Mod.: IS – Updated 09/2024

Information on the processing of personal data.
Articles 13 and 14 EUROPEAN REGULATION No. 679/2016
Legislative Decree 196/2003 as amended by Legislative Decree 101/2018

Dear Data Subject,

This notice describes how the site is managed with regard to the processing of personal data of users who consult it, as well as the data processing practices through this site. In compliance with Articles 13 (for data collected from the data subject) and 14 (for data not collected from the data subject) of Regulation (EU) 2016/679 (henceforth GDPR), the Users of this Website are hereby provided with the following information, which refers exclusively to the processing carried out through this Website and not through other websites that may be visited via links from this one, for which it is suggested that you read the relevant information provided by the respective Data Controllers. This Web Site and the services that may be offered through the Web Site are reserved for persons who have reached the age of eighteen. Therefore, the Data Controller does not process personal data relating to persons under the age of 18. At the request of such Users, the Data Controller will promptly delete all personal data involuntarily collected.

1. The Data Controller

Data controller ANDREA PRANDI STUDIO di Prandi Andrea & C. S.A.S., with registered office in Via Madonnina, 16/A – 37057 S. Giovanni Lupatoto (VR), C.F. and P.I.V.A. 01618380230, (hereinafter referred to as ‘Data Controller’). The Data Controller reserves the right to appoint a web agency or consultant as Data Processor for the purposes of technical assistance, maintenance, technical management and the like of this Site, whose contact details may be communicated upon request to the addresses indicated above. The Data Controller and the Data Processor also process the data of the Users through their own in-house Data Processors, who are specifically appointed with instructions to authorised processors.

2. Category of data processed and sources of origin

• Navigation data (The computer systems and software procedures used to operate this site acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols. This category of data includes: IP addresses, the type of browser used, the operating system, the domain name and addresses of websites accessed or exited from, information on the pages visited by users within the site, access time, the length of time spent on the individual page, internal path analysis and other parameters relating to the user’s operating system and computer environment. This technical/informational data is collected and used exclusively in an aggregate and anonymous manner. These data are processed for the purpose of enabling and monitoring the correct use of this site as well as to obtain anonymous statistical information on the use of the same, and are deleted immediately after processing)

• Cookies, on which we invite you to read our Cookie Policy

• Data provided voluntarily by the user, including:

  • Common data (identification, personal, billing and similar data)

  • Only exceptionally special data (Art. 9 GDPR)

  • Only exceptionally criminal data (art. 10 GDPR)

Sources: browsing, other sites, cookies and the like; user; public sources.

We may primarily process navigation data, as well as cookies.

We may also process data provided voluntarily by the user, e.g. through the contact form or by sending an e-mail communication, including common personal data (identification, personal data, billing data and the like) and exceptionally special data within the meaning of Article 9 GDPR or criminal data within the meaning of Article 10 GDPR to the strict extent that this is necessary for the information request received and subject to the consent of the person concerned.

The data could come from automated or voluntary sources, as well as from public sources. For example, it could come from the user’s navigation, which could bring with it information about previous consultations of other sites, including in particular cookies and other similar technologies. Data may also be provided voluntarily by the user or related parties. Other data may come from public sources, such as data processed in the context of searches and from searches, public databases and the like.

3. Purpose of processing

The personal data of the Website’s Users, as described above, will be processed in the manner and in the form prescribed by the GDPR, for the performance of the Website’s functions, with particular, but not exclusive, reference to page navigation and the procedures described therein for data collection, contact form, possible registration/access to the reserved area, newsletter subscription and the like. In particular, personal data provided to the Data Controller will be processed for the pursuit of the following purposes:

• to follow up specific requests made to the Controller by the User through the Website and its communication tools (contact form, information request forms and the like)
• for communications of an informative nature relating to the services of the Data Controller itself, following the request for information by e-mail or by filling in the contact form and other communication tools
• for possible registration for events organised by the Controller and other related activities (e.g. verification of participation, notices of any updates or changes to the event, etc.)
• for other purposes incidental or related to those indicated above and in any case falling within the scope of the Website’s activities;

The data provided in a generic manner will be processed, also following automatic collection during navigation, for the sole purpose of ascertaining and controlling access to the Website. This also applies to technical cookies, to be understood as session, functionality or analytics cookies that meet the requirements specified by the Garante. In particular, with regard to the latter, it is clarified that they can be assimilated to technical cookies where these are created and used directly by the Website. In any case, for said analytics cookies, the Website, also in compliance with the clarifications of the Guarantor, has provided for the anonymisation of IP addresses and the amendment to data processing; the collection and use of the aforesaid browsing data (without prejudice to the anonymisation of IP addresses) allow the monitoring of the Website’s performance and allow the improvement of the service offered, offering the User a better browsing experience. Please refer to the relevant Cookie Policy for further information.

4. Legal basis of the processing

The processing of personal data is based on the fulfilment of contractual or pre-contractual obligations inherent to the request made by the User (e.g. requests for information on the services provided by the Controller, requests for estimates, etc.), as well as, where necessary, on consent through the free and conscious filling in of the appropriate information fields in the form dedicated to the collection and conferment of data and the ticking of the appropriate checkbox where provided.

It should be noted that filling in the appropriate fields in the form for the request for information is inherent to the request itself and that this therefore entails the fulfilment of a pre-contractual or contractual obligation, depending on the context. Consent may be required at a later date for the processing of further data.

A specific privacy notice will be present wherever necessary (different notice from this one).

In any case, processing is also based on legitimate interests, including the right to information, for which please refer to the following paragraph.

5. Legitimate interest of the Controller

The processing of personal data is also based on the legitimate interest of the Data Controller, such as the exercise of its rights in the context of the information society, the performance of contractual services and the carrying out of direct marketing operations (in the manner, by the means and within the timeframe provided for by law).

6. Obligatory nature of conferment

The provision of browsing data by Users, for the purposes described above, depends on the degree of privacy that the User has enabled or disabled through their browser. In some cases, disabling it may affect navigation on this Website. For certain modules of this Website, the provision of navigation data and/or the use of technical cookies is mandatory for the proper functioning of the Website.

The provision of some of your own data is in any case necessary for the very structure of the Website and its procedures. The possible request of other optional data will instead be preceded by a specific approval tick. The provision of all other data is optional, in accordance with the type of information that the User wishes to provide to the Web Site.

Without prejudice to the foregoing, for example, the provision of the e-mail account is necessary in order to be able to reply to the request made via the contact form, as is the provision of the other compulsory data indicated with an asterisk. The other data are optional.

Failure to provide the data required for the requested action (e.g. the e-mail account via the contact form) will make it impossible for the Controller to process the request.

PROVISIONS APPLICABLE TO ALL PROCESSING

In any case, even where the data subject has given consent to authorise the Controller to pursue all the purposes mentioned in the points above, he/she shall remain free at any time to revoke it.

We specifically and separately inform you, as required by Article 21 of the Regulation, that the data subject has the right to object at any time to the processing of personal data concerning him/her carried out for the purposes mentioned above and that, should the data subject object to the processing, the personal data may no longer be processed for those purposes.

7. Possible recipients of personal data

The data may be communicated to companies connected with, related to or controlled by the Data Controller, as well as to consultants, or even third parties who operate, also on behalf of the Data Controller, for the performance of services connected with the purposes indicated in this policy, both within the EU and outside the EU (in the latter case, these will be exclusively subjects adhering to the regulations in force).

Browsing and similar data (for which please refer to the above), as well as profiling cookies, including those of third parties (for which please refer to the Cookie Policy of this Website), will be communicated to the respective third parties where they do not handle them directly as Data Controllers.

In any case, the data may be communicated to Data Processors, as well as to persons authorised to process and duly instructed, always within the scope of the purposes of the processing.

For the sake of brevity, a detailed list of such persons is available at our offices,

8. Storage period

Data provided voluntarily by the data subject will be stored until the data subject expressly withdraws his or her consent, including by means of an action on his or her browser, cleaning of cookies, express request or otherwise manifested. Browsing data will be stored, in accordance with the principle of proportionality, in a form that allows the identification of the Data Subject for a period of time not exceeding that necessary for the purposes for which they were collected or subsequently processed.

Cases in which it is necessary to keep the data for a longer period of time in order to defend or enforce a right or to comply with any legal obligations or orders of the Authorities are excluded from the above terms.

9. Rights of the data subject

Each Data Subject has the right of access, rectification, erasure (forgetting), restriction, receipt of notification in case of rectification, erasure or restriction, portability, objection and not to be subject to automated individual decision-making, including profiling, pursuant to Articles 15 to 22 of the GDPR. These rights may be exercised in the form and within the terms set out in Article 12 GDPR, by written notice sent to the Data Controller (see point 10).

The Data Controller will provide an adequate response as soon as possible and in any case within 1 month of receipt of the request.

10. Right to withdraw consent (Method of exercising rights)

You may revoke your consent, where applicable, at any time and/or exercise your rights by sending

• a registered letter with return receipt to the writer with an express request (see the address indicated on the letterhead);
• an e-mail to [email protected]

11. Complaints

Each Data Subject has the right to lodge a complaint pursuant to Article 77 et seq. of the GDPR to a supervisory authority, which for the Italian State is identified in the Garante per la protezione dei dati personali. The forms, methods and time limits for bringing complaints actions are provided for and governed by the national legislation in force. The complaint is without prejudice to administrative and judicial actions, which for the Italian State may be brought alternatively before the same Garante or before the competent Court.

12. Profiling

The personal data provided through navigation on this website and the possible completion of the forms published therein may be subject to profiling by third-party providers through third-party cookies.

Profiling allows these third-party providers, independent Holders of their respective personal data processing for profiling purposes, other than the Owner of this website, to assess certain personal aspects of the Data Subject relating in particular to his/her preferences, interests, tastes with reference to the pages consulted and the activities carried out, in order to allow these autonomous and different Holders to offer the Data Subject a more specific service aimed at his/her needs.

For further information, the User is invited to read the cookie policy.

13. Data Controller, Appointees/Authorised Persons, Data Processors

Below we provide you with some information that it is necessary to bring to your attention, not only to comply with legal obligations, but also because transparency and fairness towards the interested parties is a fundamental part of our activity.

Data Controller. The Data Controller of your personal data is ANDREA PRANDI STUDIO di Prandi Andrea & C. S.A.S., which is responsible to you for the lawful and correct use of your personal data and which you can contact for any information or request at the following numbers: telephone +39 045 9250708, e-mail: [email protected].

Appointees/Authorised Persons. The up-to-date list of data processors/authorised persons is kept at the Data Controller’s head office.

Data Processors. For the sake of brevity, a detailed list of these figures is available at our offices.

14. Social media plug-ins

This website may contain plug-ins from certain social media (e.g. Facebook). Social plug-ins are special tools that allow you to embed the functionality of social networks directly within the website (e.g. the Facebook ‘like’ function) and are marked with the logo of the respective social platform. When you visit a page on this website and interact with the plug-in (e.g. by clicking the ‘like’ button) or leave a comment, the corresponding information is transmitted from your browser directly to the social networking platform (in this case Facebook) and stored there. For information on the purpose, type and manner of collection, processing, use and storage of personal data by the social network platform, as well as on how you can exercise your rights, please refer to the privacy policy of the social network.

15. Links to third-party sites

From this site it is possible to connect via links to other third party websites. The Owner declines any responsibility for the possible management of personal data by third party sites and for the management of authentication credentials provided by third parties.

16. Cookies

Cookies are packets of information sent by a web server (e.g. the site) to the user’s Internet browser, automatically stored by the latter on the computer and automatically sent back to the server each time the site is accessed. For all information on the characteristics, types, methods of use and options for removing, deleting or disabling cookies on the website, please refer to the specific Cookie Policy.