Mod.: IS – Updated 11/2023

Personal data processing information.
Articles 13 and 14 EUROPEAN REGULATION No. 679/2016
Legislative Decree 196/2003 as amended by Legislative Decree 101/2018

Dear Data Subject,

This notice describes how the site is managed with regard to the processing of personal data of users who consult it, as well as the data processing practices through this site. In compliance with Articles 13 (for data collected from the data subject) and 14 (for data not collected from the data subject) of Regulation (EU) 2016/679 (henceforth GDPR), the following information is rendered to the Users of this Website, which refers exclusively to the processing carried out through said Website and not through other websites that may be visited through links from this one, for which it is suggested that you read the relevant disclosures made by the respective Data Controllers. This Web Site and any services offered through the Web Site are reserved for individuals who have reached the age of eighteen years. Therefore, the Data Controller does not process personal data relating to individuals under the age of 18. Upon request of such Users, the Data Controller will promptly delete all personal data involuntarily collected from them.

1. Data controller

Data controller ANDREA PRANDI STUDIO di Prandi Andrea & C. S.A.S., with registered office in Via Madonnina, 16/A – 37057 S. Giovanni Lupatoto (VR), C.F. and P.I.V.A. 01618380230, (hereinafter referred to as “Holder”). The Data Controller reserves the right to appoint a web agency or consultant as Data Processor for the purposes of technical assistance, maintenance, technical management and the like of this Site, whose references may be communicated upon request to the addresses indicated above. The Data Controller and the Data Processor also process Users’ data through their own in-house appointees, specially designated with instructions to authorized processors.

2. Category of data processed and sources of origin

  • Navigation data (the computer systems and software procedures used to operate this site acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols. This category of data includes: IP addresses, the type of browser used, the operating system, the domain name and addresses of websites from which access or exit was made, information on the pages visited by users within the site, the time of access, the length of time spent on the individual page, internal path analysis and other parameters relating to the user’s operating system and computer environment. Such technical/informational data are collected and used only in an aggregate and anonymous manner. These data are processed for the purpose of enabling and monitoring proper use of this site as well as to obtain anonymous statistical information on its use, and are deleted immediately after processing)
  • Cookies, on which we invite you to read our Cookie Policy
  • Data voluntarily given by the user, including:
    • Common data (identification, biographical, billing and similar data)
    • Only exceptionally special data (art. 9 GDPR)
    • Only exceptionally criminal data (art. 10 GDPR)

Sources: browsing, other sites, cookies and the like; user; public sources.

We may primarily process browsing data, as well as cookies.

We may also process data provided voluntarily by the user, e.g. through the contact form or by sending an e-mail communication, including common personal data (identification, biographical, billing, and the like) and exceptionally special data under Article 9 GDPR or criminal data under Article 10 GDPR in the narrow limits insofar as this is made necessary by the request for information received and subject to the consent of the data subject.

The data could come from automated or voluntary sources, as well as from public sources. For example, it could come from the user’s browsing, which could bring with it information about previous consultations of other sites, including in particular cookies and other similar technologies. Data could also be contributed voluntarily by the user or related parties. Other data could come from public sources, such as data processed as part of research and from viewings, public databases, and the like.

3. Purpose of processing

The personal data of the Users of the Website, as described above, will be processed in the manner and in the forms prescribed by the GDPR, for the performance of the Website’s own functions, with particular, but not exclusive, reference to the navigation of the pages and the procedures described therein of data collection, contact form, possible registration process/access restricted area, newsletter subscription and the like. In particular, personal data provided to the Data Controller will be processed for the pursuit of the following purposes:

  • to follow up on specific requests made to the Controller by the User through the Website and its communication tools (contact forms, information request forms and the like);
  • for communications of an informative nature relating to the services of the same Owner, following the request for information through e-mail messages or filling in the contact form and other communication tools;
  • for possible registration for events organized by the Owner and other related activities (e.g., verification of participation, notices regarding any updates or changes to the event, etc.)
  • for other purposes ancillary or related to those indicated above and, in any case, falling within the scope of the Website’s activities;

The processing of data conferred generically will be carried out, also as a result of automatic collection during navigation, for the sole purpose of ascertaining and controlling access to the Website. This also applies to technical cookies, to be understood as session, functionality or analytics cookies that meet the requirements specified by the Guarantor. In particular, with regard to the latter, it is clarified that they can be assimilated to technical cookies where these are made and used directly by the Website. In any case, for said analytics cookies, the Website, also in accordance with the clarifications of the Guarantor, has provided for the anonymization of IP addresses and the amendment to the processing of data; the collection and use of said navigation data (subject to the anonymization of IP addresses) allow the monitoring of the performance of the Website and allow to improve the service offered, proposing to the User a better browsing experience. Please refer to the appropriate Cookie Policy for further information.

4. Legal basis for processing

The processing of personal data is based on the fulfillment of contractual or pre-contractual obligations inherent in the request made by the User (e.g. requests for information about the services carried out by the Owner, requests for quotations, etc.), as well as, where necessary, consent through the free and conscious filling in of the appropriate information fields in the form dedicated to the collection and conferment of data and the checking of the appropriate checkbox where provided.

It should be noted that the completion of appropriate fields provided in forms for the request for information is inherent to the request itself and that therefore this implies the fulfillment of a pre-contractual or contractual obligation, depending on the context. Consent may be required later for the processing of additional data.

A specific privacy notice will be present wherever necessary (notice different from this one).

In any case, processing is also based on legitimate interest, including the right to information, for which please refer to the next paragraph.

5. Legitimate interest of the Holder

The processing of personal data is also based on the legitimate interest of the Data Controller, such as the exercise of its rights in the context of the information society, the performance of contractual services and the implementation of direct marketing operations (in the manner, by the means and within the timeframe provided by the regulations).

6. Compulsoriness of conferral

The provision of browsing-related data by Users, for the above purposes, depends on the degree of privacy you have enabled or disabled via your browser. In some cases, disabling it may affect navigation on this Web Site. For certain modules of this Web Site, the provision of navigation data and/or the use of technical cookies is mandatory for the proper functioning of this Web Site.

The provision of certain own data is in any case necessary for the very structure of the Web Site and its procedures. On the other hand, the possible request of other optional data will be preceded by an appropriate approval tick. The provision of all other data is optional, in accordance with the type of information the User wishes to provide to the Web Site.

Notwithstanding the above, for example, the provision of the e-mail account is necessary in order to respond to the request made through the contact form, as well as the other mandatory data indicated therein with an asterisk. The other data are optional.

Failure to provide the data necessary for the requested action (e.g., of the e-mail account via form for requesting information by this means) makes it impossible for the Holder to process the request.

PROVISIONS APPLICABLE TO ALL PROCESSING

In any case, even where the data subject has given consent to authorize the Controller to pursue all the purposes mentioned in the points above, he/she will remain free at any time to revoke it.

The data subject is specifically and separately informed, as required by Article 21 of the Regulations, that the data subject has the right to object at any time to the processing of personal data concerning him or her carried out for the purposes mentioned above and that, if the data subject objects to the processing, the personal data may no longer be processed for those purposes.

7. Possible recipients of personal data

The data may be disclosed to companies related to, associated with or controlled by the Data Controller, as well as to consultants, or even to third parties operating, also on behalf of the Data Controller, for the fulfillment of the services related to the purposes set out in this policy, both intra-EU and extra-EU (in the latter case, it will be exclusively subjects adhering to the regulations in force).

Browsing and similar data (for which reference is made to the above), as well as profiling cookies also from third parties (for which reference is made to the Cookie Policy of this Website), which will be disclosed to the respective third parties concerned, where they do not handle them directly as Data Controllers.

In any case, the data may be disclosed to Data Processors, as well as to persons authorized to process and duly instructed, always within the scope of the purposes of the processing.

For the sake of brevity, the detailed list of such figures is available at our office.

8. Storage period

Data provided voluntarily by the Data Subject will be kept until expressly revoked by the Data Subject, including by action on his or her browser, cleaning of cookies, express request or otherwise manifested. Browsing data will be kept, in accordance with the principle of proportionality, in a form that allows the identification of the Data Subject for a period of time not exceeding that necessary for the purposes for which they were collected or subsequently processed.

Excluded from the above terms are cases in which it is necessary to retain the data for a further period of time to defend or enforce a right or to comply with any legal obligations or orders of the Authorities.

9. Rights of the data subject

Each Data Subject has the right to access, rectification, erasure (forgetting), restriction, receipt of notification in case of rectification, erasure or restriction, portability, objection and not to be subject to automated individual decision-making, including profiling, pursuant to Articles 15 to 22 GDPR. These rights may be exercised in the forms and terms set forth in Article 12 GDPR, by written notice sent to the Data Controller (see point 10).

The Data Controller will render an adequate response as soon as possible and in any case within the period of 1 month from receipt of the request.

10. Right to withdraw consent (How to exercise rights)

You can revoke consent, where provided, at any time and/or exercise your rights by sending:

  • a registered letter with return receipt to the writer with an express request (see address on letterhead);
  • an e-mail to [email protected]

11. Complaints

Each Data Subject has the right to file a complaint pursuant to Article 77 et seq. of the GDPR to a supervisory authority, which for the Italian State is identified in the Guarantor for the Protection of Personal Data. The forms, methods and time limits for proposing complaint actions are provided for and regulated by current national legislation. The complaint is without prejudice to administrative and jurisdictional actions, which for the Italian State can be brought alternatively to the same Guarantor or to the competent Court.

12. Profiling

The personal data provided through navigation on this website and any completion of the forms published therein may be subject to profiling by third-party providers through third-party cookies.

Profiling allows such third-party providers, autonomous Holders of their respective processing of personal data for profiling purposes, other than the Owner of this website, to assess certain personal aspects of the Data Subject relating in particular to his/her preferences, interests, tastes with reference to the pages consulted and the activities carried out, in order to allow such autonomous and different Holders to offer the Data Subject a more specific service targeted to his/her needs.

For more information, the User is invited to read the cookie policy.

13. Owner, Appointees/Authorized Persons, Data Processors.

Below we provide you with some information that it is necessary to bring to your attention, not only in order to comply with the obligations of the Law, but also because transparency and fairness towards the interested parties is a founding part of our activity.

Data Controller. The Data Controller of your personal data is ANDREA PRANDI STUDIO di Prandi Andrea & C. S.A.S. responsible to you for the legitimate and correct use of your personal data and whom you can contact for any information or request at the following numbers: telephone +39 045 9250708, e-mail: [email protected].

Appointees/Authorized Persons. The updated list of the persons in charge/Authorized for the processing is kept at the headquarters of the Data Controller.

Data Processors.
For brevity, the detailed list of these figures is available at our office.

14. Social media plug-ins

This site may contain plug-ins from certain social media (e.g., Facebook). Social plug-ins are special tools that allow you to embed social media features directly within the site (e.g., Facebook’s “like” feature) and are marked with the logo of the respective social platform. When you visit a page on this site and interact with the plug-in (e.g., by clicking the “like” button) or decide to leave a comment, the corresponding information is transmitted from your browser directly to the social networking platform (in this case Facebook) and stored by it. For information about the purpose, type and manner of collection, processing, use and storage of personal data by the social network platform, as well as how to exercise your rights, please see the social network’s privacy policy.

15. Links to third-party websites

From this site it is possible to connect via special links to other third-party websites. The Owner disclaims any responsibility with regard to the possible management of personal data by third party sites and with regard to the management of authentication credentials provided by third parties.

16. Cookie

Cookies are packets of information sent by a web server (e.g. the site) to the user’s Internet browser, automatically stored by the latter on the computer and automatically sent back to the server each time the site is accessed. For any information on the characteristics, types, methods of use, and options for removing, deleting or disabling cookies on the website, please refer to the specific Cookie Policy.

The Data Controller
ANDREA PRANDI STUDIO di
Prandi Andrea & C. S.A.S.

How to contact us

ANDREA PRANDI STUDIO of Prandi Andrea & C. S.A.S. welcomes comments regarding this privacy policy.

Please contact us at the following address: [email protected]