.