Privacy & Cookies Policy

Types of data collected

The Personal Data collected by this Web site, independently or through third parties, include: Cookies, Usage data; About me; Data provided during service usage; first name, last name; email; web site; telephone number; several types of Data.

Full details on each type of collected data can be found in the dedicated sections of this privacy policy or in the specific text shown before the data is collected.

Personal Data can be freely provided by the User or, in the case of Usage Data, collected automatically while using this Web site.

Unless otherwise specified, all Data required by this Web Site are mandatory. Failure to provide such Data, it could be impossible for this Web Site to provide the Service. If some information is not marked as necessary, Users are not required to give this information, without any consequence on the provision of the Service or its operation.

In case of any doubt regarding mandatory Data, Users are invited to get in contact with the Data Controller.

Unless otherwise specified, the use of Cookies – or other tracking tools – by this Web site or by the owners of third party services used by this Web site, has the purpose of providing the Service requested by the User, in addition to further purposes described in this document and in the Cookie Policy, if available.

The User is responsible for the Personal Data of third parties published or shared through this Web site and guarantees that they have the right to communicate or disseminate them, holding the Data Controller harmless from any third-party liability.

Processing methods and location of the collected Data

Processing methods

The Data Controller takes the appropriate security measures to prevent unauthorised access, disclosure, modification or destruction of the Personal Data.

The processing is carried out using IT and/or electronic tools, with organizational procedures and principles that are strictly related to the specified purposes. In addition to the Data Controller, in some cases, other subjects involved in the organization of this Web site (administrative, commercial, marketing and legal staff, system administrators) or external parties (such as third party technical service providers, postal couriers, hosting providers, IT companies, communication agencies) may have access to the Data, also appointed, if necessary, as Data Supervisors by the Data Controller. The updated list of these Data Supervisors can be requested from the Data Controller.

Legal basis of the processing

The Data Controller processes Personal Data relating to the User if one of the following conditions exists:

  • the User has given consent for one or more specific purposes; Note: in some jurisdictions the Data Controller may be authorized to process Personal Data without the User’s consent or without another of the legal bases specified below, as long as the User does not object (“opt-out”) to this treatment. However, this is not applicable if the processing of Personal Data is regulated by European legislation regarding the protection of Personal Data;
  • processing is necessary for the execution of a contract with the User and/or the execution of pre- contractual obligations;
  • processing is necessary to fulfil a legal obligation to which the Data Controller is subject;
  • processing is necessary to perform actions of public interest or for the exercise of public authority vested in the Data Controller;
  • processing is necessary for the pursuit of the legitimate interest of the Data Controller or third parties.

In any case, it is always possible to ask the Data Controller to clarify the actual legal basis of each processing and in particular to specify whether the treatment is based on the law, on a contract or if it is necessary to conclude a contract.

Location

The Data are processed at the Data Controller’s operating offices and in any other location where the parties involved in the processing are located. For further information, please contact the Data Controller.
The User’s Personal Data may be transferred to a country other than that in which the User is located. To obtain further information on the processing location, the User can refer to the section relating to the details on the processing of Personal Data.

The User has the right to obtain information regarding the legal basis for the transfer of Data outside the European Union or to an international organization governed under public international law or consisting of two or more countries, such as the UN, as well as regarding the security measures adopted by the Data Controller to protect the Data.

The User can check if one of the transfers described above takes place by reviewing the section of this document relating to the details on the Personal Data processing or request information from the Data Controller by contacting it at the contact details shown at the beginning.

Retention period

The Data are processed and retained for the time required by the purposes for which they were collected.

Therefore:

  • Personal Data collected for purposes related to the execution of a contract between the Data Controller and the User will be retained until the execution of the contract is completed.
  • Personal Data collected for purposes attributable to the legitimate interest of the Data Controller will be retained until this interest is satisfied. The User can obtain further information regarding the legitimate interest pursued by the Data Controller in the relevant sections of this document or by contacting the Data Controller.

When the processing is based on the User’s consent, the Data Controller can retain the Personal Data longer until such consent is revoked. Furthermore, the Data Controller may be obliged to keep Personal Data for a longer period in compliance with a legal obligation or by order of an authority.

At the end of the retention period, the Personal Data will be deleted. Therefore, at the end of this term, the right of access, deletion, rectification and the right to Data portability can no longer be exercised.

Purpose of the Processing of the collected Data

The User Data are collected to allow the Data Controller to provide its Service, comply with legal obligations, respond to enforcement requests or actions, protect its own rights and interests (or those of Users or third parties), identify any malicious or fraudulent activity, as well as for the following purposes: Interaction with live chat platforms, Interaction with social networks and external platforms, Comment on the contents, Contact the User, Contact management and sending of messages, Interaction with platforms for data collection and other third parties, SPAM protection, Remarketing and behavioural targeting, Statistics, Transfer the Data outside the EU and Display of content from external platforms.

To obtain detailed information on the purposes of the processing and on the Personal Data processed for each purpose, the User can refer to the section “Details on the processing of Personal Data”.

Details on the processing of Personal Data

Personal data are collected for the following purposes and using the following services:

·       Comment on the contents

The comment services allow Users to formulate and make public their comments regarding the content of this Web site.

Depending on the settings decided by the Data Controller, the Users can also leave comments anonymously. If an email address is included among the Personal Data provided by the User, this may be used to send notifications of comments regarding the same content. Users are responsible for the content of their comments.

In the event that a comment service provided by third parties is installed, it is possible that even if the Users do not use the comment service, the same collects traffic data relating to the pages in which comment service is installed.

Comment system managed directly (this Web site)

This Web site has its own content commenting system.

Personal Data processed: last name; usage data; email; first name; web site.

·       Contact the User

Contact by telephone (this Web site)

Users who have provided their telephone number may be contacted for commercial or promotional purposes linked to this Web site, as well as to fulfil requests for support.

Personal Data processed: telephone number.

Mailing list or newsletter (this Web site)

By registering to the mailing list or newsletter, the User’s email address is automatically added to a list of contacts to which email messages may be sent containing information, including commercial and promotional information, relating to this Web site. The User’s email address may also be added to this list as a result of registering on this Web site or after making a purchase.

Personal Data processed: email.

Contact form (this Web site)

By filling in the contact form with his/her Data, the User consents to their use in order to respond to requests for information, estimates, or any other type specified by the form header.

Personal data processed: last name; email; first name; telephone number; several types of Data.

·       Contact management and sending of messages

This type of services allows the management of a database of email contacts, phone contacts or any type of contacts, used to communicate with the User.

Furthermore, these services could allow the collection of data relating to the date and time in which the messages are viewed by the User, as well as the interaction of the User with them, such as information regarding clicks on the links contained in the messages.

Mailchimp (The Rocket Science Group, LLC.)

Mailchimp is an email address management and sending service provided by The Rocket Science Group, LLC.

Personal data processed: email.

Location of processing: United States – Privacy Policy. Person subscribed to the Privacy Shield.

·       Interaction with live chat platforms

This type of services allows the interactions with live chat platforms, managed by third parties, directly from the pages of this Web site. This allows the User to contact this Web site’s support service or this Web site to contact the User while he is browsing its pages.

In the event that an interaction service with live chat platforms is installed, it is possible that even if the Users do not use the service, the same collects Usage Data relating to the pages in which it is installed. Additionally, live chat conversations may be recorded.

Facebook Messenger Customer Chat (Facebook, Inc.)

Facebook Messenger Customer Chat is an interaction service with Facebook Messenger live chat platform, provided by Facebook, Inc.

Personal data processed: Cookies; Data provided when using the service; Usage data; About me.

Location of processing: United States – Privacy Policy. Person subscribed to the Privacy Shield.

·       Interaction with data collection platforms and other third parties

This type of services allows the Users to interact with platforms for data collection or other services directly from the pages of this Web site, with the purpose of data storage or reusage.

In the event that any such service is installed, it is possible that even if the Users do not use the service, the same collects Usage Data relating to the pages in which it is installed.

Mailchimp widget (The Rocket Science Group LLC)

The Mailchimp widget allows to interact with the email address and Mailchimp message management service provided by The Rocket Science Group LLC.

Personal data processed: email.

Location of processing: United States – Privacy Policy. Person subscribed to the Privacy Shield.

·       Interaction with social networks and external platforms

This type of services allows the interactions with social networks, or with other external platforms, directly from the pages of this Web site.

The interactions and information acquired by this Web site are in any case subject to the User’s privacy settings relating to each social network.

This type of service may still collect traffic data for the pages where the service is installed, even when Users do not use it.

It is recommended to log out of the respective services to make sure that the data processed on this Web site is not connected back to the User’s profile.

“Like” button and Facebook social widgets (Facebook, Inc.)

The “Like” button and Facebook social widgets are services of interaction with the Facebook social network, provided by Facebook, Inc.

Personal data processed: Cookies; Usage data.

Location of processing: United States – Privacy Policy. Person subscribed to the Privacy Shield.

+1 button and Google+ social widgets (Google Inc.)

The +1 button and Google+ social widgets are services of interaction with the Google+ social network, provided by Google Inc.

Personal data processed: Cookies; Usage data.

Location of processing: United States – Privacy Policy. Person subscribed to the Privacy Shield.

Tweet button and Twitter social widgets (Twitter, Inc.)

The Tweet button and Twitter social widgets are services of interaction with the Twitter social network, provided by Twitter, Inc.

Personal data processed: Cookies; Usage data.

Location of processing: United States – Privacy Policy. Person subscribed to the Privacy Shield.

“Pin it” button and Pinterest social widgets (Pinterest)

The “Pin it” button and Pinterest social widgets are services of interaction with the Pinterest platform, provided by Pinterest Inc.

Personal data processed: Cookies; Usage data.

Location of processing: United States – Privacy Policy. Person subscribed to the Privacy Shield.

·       SPAM protection

This type of service analyses this Web site’s traffic, potentially containing Users’ Personal Data, in order to filter it from parts of traffic, messages and contents recognized as SPAM.

Akismet (Automattic Inc.)

Akismet is a SPAM fighting service provided by Automattic Inc.

Personal data processed: several types of Data according to what is specified in the privacy policy of the service.

Location of processing: United States – Privacy Policy.

Google reCAPTCHA (Google Inc.)

Google reCAPTCHA is a SPAM fighting service provided by Google Inc.
The use of reCAPTCHA system is subject to Google privacy policy and terms of use.

Personal data processed: Cookies; Usage data.

Location of processing: United States – Privacy Policy. Person subscribed to the Privacy Shield.

·       Remarketing and behavioural targeting

This type of service allows this Web site and its partners to communicate, optimize and serve advertisements based on the User’s past use of this Web site.

This activity is carried out by tracking Usage Data and Cookies, information that is transferred to the partners to whom the remarketing and behavioural targeting activity is related.

Some services offer a remarketing option based on email address lists.

In addition to the opt-out option offered by the services listed below, the User can opt to be excluded from receiving cookies relating to a third-party service by visiting the opt-out page of the Network Advertising Initiative.

Facebook Remarketing (Facebook, Inc.)

Facebook Remarketing is a remarketing and behavioural targeting service provided by Facebook, Inc. that connects this Web site’s activity with the Facebook advertising network.

Personal data processed: Cookies; Usage data.

Location of processing: United States – Privacy Policy – Opt Out. Person subscribed to the Privacy Shield.

Facebook Custom Audience (Facebook, Inc.)

Facebook Custom Audience is a remarketing and behavioural targeting service provided by Facebook, Inc. that connects this Web site’s activity with the Facebook advertising network.

Personal data processed: Cookies; email.

Location of processing: United States – Privacy Policy – Opt Out. Person subscribed to the Privacy Shield.

·       Statistics

The services contained in this section allow the Data Controller to monitor and analyse traffic data and are used to keep track of User behaviour.

Google Analytics with anonymized IP (Google Inc.)

Google Analytics is a web analysis service provided by Google Inc. (“Google”). Google uses the Personal Data collected for the purpose of tracking and examining the use of this Web Site, preparing reports and sharing them with the other services developed by Google.

Google may use the Personal Data to contextualize and personalize the advertisements of its advertising network.

This Google Analytics integration makes your IP address anonymous. Anonymization works by shortening the IP address of Users within the borders of the member states of the European Union or in other members of the agreement on the European Economic Area. Only in exceptional cases, the IP address will be sent to Google’s servers and shortened within the United States.

Personal data processed: Cookies; Usage data.

Location of processing: United States – Privacy Policy – Opt Out. Person subscribed to the Privacy Shield.

Tracking of Facebook Ads conversions (Facebook pixel) (Facebook, Inc.)

Tracking of Facebook Ads conversions (Facebook pixel) is a statistics service provided by Facebook, Inc. connecting the data deriving from Facebook ads network with the actions performed within this Web site. Facebook pixel tracks the conversions that can be ascribed to Facebook, Instagram and Audience Network ads.

Personal data processed: Cookies; Usage data.

Location of processing: United States – Privacy Policy. Person subscribed to the Privacy Shield.

Facebook Analytics for Apps (Facebook, Inc.)

Facebook Analytics for Apps is a statistics service provided by Facebook, Inc.

Personal data processed: Usage data; several types of Data according to what is specified in the privacy policy of the service.

Location of processing: United States – Privacy Policy. Person subscribed to the Privacy Shield.

·       Transfer of data outside the EU

The Data Controller may transfer Personal Data collected within the EU to third countries (that is, all countries that are not part of the EU) only in accordance with a specific legal basis. Therefore, such Data transfers are performed according to one of the legal bases described below.

The User can request information from the Data Controller regarding the applicable legal basis concretely applicable to each individual service.

Data transfer to countries that guarantee European standards (this Web site)

When this is the legal basis, the transfer of Personal Data from the EU to third countries takes place on the basis of a suitability decision adopted by the European Commission. The European Commission adopts suitability decisions regarding individual third countries which it deems guarantee a level of Personal Data protection comparable to that set forth by European legislation on Personal Data protection. The User can view the updated list of suitability decisions on the European Commission’s web site.

Personal data processed: several types of Data.

Transfer to third countries based on consent (this Web site)

When this is the legal basis, the transfer of Personal Data from the EU to third countries takes place only when the User has expressly consented to this transfer after being informed about the risks due to the absence of a suitability decision and the adopted suitable guarantees.

In such cases, the Data Controller informs Users and collects their consent through this Web site.

Personal data processed: several types of Data.

·       Displaying content from external platforms

This type of services enables to display the content hosted on external platforms directly from the pages of this Web Site and to interact with it.

In the event that this kind of service is installed, it is possible that even if the Users do not use the service, the same collects traffic data relating to the pages in which it is installed.

Google Fonts (Google Inc.)

Google Fonts is a font style visualization service managed by Google Inc. that allows this Web site to integrate such contents within its pages.

Personal data processed: Usage data; several types of Data according to what is specified in the privacy policy of the service.

Location of processing: United States – Privacy Policy. Person subscribed to the Privacy Shield.

Gravatar (Automattic Inc.)

Gravatar is an image viewing service managed by Automattic Inc. that allows this Web site to integrate such content within its pages.

Please note that if Gravatar images are used for commenting systems, the commenter’s email address (or parts of it) may be sent to Gravatar, even if they are not subscribed to this service.

Personal data processed: Usage data; email.

Location of processing: United States – Privacy Policy.

Widget Google Maps (Google Inc.)

Google Maps is a map visualization service managed by Google Inc. that allows this Web Site to integrate such contents within its pages.

Personal data processed: Cookies; Usage data.

Location of processing: United States – Privacy Policy. Person subscribed to the Privacy Shield.

Widget Video YouTube (Google Inc.)

YouTube is a video content viewing service managed by Google Inc. that allows this Web site to integrate such content within its pages.

Personal data processed: Cookies; Usage data.

Location of processing: United States – Privacy Policy. Person subscribed to the Privacy Shield.

 

User rights

Users can exercise certain rights regarding the Data processed by the Data Controller.

In particular, the User has the right to:

  • revoke consent at any time. The User can revoke the previously expressed consent to the processing of their Personal Data.
  • oppose the processing of his/her data. The User can object to the processing of his/her Data when it occurs on a legal basis other than consent. Further details on the right to object are specified in the section below.
  • access his/her Data. The User has the right to obtain information on the Data processed by the Data Controller, on certain aspects of the processing and to receive a copy of the processed Data.
  • verify and request rectification. The User can verify the correctness of his/her Data and request its updating or correction.
  • obtain the limitation of processing.When certain conditions are met, the User can request the limitation of the processing of his/her Data. In this case, the Data Controller will not process the Data for any other purpose other than their retention.
  • obtain the deletion or removal of their Personal Data. When certain conditions are met, the User can request the deletion of his/her Data by the Data Controller.
  • receive his/her Data or have them transferred to another Data Controller. The User has the right to receive his/her Data in a structured format, commonly used and readable by an automatic device and, where technically feasible, to obtain the transfer without obstacles to another Data Controller. This provision is applicable when the Data is processed with automated tools and the processing is based on the User’s consent, on a contract to which the User is a party or on contractual measures connected to it.
  • submit a complaint. The User can submit a complaint with the competent personal data protection supervisory authority, or he/she can act in court.

Details on the right to object

When Personal Data is processed in the public interest, in the exercise of public authority vested in the Data Controller or to pursue a legitimate interest of the Data Controller, Users have the right to object to the processing for reasons connected to their particular situation.

Users are reminded that if their Data are processed for direct marketing purposes, they can object to the processing without providing any reasons. To find out if the Data Controller processes data for direct marketing purposes, Users can refer to the respective sections of this document.

How to exercise the rights

To exercise their rights, the Users can direct a request to the contact details of the Data Controller as specified in this document. Requests are submitted free of charge and processed by the Data Controller as soon as possible, and at the latest within one month.

Cookie Policy

This Web site uses Cookies and other Identifiers. To find out more, the User can consult the Cookie Policy.

 

Further information on the processing

Defence in court

The User’s Personal Data may be used by the Data Controller in court or in the stages leading up to possible legal action, for defence against improper use of this Web Site or of the related services by the User.
The User declares to be aware that the Data Controller may be obliged to disclose the Data on request of the public authorities.

Specific information

Upon request of the User, in addition to the information contained in this privacy policy, this Web Site may provide the User with further and contextual information regarding specific services, or the collection and processing of Personal Data.

System logs and maintenance

For needs related to operation and maintenance, this Web Site and any third party service used by it may collect system logs, which are files that record interactions and that may also contain Personal Data, such as the User IP address.

Information not contained in this policy

More information regarding the processing of Personal Data may be requested at any time from the Data Controller using the contact information.

Response to “Do Not Track” requests

This Web Site does not support “Do Not Track” requests.

To find out if any of the third-party services support them, the User is invited to consult their respective privacy policy.

Changes to this privacy policy

The Data Controller reserves the right to make changes to this privacy policy at any time, giving notice thereof to the Users on this page and, if possible, on this Web site and if technically and legally feasible, by sending a notification to the Users through one of the contacts in its possession. Therefore, please consult this page often, referring to the date of the last change shown at the bottom.

If the changes concern processing whose legal basis is consent, the Data Controller will collect the User’s consent again, if necessary.

Definitions and legal references

Personal Data (or Data)

Personal Data is intended as any information which, directly or indirectly, even by reference to any other information, including a personal identification number, makes a natural person identified or identifiable.

Usage data

This is the information collected automatically through this Web Site (also by third party applications integrated in this Web Site), including: IP addresses or domain names of the computers used by the User who connect to the Application, the addresses in URI (Uniform Resource Identifier) notation, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response from the server (success, error, etc.) the country of origin, the characteristics of the browser and operating system used by the visitor, the various time connotations of the visit (eg, time spent on each page) and details of the path followed within the Application, with particular reference to the sequence of pages visited, the parameters related to the operating system, and the computer environment of the User.

User

The individual who uses this Web Site who, unless otherwise specified, coincide with the Data Subject.

Data Subject

The natural person that the Personal Data refer to.

Data Supervisor (or Supervisor)

The natural person, legal entity, public administration and any other body processing personal data on behalf of the Data Controller, in accordance with the provisions of this privacy policy.

Data Controller (or Controller)

The legal or natural person, public authority, service or other body that, individually or together with others, determines the purposes and means for personal data processing as well as the tools employed, including the safety measures related to this Web site operation and use. Unless otherwise specified, the Data Controller is the owner of this Web site.

This Web Site (or this Application)

The hardware or software tool through which Users’ Personal Data are collected and processed.

Service

The Service provided by this Web Site as defined in the related terms (where available) on this site/application.

European Union (or EU)

Unless otherwise specified, any reference to European Union contained in this document is deemed to include all current member states of the European Union and of the European Economic Area.

Cookie

Small set of data stored on the User’s device.

About me

Allows to access the ‘About me’ section in the profile.

Legal references

This privacy statement has been prepared based on provisions of several legislations, including articles 13 and 14 of (EU) Regulation 2016/679.

Unless otherwise specified, this privacy policy applies only to this Web Site.

English