This privacy notice is provided in compliance with Art. 13 of Regulation 2016/679 (GDPR) and pursuant to Art. 13 of Legislative Decree no. 196/2003 (Personal Data Protection Code). It applies to all personal data processed in the manner described below.
Data Controller
The Data Controller of the Collected Personal Data is: Fiorenza Bartolozzi
Operating Address: Via Francesco Poeti, 47 – 50014 – Fiesole (FI)
Data Controller’s email address: bartolozzifiorenza@gmail.com
Types of Data Collected
Full details on each type of data collected are provided in the dedicated sections of this privacy policy. Personal Data may be freely provided by the User or, in the case of Usage Data, automatically collected during use of the website. Unless otherwise specified, all Data requested is mandatory. If the User refuses to provide it, it may be impossible to provide the service. Where some data is optional, Users are free to abstain from providing such data without any consequence on the Service’s availability or operation. Users who have doubts about which Data is mandatory are encouraged to contact the Data Controller. Any use of Cookies or other tracking tools by this site or by the owners of third-party services used by this site, unless stated otherwise, aims to provide the Service requested by the User. The User is responsible for third-party Personal Data obtained, published, or shared through this site and confirms they have the right to communicate or distribute it, holding the Data Controller harmless from any third-party liability.
METHOD AND LOCATION OF PROCESSING THE COLLECTED DATA
Purpose of Processing the Collected Data
User data is collected to enable the Data Controller to provide its Services, including for the following purposes: Statistics, Newsletter, Personalized Advertising, Accounting, Performance Testing of content and functionality, Interaction with social networks and external platforms, Display of content from external platforms, and interaction with data collection platforms and other third parties. For further detailed information on the purposes of processing and on the Personal Data relevant for each purpose, the User may refer to the relevant sections of this document.
Processing Methods
The Data Controller adopts appropriate security measures to prevent unauthorized access, disclosure, modification, or destruction of Personal Data. Processing is carried out using computers and/or IT-enabled tools, following organizational procedures and modes strictly related to the purposes indicated. In addition to the Data Controller, in some cases, other parties (such as administrative, commercial, marketing, legal, and system administration staff) or external entities (such as third-party technical service providers, mail carriers, hosting providers, IT companies, and communication agencies) may also have access to the data, if necessary, appointed as Data Processors by the Data Controller. The updated list of Processors may be requested from the Data Controller at any time.
Legal Basis for Processing
The Data Controller processes Personal Data relating to the User if one of the following conditions applies:
- The User has given consent for one or more specific purposes;
- Processing is necessary for the performance of a contract with the User and/or for any pre-contractual obligations;
- Processing is necessary for compliance with a legal obligation to which the Data Controller is subject;
- Processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the Data Controller;
- Processing is necessary for the purposes of the legitimate interests pursued by the Data Controller or by a third party.
It is always possible to request clarification from the Data Controller on the concrete legal basis of each processing operation and, in particular, whether the processing is based on the law, is contractually required, or is necessary to conclude a contract.
Location
Data is processed at the Data Controller’s operational offices and in any other places where the parties involved in the processing are located. For further information, please contact the Data Controller. The User’s Personal Data may be transferred to a country other than the one in which the User is located. For further information on the place of processing, Users may refer to the section detailing the processing of Personal Data. The User has the right to obtain information regarding the legal basis for Data transfers outside the European Union or to an international organization governed by public international law or set up by two or more countries, such as the UN, as well as regarding the security measures adopted by the Data Controller to protect the Data. Should one of the transfers described above take place, the User may refer to the relevant sections of this document or inquire with the Data Controller by contacting them at the details provided above.
Retention Period
Data is processed and stored for the time required by the purposes for which it was collected:
- Personal Data collected for purposes related to the performance of a contract between the Data Controller and the User shall be retained until such contract has been fully performed.
- Personal Data collected for the purposes of the Data Controller’s legitimate interests shall be retained as long as needed to fulfill such purposes. Users may find specific information regarding the legitimate interests pursued by the Data Controller within the relevant sections of this document or by contacting the Data Controller.
When processing is based on User consent, the Data Controller may retain Personal Data longer until such consent is revoked. Furthermore, the Data Controller may be required to retain Personal Data for a longer period in compliance with a legal obligation or by order of an authority. At the end of the retention period, Personal Data will be deleted. Therefore, the rights to access, erasure, rectification, and data portability cannot be enforced after expiration of the retention period.