Privacy Policy
1. OWNER OF THE TREATMENT
The data controller is Barbara Dolci.
The owner has not appointed a Data Protection Officer, as the legal conditions for the mandatory appointment do not exist.
2. PURPOSE OF THE TREATMENT
Personal data freely provided by Users will be lawfully processed by the Data Controller pursuant to art. 6 of the Regulation for the following purposes:
-
navigation of the site, in relation to the possibility of collecting data of the User necessary at a technical level, such as e.g. the IP address, while browsing the site;
-
response to requests for information received by email;
-
sending informative/promotional newsletters, upon specific request/consent from the interested party;
-
legal obligations, or to fulfill obligations established by law, by an authority, by a regulation or by European legislation.
3. LEGAL BASIS OF THE TREATMENT
The legal basis of the processing is to fulfill a legal obligation to which the Data Controller is subject for the execution of the services provided or any freely expressed consent.
4. CONSEQUENCES ON THE FAILURE TO COMMUNICATE PERSONAL DATA
The provision of personal data/consent for the processing purposes indicated above is optional, but necessary, since failure to provide them will make it impossible for the user to access the services offered by the Data Controller.
5. DATA PROCESSING AND STORAGE METHODS
The owner will process the Users' personal data using manual and IT tools, with logic strictly related to the purposes themselves and, in any case, in order to guarantee the security and confidentiality of the data.
Users' personal data will be kept for the time strictly necessary to carry out the purposes illustrated.
6. DATA COMMUNICATION
The employees and/or collaborators of the owner in charge of managing the site may become aware of the users' personal data. These subjects, formally appointed by the owner as "authorized to process" will process the user's data exclusively for the purposes indicated in this information and in compliance with the provisions of the applicable legislation.
The personal data of users may also be disclosed to third parties such as, by way of example, suppliers of IT and logistics services functional to the operation of the Site, suppliers of outsourcing or cloud computing services, professionals and consultants, judicial or administrative authorities for the fulfillment of legal obligations.
7. PROFILING AND DISSEMINATION OF DATA
Users' personal data will not be disclosed and will not be communicated without explicit consent, nor to any fully automated decision-making process, including profiling.
8. DATA TRANSFER
Users' personal data will not be transferred either to Member States of the European Union or to third countries not belonging to the European Union, if this activity is not necessary for the achievement of the aforementioned purposes.
If the data is transferred to a third country or to an international organization, the user has the right to be informed on the existence of adequate guarantees pursuant to art. 46 of the Regulation.
8. RIGHTS OF INTERESTED PARTIES
The rights granted to you by the Regulation include those of:
- ask the owner to access your personal data and information relating to them; the rectification of inaccurate data or the integration of incomplete ones; the cancellation of personal data concerning you (upon the occurrence of one of the conditions indicated in article 17, paragraph 1 of the Regulation and in compliance with the exceptions provided for in paragraph 3 of the same article); the limitation of the processing of your personal data (in the event of one of the hypotheses indicated in article 18, paragraph 1 of the Regulation);
- request and obtain from the professional - in the cases in which the legal basis of the processing is consent, and the same is carried out by automated means - your personal data in a structured format and readable by automatic device, also for the purpose of communicating such data to another data controller (so-called right to the portability of personal data);
- oppose at any time the processing of your personal data in the event of the occurrence of particular situations that concern you;
- withdraw consent at any time, limited to cases in which the processing is based on your consent for one or more specific purposes and concerns common personal data (for example date and place of birth or place of residence), or particular categories of data (e.g. data revealing your racial origin, political opinions, religious beliefs, health or sex life). The processing based on consent and carried out prior to the revocation of the same, however, retains its lawfulness;
- propose a complaint to a supervisory authority (Authority for the protection of personal data -www.garanteprivacy.it).
The Data Controller takes the utmost account of the right to privacy and the protection of personal data of its users. For any information in relation to this information, users can contact the owner by sending an e-mail message to the addresssciesa24ab@gmail.com.


