Privacy Policy

Data Controller

The Data Controller for the processing of personal data is:

Types of data collected

Browsing data

The computer systems and software procedures used to operate this website acquire, during their normal operation, certain personal data whose transmission is implicit in the use of Internet communication protocols. This information is not collected to be associated with identified data subjects, but by its very nature could, through processing and association with data held by third parties, allow users to be identified. This category includes IP addresses, domain names of computers used by users, URI (Uniform Resource Identifier) addresses of requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, and other parameters relating to the user's operating system and computing environment.

Voluntarily provided data

The optional, explicit and voluntary sending of messages through the contact form on the site involves the collection of the sender's email address, name and message content, which are necessary to respond to enquiries. This data is transmitted directly to the Data Controller's email client via the mailto protocol and is not stored on any server of the site.

Purposes of processing

• Responding to information requests sent through the contact form
• Ensuring the correct technical functioning of the website
• Fulfilling legal obligations

Legal basis for processing

The processing of browsing data is necessary for the legitimate interest of the Data Controller to ensure the functioning of the website. The processing of data provided through the contact form is based on the consent of the data subject, expressed by voluntarily sending the message. The Data Controller does not process data for profiling or marketing purposes.

Data recipients

Personal data is not transferred to third parties. The site uses the following third-party services that may process data as processors or independent controllers:

• Microsoft Azure (site hosting) — browsing data is processed on Microsoft Azure servers in the West Europe region
• Google Fonts — the site loads fonts from Google servers; Google may collect the user's IP address according to its own privacy policy
• Google Maps (embed) — the map embedded in the contact page is provided by Google; viewing it may involve the transfer of data to Google according to the relevant privacy policy

Rights of the data subject

Pursuant to Articles 15-22 of the GDPR, the data subject has the right to:

• Access their personal data and obtain a copy
• Rectify inaccurate or incomplete data
• Obtain the erasure of data ("right to be forgotten"), in cases provided for by law
• Restrict the processing of data
• Object to the processing
• Receive data in a structured, machine-readable format (portability)
• Withdraw consent at any time, without prejudice to the lawfulness of processing based on consent given before the withdrawal
• Lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali — www.garanteprivacy.it)

Data retention period

Browsing data is retained only for the time strictly necessary for the functioning of the site and is deleted immediately after processing. Data provided through the contact form (email) is retained in the Data Controller's mailbox for the time necessary to handle the request and in any case no longer than 24 months from receipt, unless otherwise required by law.

Contact

To exercise the above rights or for any questions regarding the processing of personal data, you may contact the Data Controller by writing to:

anildd-direzione@libero.it