In compliance with obligations arising from European legislation (Regulation (EU) 2016/679, GDPR) and subsequent amendments, this website respects and protects the privacy of visitors and users, making every effort possible and proportionate not to infringe upon users’ rights.
Legal Basis for Data Processing
The provision of data and therefore the Consent to the collection and processing of data is optional; the User can deny consent and can revoke a previously provided consent at any time (by simply writing “cancellation” as the subject in an email to firstname.lastname@example.org). However, denying consent may result in the inability to provide certain services, and the browsing experience on the website could be compromised.
Starting from May 25, 2018 (the GDPR’s effective date), this website will process some data based on the legitimate interests of the data controller.
Collected Data and Purposes
Like all websites, this website also uses log files in which automatically collected information is stored during users’ visits. The collected information may include:
– Internet Protocol (IP) address;
– Browser type and device parameters used to connect to the site;
– Internet Service Provider (ISP) name;
– Date and time of visit;
– Referring and exiting website pages;
– Possibly the number of clicks.
The above information is processed automatically and collected solely in an aggregated form to verify the proper functioning of the site and for security reasons (starting from May 25, 2018, this information will be processed based on legitimate interests of the data controller).
For security purposes (anti-spam filters, firewalls, virus detection), automatically registered data may also include personal data such as the IP address, which could be used, in accordance with the applicable laws, to block attempts to damage the site itself or to harm other users or engage in harmful or criminal activities. This data is never used for the identification or profiling of the user but only for the purpose of protecting the site and its users (starting from May 25, 2018, this information will be processed based on legitimate interests of the data controller).
The received data will be used exclusively for the provision of the requested service and for the time strictly necessary to provide the service. Information that users of the site choose to make public through the services and tools provided, are provided knowingly and voluntarily by the user, exempting this website from any responsibility for any violations of the law. It is up to the user to verify that they have permission to enter personal data of third parties or content protected by national and international regulations.
The data collected by the site during its operation is used exclusively for the above-mentioned purposes and kept for the time strictly necessary to carry out the specified activities. In any case, the data detected by the site will never be provided to third parties, for any reason, unless required by a legitimate request from the judicial authority and only in the cases provided for by law.
Data used for security purposes (blocking attempts to damage the site) are kept for 7 days.
The data collected by the website is processed at the data controller’s headquarters and at the web hosting data center. The web hosting provider (ET Hosting by Emanuele Tolomei, with registered office in Località Collicelle, 02010 Labro RI – IT), which is responsible for data processing, processes data on behalf of the data controller, located in the European Economic Area and acting in compliance with European regulations.
Session cookies are essential to distinguish between logged-in users and are useful to prevent a requested functionality from being provided to the wrong user, as well as for security purposes to prevent attacks on the site. Session cookies do not contain personal data and last for the duration of the session only, i.e., until the browser is closed. Consent is not required for these cookies.
Functionality cookies used by the site are strictly necessary for the use of the site, particularly for an expressed request for functionality by the user (such as Login), for which no consent is required.
This website also acts as an intermediary for third-party cookies, used to provide additional services and functionalities to visitors and improve the use of the website, such as social buttons or videos. This website has no control over third-party cookies, which are entirely managed by third parties. Consequently, information about the use of these cookies, their purposes, and instructions for disabling them are provided directly by third parties on the indicated pages below.
For further information on Google Analytics cookies, please visit the Google Analytics Cookie Usage on Websites page.
Users can selectively disable the collection of data by Google Analytics by installing the appropriate browser add-on provided by Google (opt-out).
cookie: test_cookie .doubleclick.net is not a permanent cookie, but is used to check if the user’s browser supports cookies.
Social Network Plugins
The collection and use of information obtained through the plugin are regulated by the respective privacy policies of the social networks, which should be referred to.
Facebook – (cookie information link)
Twitter – (cookie information link)
LinkedIn – (cookie information link)
Google+ – (cookie information link).
Data Transfer to Non-EU Countries
This website may share some of the collected data with services located outside the European Union area. In particular, with Google, Facebook, Twitter, and Microsoft (LinkedIn) through social plugins and the Google Analytics service. This transfer is authorized based on specific decisions of the European Union and the Italian Data Protection Authority, in particular decision 1250/2016 (Privacy Shield – here’s the Italian DPA’s page on Privacy Shield), therefore no further consent is required. The aforementioned companies guarantee their adherence to the Privacy Shield.
This website processes user data in a lawful and proper manner, adopting appropriate security measures to prevent unauthorized access, disclosure, modification, or unauthorized destruction of data. Processing is carried out using computers and/or IT tools, with organizational procedures and logic closely related to the specified purposes. In addition to the data controller, in some cases, the data may be accessible to certain types of persons involved with the website’s organization (administration, sales, marketing, legal, system administration) or external parties (such as third-party technical service providers, mail carriers, hosting providers, IT companies, communications agencies).
Pursuant to the European Regulation 679/2016 (GDPR) and national regulations, the User can, in accordance with the methods and limits established by current legislation, exercise the following rights:
Request confirmation of the existence of personal data concerning them (right of access);
Know its origin;
Receive intelligible communication;
Have information about the logic, methods, and purposes of the processing;
Request the updating, rectification, integration, deletion, anonymization, or blocking of data processed in violation of the law, including those no longer necessary for the purposes for which they were collected;
In cases of processing based on consent, receive their data provided to the data controller in a structured and commonly used format, and transmit those data to another data controller without hindrance from the data controller to whom they were provided;
The right to lodge a complaint with the Supervisory Authority (Italian Data Protection Authority – link to the Italian DPA’s page);
And more generally, exercise all the rights granted by the current provisions of the law.
Requests should be addressed to the Data Controller.
If the data are processed based on legitimate interests, the rights of the data subjects (except for the right to data portability, which is not provided for by the regulations) are guaranteed, in particular the right to object to the processing, which can be exercised by sending a request to the data controller.
The Data Controller, pursuant to current laws, is the site administrator, Ambrosiano Pintus, who can be contacted through the CONTACTS section.
Google is appointed as the data processor, processing data on behalf of the data controller (Google Analytics).