Studio Sgorbani di Lorenzo Sgorbani, with registered office in Via Gorra 55/D, 29122, Piacenza, Italy (hereinafter "the Data Controller" as data controller, pursuant to Article 13 of EU Reg. 2016/679 (hereinafter "GDPR"), is committed to protecting and respecting your privacy.
1. Object of the treatment
This information (together with other documents mentioned therein) describes the personal data ("Personal Data") that the Data Controller collects from the user of the website and how they are processed.
a) The Data Controller collects personal information on visits to the website, including, but not limited to, traffic data, location data, weblogs and contact forms, as well as other communication data and resources that the user accesses.
The collection of this personal information will make the visit to the website easier in the future, since the Owner will be able to suggest relevant content based on the position from which the site is accessed.
b) The Data Controller collects all the information provided by the user in sending the contact forms (for example "Quick Contact") and in particular name, surname, e-mail address, Tax Code, telephone number, province, VAT number , Business name.
Providing personal information through the contact forms is not a legal or contractual requirement; however, note that the fields marked with an asterisk (*) are mandatory fields, since the Owner requires this information to fulfill or respond to the user's request. Other information or personal information is shared at the time of filling in the contact forms at the user's discretion. In case of contact with the Data Controller, this correspondence will be kept.
c) Personal information is used for direct marketing mailing by e-mail if this option has been accepted in the relevant contact form. You can decide to stop receiving marketing communications at any time.
2. Purpose of the treatment
Personal data are collected and processed by the owner in order to:
a) adapt the contents and resources to the user's preferences;
b) respond to user requests or questions either by e-mail or by telephone;
c) send other information and communications via e-mail that may be of interest to the user;
d) create, publish and improve the most relevant content for users;
e) ensure that the content provided through the site is presented in the most effective way for the user based on their device;
f) allow you to participate in interactive site features, if you wish;
g) further develop and improve the site and systems to better serve users;
h) manage a job application; and / or
i) carry out market research.
The use of the information described above is permitted by the applicable law on the protection of Personal Data, in that:
a) necessary for the legitimate interests of the Data Controller in pursuing the aforementioned purposes; these interests in any case do not conflict with users' right to privacy;
b) in some cases, necessary to fulfill the owner's legal or regulatory responsibilities, for example in the case of communication to the authorities, government or regulatory bodies; or
c) in some cases, necessary for the performance of an action of public interest and, in the event that the Data Controller uses particular categories of Personal Data, necessary to initiate, pursue or defend oneself in legal actions, or when the processing concerns information personal
manifestly in the public domain;
d) in limited circumstances, with the consent given from time to time by the user, when you agree to
receive news and marketing communications via email.
The Owner does not make automated decisions based solely on automatic processing, including profiling, which produces legal effects on the user or has other similar consequences.
The Data Controller retains the information for the period necessary to fulfill legal obligations. The retention period of personal information depends on the purpose for which the data are processed and on the tools with which such personal information is processed.
However, it is not possible to indicate the retention period in a reasonably understandable way in this Policy. The criteria used to determine the applicable retention period are closely related to the time (i) necessary for the related purpose, (ii) necessary for the completion of the commercial relationship with the user, (iii) accepted by the user and / or (iv ) required by applicable laws in
3. Sharing Personal Data with third parties
To facilitate efficient use of the information and to provide the user with content and / or resources, the information is disclosed to third parties. However, such disclosure will only occur in the following circumstances:
a) to suppliers, contractors and agents: the Data Controller may involve or make use of other companies and natural persons to perform some functions on his behalf, for example hosting and / or maintaining the contents of the website or providing certain functions in it
contained, or the provision of marketing services or economic updates at the request of the user. Recipients will have access to personal information only to the extent required by the performance of their functions, and will not be able to use it for other purposes. Recipients will be bound by contractual confidentiality obligations;
b) to commercial partners with prior consent to better satisfy your requests for products, information and / or services;
c) to government or judicial authorities if the Data Controller believes that the latter are legally required to request it.
4. IP addresses and cookies
The Data Controller collects information on computers or other IT devices. This information includes (where available) the IP address, operating system and browser version, for system administration. These are statistical data on users' browsing actions and behaviors, which do not identify the person.
5. Transfer of Personal Data
The Personal Data collected can be transferred and processed in one or more countries within or outside the European Union. Data are transferred outside the EU only to countries that the European Commission believes offer an adequate level of protection, or where the Data Controller has implemented appropriate guarantees to preserve the confidentiality of such information.
6. Data security
Although the Data Controller undertakes to do everything possible to protect personal information, we communicate that the transfer of information via the internet is not completely secure and the security of the Personal Data transmitted to the website or to third parties cannot be guaranteed; for this reason, any data transmission takes place at the user's own risk.
However, strict operating procedures and adequate technical and organizational security measures are applied in order to prevent any unauthorized access, modification, deletion or transmission of such personal information.
7. User rights
Articles 15 to 22 of the GDPR grant the user, as an interested party, the exercise of specific rights which are set out below:
a) right to access and obtain a copy of your Personal Data:
the user has the right to request confirmation that the Data Controller is processing any of your personal data. In this case, you can have access to your Personal Data and to some information regarding the processing. In some cases, it may request the Data Controller to provide an electronic copy of its data;
b) right to rectify personal data:
where it is able to demonstrate the incorrectness of its Personal Data held by the Data Controller, the user has the possibility to request the updating or correction of such data;
c) right to be forgotten / erased:
in certain circumstances, the user has the right to have his Personal Data deleted. The request can be submitted at any time and the Data Controller will evaluate the possibility of accepting this request. However, this right is subject to legal rights or obligations that could impose data retention on the Data Controller. If you ascertain that, pursuant to the law, the request for cancellation of the
Personal Data can be accepted, the Data Controller will immediately do so without undue delay;
d) right to raise objections:
although the processing of user data by the Owner is based on the legitimate interest of the latter (and on no other reason for processing), the user has the right to object to the way in which his Personal Data is processed deed by the owner in reference to his particular situation;
e) right to withdraw consent:
to the extent that the processing of Personal Data is based on your consent, the user also has the right to withdraw consent at any time. Withdrawal of consent does not affect the legitimacy of any treatment based on the consent given before this withdrawal.
8. How to exercise your rights
In order to exercise their rights, the user can write to the following e-mail address:
It is also possible to lodge a complaint regarding the processing of Personal Data with the local Privacy Guarantor.
9. Marketing communications
The Owner sends marketing communications via e-mail only if the user has consented to this operation.
As a rule, the forms that the Data Controller uses to collect Personal Data contain a box to be selected in case you wish to receive marketing communications. When marketing communications are sent by e-mail, the user can decide not to receive further communications by clicking on "unsubscribe" or on the cancellation function in the email. In addition, you can exercise
the right of withdrawal at any time by contacting the owner at the e-mail address: providing the following information: name, e-mail address, telephone number and marketing communications that you no longer wish to receive.
The conditions of this Policy may change from time to time. The Data Controller will publish any substantial changes to this Information through due communication on this website or by contacting the user through other channels.
We inform you that questions, comments and requests relating to this Policy should be addressed to the Owner at the following e-mail address: email@example.com
Last update: 25.05.2018.