Subjects of treatment
The data controller under the laws in force is the site administrator, STUDIO CAB DI ANNARITA GENTILE, who can be contacted via the CONTACTS section
Legal basis for processing
The provision of data and therefore consent to the collection and processing of data is optional, the User may deny consent, and may revoke consent already provided at any time (via the banner at the bottom of the page or the browser settings for cookies, or the Contact Us link). However, denying consent may result in the inability to provide certain services and the site navigation experience would be impaired.
Data for site security and for the prevention of abuse and SPAM, as well as data for the analysis of site traffic (statistics) in aggregate form, are processed on the basis of the data controller’s legitimate interest in protecting the site and users. In such cases, the user always has the right to object to the processing of the data (see section Rights of the user)
Purposes of the processing
The processing of data collected by the site, in addition to the purposes connected with, instrumental to and necessary for the provision of the service, is aimed at the following purposes
– Statistics (analysis)
Collection of data and information in exclusively aggregate and anonymous form for the purpose of verifying the correct operation of the site. None of this information is related to the physical person-user of the site, and does not allow their identification in any way. No consent is required.
Collection of data and information in order to protect the security of the site (spam filters, firewalls, virus detection) and of Users and to prevent or unmask fraud or abuse to the detriment of the website. The data are automatically recorded and may possibly also include personal data (IP address) that could be used, in accordance with the laws in force on the subject, to block attempts to damage the site itself or to cause damage to other users, or in any case harmful or criminal activities. Such data are never used for identification or profiling of the User and are deleted periodically. No consent is required.
– Ancillary activities
Communicate data to third parties who perform functions necessary or instrumental to the operation of the service (e.g. comment box), and to enable third parties to perform technical, logistical and other activities on our behalf. Suppliers only have access to personal data that is necessary to perform their tasks, and they undertake not to use the data for any other purpose, and are obliged to process personal data in accordance with the regulations in force.
This site collects user data in two ways
– Automatically collected data
The following information may be collected during the Users’ navigation and is stored in the log files of the site’s server (hosting):
– internet protocol (IP) address;
– browser type;
– parameters of the device used to connect to the site;
– name of the internet service provider (ISP);
– date and time of the visit;
– the visitor’s web page (referral) and exit page;
– the number of clicks, if any
This data is used for statistical and analysis purposes, in aggregate form only. The IP address is used solely for security purposes and is not cross-referenced with any other data.
– Data provided voluntarily
The site may collect other data in the event of voluntary use of services by users, such as comment services, communication services (contact forms, comment box), and will be used exclusively for the provision of the requested service:
– email address.
Place of processing
The data is processed at the premises of the Data Controller, and at the Aruba web hosting datacenter. The web hosting Aruba, isresponsible for the processing, processing the data on behalf of the Data Controller. Aruba is located in the European Economic Area and acts in accordance with European standards.
Data retention period
The data collected by the site during its operation are retained for the time strictly necessary to carry out the specified activities. On expiry, the data will be deleted or anonymised, unless there is no further purpose for retaining it.
Data (IP address) used for site security purposes (blocking attempts to damage the site) is stored for 30 days.
Data for analytics purposes (statistics) are stored in aggregate form for 24 months.
Transfer of collected data to third parties
The data collected by the site are generally not provided to third parties, except in specific cases: legitimate request by the judicial authorities and only in cases provided for by law; if it is necessary for the provision of a specific service requested by the User; for the performance of security checks or site optimisation
Data transfer to non-EU countries
This site may share some of the data collected with services located outside the European Union area. In particular with Google, Facebook and Microsoft (LinkedIn) via social plug-ins and the Google Analytics service. The transfer is authorised on the basis of specificdecisions of the European Union and the Garante per la tutela dei dati personali, in particular decision 1250/2016 (Privacy Shield – here the information page of the Italian Garante), so no further consent is required. The companies mentioned above guarantee their adherence to the Privacy Shield.
We process visitor/user data lawfully and fairly, taking appropriate security measures to prevent unauthorised access, disclosure, alteration or destruction of data. We are committed to protecting the security of your personal data during transmission, using Secure Sockets Layer (SSL) software, which encrypts information in transit. Processing is carried out using IT and/or telematic tools, with organisational methods and logic strictly related to the purposes indicated. In addition to the Data Controller, in some cases, categories of persons in charge of organising the site or external parties (such as third-party technical service providers, hosting providers) may have access to the data.
This site makes use of the following categories of cookies:
– analysis cookies, used directly by the site operator to collect information, in aggregate form, on the number of users and how they visit the site. They are assimilated to technical cookies if the service is anonymised.
– profiling and marketing cookies, used exclusively by third parties other than the owner of this site to collect information on users’ browsing behaviour, interests and consumption habits, including for the purpose of providing personalised advertising.
DISABILITATION OF COOKIES MAY PREVENT THE CORRECT USE OF CERTAIN FUNCTIONS OF THE SITE ITSELF, in particular, services provided by third parties may not be accessible, and therefore may not be viewable:
– YouTube videos or other video sharing services;
– the social buttons of social networks;
– Google maps
Instructions for disabling cookies can be found on the following web pages:
Mozilla Firefox – Microsoft Internet Explorer – Microsoft Edge – Google Chrome – Opera – Apple Safari
Third party cookies
This site also acts as an intermediary for third party cookies (such as social network buttons), which are used to provide additional services and functionality to visitors and to simplify the use of the site, or to provide personalised advertising. This site has no control over these third party cookies and has no access to the information collected by these cookies. Information on the use of these cookies and their purposes, as well as how to disable them, is provided directly by the third parties on the pages indicated below.
Please note that user tracking generally does not involve identification of the user, unless the user is already subscribed to the service and is also already logged in, in which case it is understood that the user has already given consent directly to the third party when subscribing to the relevant service (e.g. Facebook).
– Google Inc.
– Google Analytics: used to analyse users’ use of the site, compile reports on site activity and user behaviour, check how often users visit the site, how the site is tracked and which pages are visited most frequently. The information is combined with information collected from other sites in order to create a comparative picture of the use of the site in relation to other sites in the same category.
Data collected: browser ID, date and time of interaction with the site, page of origin, IP address.
Place of data processing: European Union as the anonymisation of the service is active.
The data collected does not allow personal identification of users, and is not cross-referenced with other information relating to the same person. They are processed in aggregate form and anonymised (truncated to the last octet). On the basis of a special agreement (DPA), Google Inc. (the data controller) is prohibited from cross-referencing this data with data from other services.
Further information on Google Analytics cookies can be found on the page Google Analytics Cookie Usage on Websites.
The user can selectively disable (opt out) the collection of data by Google Analytics by installing the appropriate component provided by Google (opt out) on his browser.
– Youtube: platform, owned by Google, for sharing videos. Cookies are set when accessing the page containing the embed, and when starting the video, and do not allow the User to be identified unless they are already logged into their Google profile.
For videos on the site, theadvanced privacy(no cookies)”option has been activated, which ensures that YouTube does not store information about visitors unless they voluntarily play the video
Data collected: number and behaviour of service users, IP address, information linking site visits to the Google account for logged in users, video viewing preferences.
Place of data processing: USA.
Social Network Plugins
This website also incorporates plugins and/or buttons to enable easy sharing of content on your favourite social networks. When you visit a page on our website that contains a plugin, your browser connects directly to the servers of the social network from where the plugin is loaded, which server can track your visit to our website and, where appropriate, associate it with your social network account, particularly if you are logged in at the time of your visit or if you have recently browsed one of the websites containing social plugins. If you do not wish the social network to record data relating to your visit to our website, you must log out of your social network account and, probably, delete the cookies that the social network has installed in your browser.
Plugins are installed on this site with advanced privacy protection functions for Users, which do not send cookies or access cookies on the User’s browser when the page is opened, but only after the plugin is clicked.
The collection and use of information by such third parties is governed by their respective privacy policies to which please refer.
European Regulation 679/2016 (GDPR), the User may, in the manner and within the limits provided for by current legislation, exercise the following rights:
oppose in whole or in part, for legitimate reasons, the processing of personal data concerning him/her for the purposes of sending advertising or direct sales material or for carrying out market research or commercial communications;
– request confirmation of the existence of personal data concerning him/her (right of access);
– know the origin of
– receive intelligible communication;
– obtain information on the logic, methods and purposes of the processing
– request the updating, rectification, integration, deletion, transformation into anonymous form, blocking of data processed in violation of the law, including data no longer necessary for the purposes for which they were collected;
in the event of processing based on consent, to receive, at the sole cost of any support, the data provided to the data controller, in a structured, machine-readable form and in a format commonly used by an electronic device;
– the right to lodge a complaint with the Supervisory Authority (Privacy Guarantor –link to the Guarantor’s page);
– as well as, more generally, to exercise all the rights recognised to him by the applicable provisions of law
Requests should be addressed to the Data Controller.