1. Data Controller
The Data Controller for the processing of personal data is:
2. Purposes and Legal Basis
Personal data is processed for the following purposes:
| Purpose | Legal basis |
|---|---|
| Website browsing | Legitimate interest (Art. 6.1.f GDPR) |
| Responding to contact requests | Consent (Art. 6.1.a GDPR) |
3. Types of Data Collected
Browsing data
The computer systems used to operate this website collect certain personal data during their normal operation, the transmission of which is implicit in the use of Internet communication protocols (e.g., IP addresses, browser type, operating system, pages visited).
Voluntarily provided data
Voluntary submission of messages through the contact form involves the collection of the data entered (name, email address, message). This data is used solely to respond to the requests received.
4. Processing Methods
Personal data is processed using automated tools for the time strictly necessary to achieve the purposes for which it was collected. Specific security measures are observed to prevent data loss, unlawful or improper use, and unauthorized access, in compliance with GDPR.
5. Data Retention Period
Personal data collected through the contact form will be retained for a maximum period of 24 months from the date of collection, unless otherwise required by law. Browsing data is deleted immediately after statistical processing in aggregate and anonymous form.
6. Disclosure and Transfer
Personal data will not be disclosed or communicated to third parties, except as required by law or to the following parties:
- Technical service providers (hosting, maintenance) acting as data processors
7. Data Subject Rights
Under Articles 15-22 of the GDPR, data subjects have the right to:
- Access (Art. 15): obtain confirmation of the existence of their data and receive a copy
- Rectification (Art. 16): obtain correction of inaccurate data
- Erasure (Art. 17): obtain deletion of data (right to be forgotten)
- Restriction (Art. 18): obtain restriction of processing
- Portability (Art. 20): receive their data in a structured format
- Objection (Art. 21): object to the processing of data
- Withdrawal of consent (Art. 7): withdraw consent at any time
To exercise your rights, you may send a request to:
8. Right to Lodge a Complaint
Data subjects who believe that the processing of their personal data is in violation of the GDPR have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali), Piazza Venezia 11 - 00187 Rome, Italy, or via the website www.garanteprivacy.it.
9. Cookies
For detailed information on the use of cookies, please consult our Cookie Policy.
10. Changes to This Policy
The Data Controller reserves the right to make changes to this privacy policy at any time by notifying users on this page. Please review this page regularly to check for any updates. Changes to the policy are effective from the date of publication on this page.