Subject: Privacy Policy Notice pursuant to Articles 13-14 of Regulation (EU) 2016/679
This notice is provided in accordance with Regulation (EU) 2016/679 (hereinafter referred to as "GDPR") to inform you about the processing of your personal data.
Data Controller
Lucia Zecchinato, CF ZCCLCU93R67G224N, with domicile at Via Cherubini 6, Milan (hereinafter referred to as the "Controller" or "Data Controller"), is responsible for processing your personal data.
Purpose, Legal Basis, and Types of Data Processed
The Controller will process your personal data to allow you to stay updated on our initiatives by receiving email communications related to promotions, news, and updates about our initiative. The processing of personal data is based on your consent (the legal basis is Article 6(1)(b) of the GDPR). Providing your data is optional; failure to provide it will prevent you from receiving update communications.
Where necessary, the Controller will process your personal data to establish, exercise, or defend a right in judicial, administrative, or extrajudicial proceedings and/or to comply with legal obligations and requests from competent authorities. The processing of personal data is based, respectively, on the legitimate interest of the Controller or third parties (the legal basis is Article 6(1)(f) of the GDPR) and on compliance with a legal obligation to which the Controller is subject (the legal basis is Article 6(1)(c) of the GDPR).
Types of Data Processed
The Controller will process the following personal data:
-
Common data: such as name, surname, and email address provided by you for the purpose of receiving commercial communications.
Processing Methods and Retention Period
The Controller will process your personal data using electronic means, ensuring security and confidentiality in compliance with GDPR provisions.
Your personal data will be processed in accordance with the Controller’s data retention policies and will be stored until you revoke your consent, and in any case, no longer than 24 months from the last use or interaction with the Controller.
Data Communication and Processing Scope
The Controller may disclose your personal data to the following categories of third parties:
-
Authorized and properly trained personnel of the Controller, including those responsible for security measures and confidentiality obligations;
-
Third-party IT service providers (such as hosting providers) used by the Controller;
-
Supervisory authorities;
-
Entities and authorities whose right to access personal data is expressly recognized by law or by orders issued by competent authorities.
-
Data Transfer
The Controller will process your personal data within the European Economic Area.
Data Subject Rights
The data subject may exercise the rights under Articles 15 to 22 of the GDPR by submitting a request directly to the registered office of the Controller, as indicated above, or by using the following email address: lucia.zecchinato@yahoo.com.