WHY THIS INFORMATION

Pursuant to Regulation (EU) 2016/679 (hereinafter "GDPR"), this page describes the methods of processing personal data.  This is an information that is provided pursuant to the Art. 13 of the GDPR. The information is not to be considered valid for other third-party websites, which may be consulted via links on this website, for which we assume no responsibility.

Personal data that can be processed
Personal data: any information relating to an identified or identifiable natural person ("interested"); an identifiable natural person is one who can be identified, directly or indirectly, with particular reference to an identifier such as a name, an identification number, location data, an online identifier or one or more characteristic elements of his physical identity, physiological, genetic, psychic, economic, cultural or social (C26, C27, C30 GDPR).
Data of contractors/users.
Navigation data

The computer systems and software procedures used to operate this site acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols.

This category of data includes the IP addresses or domain names of the computers and terminals used by users, the addresses in URI/URL (Uniform Resource Identifier/Locator) notation of the requested resources, the time of the request, the method used in submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters relating to the operating system and the user's IT environment.
Data communicated voluntarily 
The optional, explicit and voluntary sending of messages to the contact addresses indicated on this site and/or the compilation of data collection forms involves the subsequent acquisition of the sender's address, necessary to respond to requests, as well as any other personal data entered.
Information about the processing of personal data carried out through Social Media platforms 
Regarding the processing of personal data carried out by the managers of the Social Media platforms used by the Data Controller, please refer to the information provided by them through their respective privacy policies. The Data Controller processes the personal data provided by users through the dedicated Social Media platform pages, to manage interactions with users (comments, public posts, etc.) and in compliance with current legislation.
Specific information

Specific information may be present in the pages of the Site in relation to particular services or processing of the data provided.

​

Cookies and other tracking systems. What are they? What are they for?
For Cookies and other tracking systems, see the cookie policy shown in the footer of the site and below links.
 

1. WHO IS THE DATA PROCESSING OWNER? HOW TO CONTACT HIM?
The Data Controller is DEPRIORI GIOVANNA MARIA, with registered office in Via Pierre e Marie Curie, 55 – 26019 - Vailate (CR) - Italy, in the person of its pro-tempore Legal Representative, who you can contact for any information by telephone +393474701483 e-mail info@giovannadepriori.com

​

2. PURPOSE OF THE TREATMENT, LEGAL BASIS, DATA STORAGE PERIOD AND NATURE OF THE PROVISION
 

PURPOSE OF THE TREATMENT

Navigation on this website.

The data necessary for the use of web services are also processed for the purpose of:

- obtain statistical information on the use of the services (most visited pages, number of visitors per hour or day, geographical areas of origin, etc.);

- check the correct functioning of the services offered.

LEGAL BASIS 

The processing is necessary for the pursuit of the legitimate interest of the data controller or of third parties, provided that the interests or fundamental rights and freedoms of the data subject who require the protection of personal data do not prevail, taking into account the reasonable expectations nourished by the interested party and the activities strictly necessary for the functioning of the site and for the navigation itself

(Art. 6, par. 1 lett. f e C47 of the GDPR)

CONSERVATION PERIOD 

The navigation data will be stored for the duration of the browsing session.

NATURE OF THE PROVISION

The provision of data is necessary for browsing the website.

​

PURPOSE OF THE TREATMENT

Use of cookies and comparable technologies. See the cookies policy in the footer of the site.

LEGAL BASIS 

For necessary non-technical cookies and comparable technologies, the processing is based on consent to the processing of personal data (art. 6 par. 1 lett. a e C42, C43 of the GDPR)

The consent is given through the banner and the cookie policy of the site

CONSERVATION PERIOD 

See the cookies policy in the footer of the site

NATURE OF THE PROVISION

See the cookies policy in the footer of the site

​

In addition to browsing, personal data will be processed for:

PURPOSE OF THE TREATMENT

A) CONTACTS, sending contact requests, information

LEGAL BASIS 

the processing is necessary for the execution of a contract of which the interested party is a part or for the execution of pre-contractual measures adopted at the request of the same; (C44)

art. 6 par. 1 lit. b) of the GDPR

CONSERVATION PERIOD 

Maximum 24 months

NATURE OF THE PROVISION

The provision is necessary.

Failure to provide the necessary data will make it impossible to be contacted and receive information

​

PURPOSE OF THE TREATMENT

B) MANAGEMENT OF YOUR REQUESTS and requests from other interested parties, pursuant to art. 15 and following of the GDPR (rights of the interested party)

LEGAL BASIS 

Processing is necessary for compliance with a legal obligation to which the controller is subject (C45)

Article 6 par. 1 lit. c) of the GDPR

CONSERVATION PERIOD 

5 years from the closure of the request, barring disputes

NATURE OF THE PROVISION

The provision of personal data is mandatory, as it is essential to be able to implement legal obligations

​

PURPOSE OF THE TREATMENT

C) DIRECT MARKETING for sending advertising or direct sales material or for carrying out market research, commercial and promotional communications, newsletters, by automated means (e-mail).
In order to compare and possibly improve the results of automated communications, the Data Controller uses systems with reports. Thanks to the reports, the Data Controller will be able to know, for example: the number of readers, openings, unique 'clickers' and 'clicks'; the devices and operating systems used to read the communication; details of the activity of individual users; details of e-mails sent, e-mails delivered and not delivered, and e-mails forwarded; All this data is used for the purpose of comparing, and possibly improving, the results of communications.

LEGAL BASIS

Processing is based on consent to the processing of personal data (C42, C43) Art. 6(1)(a) GDPR.

CONSERVATION PERIOD

Until revocation of consent (or opt-out)

NATURE OF THE PROVISION

The provision of data is optional. Failure to provide the necessary data will result in the impossibility of receiving direct marketing communications.

​

3. TO WHOM WILL THE PERSONAL DATA BE COMMUNICATED? DATA RECIPIENTS

Personal data will be communicated, also on the basis of the purposes envisaged in specific areas, to subjects who will process the data as independent data controllers, or data processors (art. 28 of the GDPR) and processed by natural persons (art. 29 of the GDPR ) who act under the authority of the Data Controller and the Managers on the basis of specific instructions provided regarding the purposes and methods of processing, for specific purposes based on the reference area. The data will be communicated to recipients belonging to the following categories:

• Subjects that provide services for the website and communication networks, including e-mail, hosting and website management;

• For direct marketing, prior consent to subjects for the handling of direct marketing activities;

• Competent authorities for fulfillment of legal obligations and/or provisions of public bodies, upon request

The list of data processors is available by writing to info@giovannadepriori.comor to the other addresses indicated above.

​

4. WILL DATA BE TRANSFERRED TO NON-EEA COUNTRIES?

Data may be transferred outside the European Economic Area, specifically to the United States. The transfer is guaranteed by the provisions of Article 46 of the GDPR or Standard Contractual Clauses.

​

5. IS THERE AN AUTOMATED PROCESS?

Data will be transferred to non-EEA countries in particular it is specified that it will be transferred on the basis of Art. 45 to third countries international organisations for which the Commission has intervened with an adequacy decision: United States of America. In fact, the Data Controller uses suppliers that adhere to the EU-US Data Privacy Framework. In order to receive further information regarding the transfer of data outside the EEA, please contact the Data Controller at the contact details above.

​

6. WHAT ARE YOUR RIGHTS? HOW CAN YOU EXERCISE THEM?

You will be able to assert the rights as expressed by the articles 15 and subsequent of the GDPR, by contacting the Data Controller at the e-mail address info@giovannadepriori.com, or to the contacts indicated above. You have the right, at any time, to request access to your personal data (art. 15), correction (art. 16), cancellation of the same (art. 17), limitation of treatment (art. 18 ). The data controller shall inform (Art. 19) each of the recipients to whom the personal data have been transmitted of any rectification or erasure or restriction of processing carried out. The data controller communicates these recipients to the interested party if the interested party requests it. In the foreseen cases, you have the right to the portability of your data (art. 20) and in this case they will be provided to you in a structured format, commonly used and readable, by automatic device. You have the right to object (art. 21), at any time, to the processing of data based on legitimate interest, and in cases where the legal basis is consent, you have the right to revoke the consent given without prejudice to the lawfulness of the processing based on consent before revocation.

To stop receiving automated direct marketing communications (email), write an e-mail to the address info@giovannadepriori.com with the subject "automated cancellation" or you can use our automatic cancellation systems provided for emails only (opt-out). 

If you no longer wish to receive any marketing communication, please write an e-mail to info@giovannadepriori.com with the subject line "unsubscribe marketing".

In the event that he believes that the processing of personal data carried out by the Data Controller is in violation of the provisions of Regulation (EU) 2016/679, the interested party has the right to lodge a complaint with the Supervisory Authority, in particular in the Member State in where he habitually resides or works or in the place where the alleged violation of the regulation has occurred (Privacy Guarantor https://www.garanteprivacy.it/), or to take the appropriate judicial offices.

​

7. CHANGES TO THE POLICY

The Owner reserves the right to modify, update, add or remove parts of this information. In order to facilitate the verification and modification of the text, the information will contain the date of update.

 

Update date: November 24, 2023.