INTRODUCTION

This site agrees to respect the privacy of Website users in accordance with applicable data protection regulations, particularly EU Regulation 2016/679 (the "GDPR") and any subsequent amendments or related legislation.

This document ("Privacy & Cookies Policy") provides information on the processing of personal data collected through this Website (hereinafter "Website") and constitutes information to data subjects in accordance with the aforementioned regulations. Within specific areas of the Website that collect personal information, additional specific notices may be published. The following information applies only to this Website and not to other websites accessed via links.

1. DATA CONTROLLER

The Data Controller is [COMPANY NAME], registered at [FULL ADDRESS]; Tel. [PHONE NUMBER]; e-mail: [EMAIL ADDRESS]. [IF APPLICABLE: The Data Protection Officer (DPO) can be contacted at: [DPO EMAIL/CONTACT DETAILS]].

2. CATEGORIES OF PERSONAL DATA PROCESSED

The following data may be subject to processing:

2.1 Browsing Data

The processing of personal data of users who visit only the Website (without sending communications or using reserved areas) is limited to navigation data, which is necessary for the operation of IT systems responsible for the management of the Website and Internet communication protocols. This category includes IP addresses, device domain, operating system parameters used to connect to the Website, and other technical data. The Company collects these and other data (such as the number of visits and time spent on the Website) for statistical purposes and in anonymous form to monitor the operation of the Website and improve its functionality. While this information is not collected to identify users, by its nature, it could potentially allow identification through processing and association with data held by third parties.

Legal basis for processing: The legal basis for this processing is the legitimate interest of the Data Controller in the technical management related to the functionality and security of the Website as defined by Art. 6.1(f) of the GDPR.

2.2 Cookies

Cookies are small text files that the Website places on users' devices, such as computers or mobile devices, stored in directories used by the web browser. Our Website uses the following types of cookies:

Technical Cookies

We use necessary technical cookies, such as navigation or session cookies, to enable and optimize the functionality of the Website. These cookies are essential for the Website to work properly.

Legal basis for processing: The legal basis for this processing is the legitimate interest of the Data Controller as defined by Art. 6.1(f) of the GDPR.

Analytical Cookies

We use analytical cookies that collect aggregated information about the number of users and how they visit the Website. In particular, the site uses the WordPress JetPack service, whose privacy policy can be viewed at https://jetpack.com/support/privacy/. These cookies help us understand how visitors interact with our Website. We have implemented measures to anonymize the data collected through these cookies, so they do not allow for the direct identification of users.

Legal basis for processing: The legal basis for this processing is your consent in accordance with Art. 6.1(a) of the GDPR, or our legitimate interest as defined by Art. 6.1(f) where applicable.

Third-Party Cookies

There may be additional cookies inherent in the services and applications used by the Website (e.g., for map management through Google services). More information on using these cookies can be found at https://policies.google.com/privacy.

We do not use profiling cookies.

Cookie Management

Users may choose to enable or disable cookies by adjusting their browser settings according to the instructions provided by the respective providers at the following links:

• Cookie settings in Internet Explorer: http://windows.microsoft.com/it-it/windows7/how-to-manage-cookies-in-internet-explorer-9
• Cookie settings in Firefox: https://support.mozilla.org/it/kb/Gestione%20dei%20cookies
• Cookie settings in Chrome: https://support.google.com/chrome/answer/95647?hl=it
• Cookie settings in Safari and iOS: http://support.apple.com/kb/HT1677?viewlocale=it_IT

3. NECESSARY AND OPTIONAL PROCESSING

3.1 Necessary and Optional Processing

The forms to be filled out on this Website include data that are strictly necessary to manage communications and user requests, without which we cannot proceed with such requests, and optional data that are not strictly necessary. Failure to provide optional data will not entail any consequences for users.

Legal basis for processing: The legal basis for processing necessary data is the performance of a contract or pre-contractual measures as per Art. 6.1(b) of the GDPR, or our legitimate interest as defined by Art. 6.1(f) of the GDPR, depending on the specific context of the request.

4. DATA STORAGE DURATION

In accordance with the provisions of Art. 5.1. (c) of the Regulation, the information systems and computer programs used by the Data Controller are configured to minimise the use of personal and identifying data; the data will be kept for the period of time strictly necessary to achieve the specific objectives pursued and in any case, the criterion used to determine the retention period is based on compliance with the terms allowed by applicable laws and principles of minimization of processing, limitation of conservation and rational management of archives.

Specifically:

• Navigation data is retained for technical analysis related to the functionality and security of the Website; upon request, this data might be made available to judicial authorities to investigate cyber offenses committed against or through the Website.
• Data obtained from analytical cookies is anonymized and does not allow for tracing the user's identity.

5. DATA SECURITY MEASURES

The Data Controller is committed to protecting the security of users' personal information and complies with the security provisions of applicable law to prevent data loss, illegitimate or unlawful use of data, and unauthorized access, with particular reference to Arts. 25-32 of the GDPR.

We implement appropriate technical and organizational measures to ensure a level of security appropriate to the risk, including:

• Encryption of personal data where appropriate
• Regular testing and evaluation of the effectiveness of security measures
• Staff training on data protection and security

6. RECIPIENTS OF PERSONAL DATA

Your personal data may be shared, when strictly necessary for the purposes indicated, with:

• Persons appointed by the Data Controller to process personal data necessary to carry out activities strictly related to the provision of Services, who are suitably trained and committed to confidentiality;
• Third parties providing instrumental services to the Company, who typically act as data processors, such as providers of communication services, email, correspondence delivery, technical services for Website management, IT services, or, depending on the nature of requests, suppliers of products or services related to complaints or suggestions;
• Persons, bodies, or authorities who require the communication of your personal data in accordance with legal provisions or by order of authorities.

These recipients will only receive the necessary data for their functions and will use them only for the above-mentioned purposes and process them in accordance with applicable privacy regulations. The updated list of data processors is available upon written request to the Data Controller.

7. INTERNATIONAL DATA TRANSFERS

No transfer of personal data is provided outside the European Union.

8. USERS' RIGHTS

Users can exercise the rights provided in Chapter III of the GDPR at any time. Specifically, you have the right to:

• Access your personal data (Art. 15);
• Rectify inaccurate personal data or complete incomplete data (Art. 16);
• Erase your personal data ("right to be forgotten") in certain circumstances (Art. 17);
• Restrict processing of your personal data in certain circumstances (Art. 18);
• Data portability: receive the personal data you have provided to us in a structured, commonly used, and machine-readable format, and transmit it to another controller (Art. 20);
• Object to processing based on legitimate interests, direct marketing, or for scientific/historical research and statistical purposes (Art. 21);
• Withdraw consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal, where processing is based on your consent;
• Lodge a complaint with a supervisory authority (Art. 77), particularly in the EU member state of your habitual residence, place of work, or place of the alleged infringement.

These rights may be exercised by sending an email to [EMAIL ADDRESS]. We will respond to your request within one month, which may be extended by two further months where necessary, taking into account the complexity and number of requests.

9. CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. We will indicate at the bottom of the policy when it was most recently updated. We encourage you to review this policy periodically.

10. CONTACT INFORMATION

If you have any questions about this Privacy Policy or our data practices, please contact us at: [COMPANY NAME] [ADDRESS] [EMAIL] [PHONE NUMBER]

LAST UPDATED: 14/03/2025