Privacy Policy

The Data Controller for personal data processing is:

During navigation on the site, the following categories of data may be collected:

Navigation data

The computer systems responsible for the operation of the site acquire, during their normal operation, certain data whose transmission is implicit in the use of Internet communication protocols. This information is not collected to be associated with identified data subjects, but by its very nature could, through processing and association with data held by third parties, allow users to be identified.

This category includes: IP addresses, browser type, operating system, domain name and addresses of websites from which access or exit was made, time of request, and other parameters relating to the operating system and the user's computer environment.

Voluntarily provided data

The optional, explicit and voluntary sending of messages through the contact form involves the subsequent acquisition of the sender's email address and any personal data included in the message, necessary to respond to requests.

Cookies

The site uses technical cookies and, with prior consent, profiling cookies. For more information, please see our Cookie Policy.

Personal data is processed for the following purposes:

• Site navigation: ensuring the proper technical functioning of the website
• Responding to requests: responding to messages sent through the contact form
• Statistical analysis: aggregate and anonymous analysis of site visits (Google Analytics), with prior consent
• Legal obligations: compliance with legal requirements

The processing of personal data is based on the following legal bases:

• Consent (Art. 6.1.a GDPR): for analytics and profiling cookies
• Legitimate interest (Art. 6.1.f GDPR): for technical cookies necessary for site operation
• Performance of pre-contractual measures (Art. 6.1.b GDPR): for responding to contact requests

Personal data may be disclosed to:

• Google LLC: for the Google Analytics service (aggregated and anonymized data)
• Hosting provider: Aruba S.p.A., for the provision of technical services
• Competent authorities: when required by law

Data will not be disseminated or transferred to third parties for marketing purposes without your explicit consent.

Data collected through Google Analytics may be transferred to the United States. Google LLC adheres to the EU-US Data Privacy Framework (DPF), which ensures an adequate level of personal data protection.

For more information: Google Privacy Policy

Personal data is retained for the time strictly necessary:

• Navigation data: retained for the time necessary for technical operations and then deleted
• Contact form data: retained until the request is fulfilled and for the following 24 months
• Google Analytics data: according to Google's policies (26 months)
• Cookie preferences: 12 months from the date consent was given

As a data subject, you have the right to exercise the following rights under the GDPR (Arts. 15-22):

• Right of access (Art. 15): obtain confirmation of whether processing is taking place and access your data
• Right to rectification (Art. 16): obtain correction of inaccurate data
• Right to erasure (Art. 17): obtain the deletion of data (right to be forgotten)
• Right to restriction (Art. 18): obtain restriction of processing
• Right to portability (Art. 20): receive data in a structured format
• Right to object (Art. 21): object to the processing of your data
• Right to withdraw consent (Art. 7): withdraw consent at any time

To exercise your rights, you can contact us at: info@eddiezioni.it

You have the right to lodge a complaint with the competent supervisory authority: