In compliance with national regulations (Legislative Decree No. 196 of June 30, 2003, Personal Data Protection Code) and EU regulations (European Regulation No. 679/2016, GDPR) and subsequent amendments, this site respects and protects the privacy of visitors and users. This privacy policy applies exclusively to the online activities of this site and is valid for both visitors and users. It does not apply to information collected through channels other than this site. The purpose of this policy is to provide maximum transparency regarding the information the site collects and how it is used.
Legal basis
This site processes data based on consent. By using or browsing the site, visitors and users explicitly approve the privacy policy and consent to the processing of personal data in relation to the methods and purposes described below, including potential disclosure to third parties, if necessary for the provision of a service. Providing data, and therefore consent to the collection and processing of it, is optional: the user can refuse consent and revoke it at any time by accessing the privacy center page. However, refusing consent may result in the inability to provide some services, and the browsing experience on the site may be compromised. Starting from May 25, 2018 (the date of the GDPR enforcement), this site will process certain data based on the legitimate interests of the data controller.
Data collected and purposes
Like all websites, this site makes use of log files where information is stored automatically during user visits. The information collected may include:
- internet protocol address (IP);
- browser type and parameters used;
- internet service provider name (ISP);
- date and time of visit;
- referring page (referral) and exit page;
- number of clicks.
This information is processed automatically and collected exclusively in an aggregated form, to verify the proper functioning of the site and for security purposes (since May 25, 2018, this information will be processed based on the legitimate interests of the data controller). For security purposes (anti-spam filters, firewall, virus detection), the automatically recorded data may also include personal data such as the IP address, which may be used, in accordance with applicable laws, to block attempts to damage the site or harm other users, or engage in general harmful or illegal activities. This data is never used for the identification or profiling of users, but solely for the protection of the site and its users (since May 25, 2018, this information will be processed based on the legitimate interests of the data controller). If the site allows for comment submission or specific services requested by the user, certain identifying data, including the email address, will be automatically recorded. This data is considered voluntarily provided by the user when requesting the service. By submitting a comment or other information, users expressly accept the privacy policy and, in particular, consent to the public dissemination of the submitted content to third parties. The data received will be used exclusively for the provision of the requested service and for the time necessary to deliver the service. The information users choose to make public through the services and tools provided is voluntarily and knowingly provided by the user, exempting this site from any responsibility regarding potential legal violations. It is the user’s responsibility to ensure they have the necessary permissions to enter personal data of third parties or content protected by national and international regulations. Data collected by the site during its operation will only be used for the purposes mentioned above and stored for the time strictly necessary to carry out the specified activities. In any case, the data will never be provided to third parties, except in the case of a legitimate request from judicial authorities and as required by law. Data used for security purposes (blocking attempts to damage the site) will be kept for 7 days.
Security measures
We process users’ data lawfully and fairly, adopting appropriate security measures to prevent unauthorized access, disclosure, alteration, or destruction of the data. Processing is done using computer and/or telematic tools, with organizational methods and logic strictly related to the stated purposes. In addition to the data controller, in some cases, data may be accessed by individuals involved in the organization of the site (administrative, commercial, marketing staff, legal advisors, system administrators) or external parties (such as third-party service providers, postal couriers, hosting providers, IT companies, communication agencies).
User rights
Under European Regulation 679/2016 (GDPR) and national regulations, the user may, according to the methods and within the limits set by the applicable law, exercise the following rights:
- request confirmation of the existence of personal data concerning them (right of access);
- know its origin;
- receive intelligible communication;
- be informed about the logic, methods, and purposes of the processing;
- request updating, correction, integration, deletion, transformation into anonymous form, or blocking of data processed in violation of the law, including data no longer necessary for the purposes for which they were collected;
- in cases of processing based on consent, receive their data provided to the controller, at the cost of any support, in a structured format, readable by a data processor, and in a commonly used format by an electronic device;
- the right to lodge a complaint with the supervisory authority (Privacy Guarantor);
- and more generally, exercise all the rights granted by applicable law.
Requests should be addressed to the data controller. By accessing the privacy center page, the user has the possibility to manage their needs in full autonomy. In cases where data is processed based on legitimate interests, the rights of the data subjects to the processing are still guaranteed (except for the right to data portability, which is not provided by the regulations), particularly the right to object to the processing, which can be exercised by sending a request to the data controller.
Place of processing
The data collected by the site is processed at the data controller’s premises and at the hosting provider’s data center. The web hosting provider (IperDada Pro), which is responsible for processing the data on behalf of the controller, is located in the European Economic Area (EEA) and acts in compliance with European regulations. Requests should be addressed to the data controller. In cases where data is processed based on legitimate interests, the rights of data subjects to the processing are still guaranteed (except for the right to portability, which is not provided by the regulations), particularly the right to object to the processing, which can be exercised by sending a request to the data controller.
Data controller
The data controller, according to the applicable laws, is Arianna Fè, who can be contacted via the contact DPO page.
Update
This privacy policy was last updated on September 11, 2024.