Privacy Policy

1. Data Controller

2. Categories of data processed

The website may involve the processing of technical and navigation data necessary for the operation, security and proper delivery of web pages. Personal data voluntarily provided by the user through e-mails sent to the addresses published on the site may also be processed.

3. Purposes and legal bases

Data may be processed to ensure the operation and security of the website, respond to requests, manage any pre-contractual or professional relationships resulting from such contact and comply with applicable legal obligations. Depending on the processing activity, the legal bases may include the performance of pre-contractual or contractual measures, compliance with legal obligations and the legitimate interests of the Data Controller where permitted by applicable law.

4. Provision of personal data

Browsing the website does not require users to complete forms or voluntarily provide personal data. Sending an e-mail to one of the published addresses, however, results in the acquisition of the data voluntarily provided by the data subject to the extent necessary to respond to the request.

5. Processing methods and retention

Personal data are processed using appropriate IT and organisational measures having regard to the nature of the processing. Data are retained for the period necessary to achieve the purposes for which they were collected and, where applicable, for any additional period required by law or for the protection of the Data Controller's rights.

6. Hosting and technical providers

The website is hosted through Vercel infrastructure. In connection with the provision of the service, technical data relating to navigation, infrastructure security and the proper functioning of the website may therefore be processed.

7. Transfers to third countries

Certain processing carried out by technical providers may involve transfers of data outside the European Economic Area. Such transfers are managed through the safeguards provided by applicable law, including, where necessary, the Standard Contractual Clauses approved by the European Commission.

8. Disclosure of personal data

Personal data may be processed by persons authorised by the Data Controller and by technical service providers necessary for the operation of the website and related services. Personal data are not disseminated, except where required by law.

9. Data subject rights

Where provided for by Regulation (EU) 2016/679, the data subject may exercise the rights of access, rectification, erasure, restriction of processing, objection and data portability, and may withdraw any consent previously given without affecting the lawfulness of processing carried out before withdrawal.

10. Complaint to the supervisory authority

The data subject may lodge a complaint with the Italian Data Protection Authority if they consider that the processing of their personal data infringes applicable data protection law.

11. Changes to this Privacy Policy

This Privacy Policy may be updated as a result of legislative or organisational changes or the introduction of new website features and services.