Information on the Processing of Personal Data
For users consulting the websites: www.davidedallosso.it and www.atelierdallosso.it, pursuant to Article 13 of Regulation (EU) 2016/679
WHY THIS INFORMATION?
Pursuant to Regulation (EU) 2016/679 (hereinafter referred to as the “Regulation”), this page describes how the personal data of users consulting the website is processed.
DATA CONTROLLER
Following the consultation of the websites listed above, data relating to identified or identifiable individuals may be processed.
The data controller is Atelier Dall’Osso s.n.c. – Via Newton 5/L – 50051 Castelfiorentino (FI) – tax code and VAT number 01382260527 – atelier@davidedallosso.it
TYPES OF DATA PROCESSED AND PURPOSE OF PROCESSING
Navigation data
The computer systems and software procedures used to operate this website acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols.
This category of data includes IP addresses or domain names of the computers and terminals used by users, addresses in URI/URL (Uniform Resource Identifier/Locator) notation of the resources requested, the time of the request, the method used in submitting the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters relating to the user’s operating system and computer environment.
The data, which is necessary for the use of web services, is also processed for the purpose of:
- Obtaining statistical information on the use of the services (most visited pages, number of visitors by time slot or daily, geographical areas of origin, etc.);
- Checking the proper functioning of the services offered.
Browsing data does not remain for more than seven days (except in the case of a need to ascertain crimes by the judicial authorities).
Data provided voluntarily by the user
The voluntary and explicit sending of electronic mail to the addresses indicated in the different access channels of this website does not imply a request for consent, and any completion of specifically prepared forms implies the subsequent acquisition of the address and data of the sender/user, necessary to respond to the instances produced and/or provide the requested service. The voluntary sending, on your part, of e-mails to our e-mail addresses do not require further information or requests for consent. On the contrary, specific summary disclosures will be shown or displayed on the pages of the website set up for particular services on request (forms). The user will therefore have to explicitly consent to the use of the data in these forms in order to send the request.
Contact form
The processing of your data, collected and stored in connection with the completion of our form, involves the subsequent acquisition of the sender’s/user’s address and data, necessary to respond to inquiries sent through the form, provide service and support services.
Cookies
Please refer to the specific information accessible at the following link.
Newsletter
The processing of your data, collected and stored in relation to the compilation of the relevant form, has as its legal basis your consent and is carried out for the following purposes: to proceed with the subscription to the newsletter, send advertising material, communications of an informative and commercial nature, relating to www.davidedallosso.it and www.atelierdallosso.it.
If, in any case, you wish to object to the processing of your data for marketing purposes carried out by the means indicated herein, as well as to withdraw the consent given, you may do so at any time by contacting the Data Controller at the contact details indicated in this notice, without prejudice to the lawfulness of the processing based on the consent given before the revocation.
IS PROVIDING DATA MANDATORY OR NOT?
The legal basis that legitimizes the processing of navigation data is represented by the legitimate interest of the owner to make usable features of the website and improve web navigation as a result of following the user’s access.
We inform you that that providing data is optional for some fields and mandatory for others (marked with an asterisk) and failure to provide the mandatory data will result in NOT sending the form.
DATA PROCESSING METHODS
The personal data you provide will be subject to processing operations in compliance with the above-mentioned legislation. The data will be processed both by computer and on paper, in compliance with the appropriate security measures in accordance with the GDPR.
RECIPIENTS OF THE DATA
The Data Controller communicates the personal data of users of the website only within the limits permitted by law and in accordance with the following. In particular, your personal data may be communicated to the following authorized parties:
- Employees and collaborators, who will act as authorized subjects of the processing for the internal organization of business activities;
- Companies that carry out for the Owner, in their capacity as data processing managers, specific technical and organizational services (computer services, such as software and applications for business management).
The processing of your personal data by the aforementioned entities is always carried out within the limits of the purposes for which we have collected them, only when strictly necessary to ensure maximum functionality of our services and in accordance with the security measures and best practices described in this Privacy Policy.
TRANSFER OF DATA ABROAD
The data collected is not transferred abroad.
RETENTION PERIOD
Collected data will be retained for a period of time not exceeding the fulfillment of the purposes for which it is processed or in accordance with the deadlines prescribed by legal regulations.
RIGHTS OF THE INTERESTED PARTIES
Data subjects have the right to obtain from the Data Controller, in the cases provided for, access to their personal data and the rectification or erasure thereof or the restriction of processing concerning them or to object to processing (Art. 15 et seq. of the Regulations).
RIGHT TO COMPLAIN
Data subjects who believe that the processing of personal data relating to them carried out through this website is in violation of the provisions of the Regulation have the right to lodge a complaint with the Guarantor, as provided for in art. 77 of the Regulation itself, or to take appropriate legal action (art. 79 of the Regulation). The data subject may also lodge a complaint with a supervisory authority.
RIGHT TO PORTABILITY
Where the processing of your data is based on your consent or contract, you have the right to receive your data in a structured, commonly used, machine-readable format and to request that it be directly transferred to another Data Controller.