Privacy Policy

Privacy Policy

This notice describes, in accordance with and for the purposes of Article 13 of the EU Regulation 679/2016 (General Data Protection Regulation, hereinafter GDPR), the information collected, the methods of use and sharing, and how the Data Controller manages privacy and rights in connection with the use of this website. The processing of personal data will be based on the principles of lawfulness, transparency, fairness, and protection of confidentiality and rights, always in compliance with the current national and European legislation (GDPR, Legislative Decree 196/2003 and subsequent amendments and additions, Legislative Decree 101/2018).

Data Controller

Pursuant to Articles 4 and 24 of the GDPR, the Data Controller is the legal entity responsible for the website, identifiable upon request via the contact information provided below.

Types of Data Collected

  1. Navigation Data

    The IT systems and software procedures used to operate this website acquire, during their normal operation, some data whose transmission is implicit in the use of Internet communication protocols. This category includes:

    • IP addresses or domain names of computers used by users,
    • URI (Uniform Resource Identifier) addresses of requested resources,
    • time of the request,
    • method used to submit the request to the server,
    • size of the file received in response,
    • numerical code indicating the status of the response (success, error, etc.),
    • other parameters related to the user's operating system and computer environment.

    This data is used exclusively to obtain anonymous statistical information on the use of the site and to check its correct functioning and is deleted immediately after processing. Data may be used to ascertain responsibility in the event of cybercrimes; otherwise, it is retained for no longer than seven days.

  2. Data Provided Voluntarily by the User

    Personal data freely provided by the user in order to send specific requests via the contact information or forms on the website, including data submitted through newsletter subscription (e.g., email address).

Purposes and Legal Basis of Processing Data

Data is processed for the following purposes:

  • To enable website navigation (Art. 6(1)(b) or 6(1)(c) GDPR);
  • To process contact requests (Art. 6(1)(b) GDPR);
  • For direct marketing purposes via email newsletters, subject to user consent (Art. 6(1)(a) GDPR).

Provision of Personal Data

  • Data necessary for navigation and service requests is mandatory. Failure to provide it may make it impossible to use the website or receive the requested service.
  • Data for marketing purposes is optional and does not affect access to website services.

Methods and Location of Processing

Processing is carried out using both manual and automated tools. Security measures are in place to protect data against loss, unauthorized access, and unlawful use. Processing is performed in compliance with applicable legislation and follows international standards of data protection.

Data Communication

Data may be shared with:

  • Internal staff involved in website operations (admin, marketing, legal, IT, etc.);
  • External parties (e.g., IT providers, communication agencies), as Data Processors under Article 28 GDPR;
  • Public/private entities entitled to access the data under the law;
  • Other third parties providing auxiliary services to the Data Controller.

Data Retention

As per Article 5(1)(e) GDPR, data is stored only for as long as necessary to fulfill the stated purposes:

  • Contractual data: retained for the duration of the relationship and further required retention periods under the law.
  • Tax and administrative data: retained as required by fiscal/legal obligations.
  • Marketing data: retained for up to 24 months from the date of consent, unless earlier revocation is requested.

After expiration, data is deleted or anonymized unless renewed consent is provided.

Data Transfer

Personal data is not transferred outside the European Union. Should such transfers occur in the future, they will comply with Articles 44 et seq. of the GDPR, based on:

  • adequacy decisions by the European Commission,
  • appropriate safeguards by the data recipient,
  • binding corporate rules.

User Rights

Users may exercise the following rights:

  • Withdraw consent at any time;
  • Access their data and receive a copy (Art. 15 – Right of Access);
  • Request correction of inaccurate or outdated data (Art. 16 – Right to Rectification);
  • Request deletion of personal data (Art. 17 – Right to Erasure);
  • Request restriction of processing under certain conditions (Art. 18 – Right to Restriction);
  • Request portability of their data (Art. 20 – Right to Data Portability);
  • Object to data processing based on legitimate interest or public interest (Art. 21 – Right to Object);
  • Lodge a complaint with the national data protection authority (e.g., [Supervisory Authority website]).

Requests may be sent via the contact methods listed in this policy. All requests are handled free of charge and as promptly as possible.

Updates to this Privacy Policy

This Privacy Policy may be updated at any time. Changes will be effective upon publication. Users are encouraged to regularly review this page to stay informed about the latest updates.