The purpose of this document is to inform Users about the Personal Data collected from the website www.sapigni.it (hereinafter "Application").
The Data Controller, as subsequently identified, may modify or simply update, in whole or in part, this Information by informing Users. Changes and updates will be binding as soon as they are published on the Application. The User is therefore invited to read the Privacy Notice at each access to the Application.
In the event of non-acceptance of the changes made to this Privacy Notice, the User is required to cease using this Application and may request the Data Controller to remove their Personal Data.
1. PERSONAL DATA COLLECTED BY THE APPLICATION
The Data Controller collects the following types of Personal Data:
A. Content and information provided voluntarily by the User
Contact data, credentials, contents: for example personal data, e-mail or postal address and other contact data, passwords and security information used for authentication and access to the account, personal interests and preferences and other contents personal, etc.
Failure by the User to provide some Data may prevent this Application from providing its services.
The User assumes responsibility for the Personal Data of third parties published or shared through this Application and guarantees to have the right to communicate or disseminate them, freeing the Owner from any liability to third parties.
If the processing of Personal Data is based on the User's consent, the same can revoke it at any time.
B. Data and content acquired automatically during the use of the Application
Technical data: the computer systems and software procedures used to operate this Application may acquire, during their normal operation, some Personal Data whose transmission is implicit in the use of internet communication protocols. This is information that is not collected to be associated with identified interested parties, but which by its very nature could, through processing and association with data held by third parties, allow users to be identified. This category includes IP addresses, or domain names used by Users who connect to the Application, the addresses in URI (Uniform Resource Identifier) notation of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained, etc.
Usage data: Data relating to the use of the Application by the User may also be collected, such as the pages visited, the actions performed, the features and services used.
C. Personal data collected through cookies or similar technologies
The collected data can be used for the following purposes:
- User registration and authentication
- support and contact with the User
- external management of payments by credit card or other tools. The data used for payment are acquired directly by the requested payment service provider without being processed in any way by this application. Payments are provided by communicating the Data to PayPal
- management of user databases
- monitoring, analysis and tracking of User behavior commercial affiliation
3. METHOD OF TREATMENT
The processing of Personal Data is carried out using IT and / or telematic tools, with organizational methods and with logic strictly related to the purposes indicated.
In addition to the Data Controller, in some cases, other parties involved in the organization of this Application may have access to the Data, providing assistance in the management of the Application and activity or ensuring the provision of services to the User. These subjects appointed, if necessary, as Data Processors by the Data Controller, will be able to access the Personal Data of the Users whenever this is necessary and will be contractually obliged to keep them confidential. The updated list of Managers can be requested via email at the address firstname.lastname@example.org
4. LEGAL BASIS OF THE PROCESSING
The Owner processes Personal Data relating to the User in the event that one of the following conditions exists:
- the User has given consent for one or more specific purposes:
- the processing is necessary for the execution of a contract with the User and / or for the execution of pre-contractual measures;
- the processing is necessary to fulfill a legal obligation to which the Data Controller is subject;
- the processing is necessary for the performance of a task of public interest or for the exercise of public
powers vested in the owner;
- the processing is necessary for the pursuit of the legitimate interest of the Data Controller or third parties.
However, it is always possible to ask the Data Controller to clarify the concrete legal basis of each treatment.
The Data is processed at the Data Controller's operating offices and in any other place where the parties involved in the processing are located. For more information, contact the Data Controller at the following email address email@example.com
6. SECURITY MEASURES
The processing is carried out in a manner and with suitable tools to guarantee the security and confidentiality of the data, having the owner adopted adequate technical and organizational measures that guarantee, and allow to demonstrate, that the processing is carried out in compliance with the relevant legislation.
7. DATA CONSERVATION PERIOD
The Data Controller will process the Personal Data for the time necessary to fulfill the purposes related to the execution of a contract between the Data Controller and the User and, in any case, no later than 3 years from the termination of the relationship with the User.
When the processing of Personal Data is necessary for the pursuit of a legitimate interest of the Data Controller, the Personal Data will be kept until such interest is satisfied.
If the processing of Personal Data is based on the User's consent, the Owner may keep the Personal Data until revocation.
Personal Data may be stored for a longer period if necessary to fulfill a legal obligation or by order of an authority.
All Personal Data will be deleted upon expiry of the retention period. At the end of this term the right of access, cancellation, rectification and the right to data portability can no longer be exercised.
8. AUTOMATED DECISION-MAKING PROCESSES
All collected data will not be subject to any automated decision-making process, including profiling, which may produce legal effects for the person or which may significantly affect him.
9. USER RIGHTS
Users can exercise certain rights with reference to the Data processed by the Data Controller. In particular, the User has the right to:
- withdraw consent at any time;
- oppose the processing of their data;
- access their data;
- verify and request rectification;
- obtain the limitation of the processing;
- obtain the cancellation or removal of their Personal Data; receive their data or have them transferred to another owner;
- lodge a complaint with the supervisory authority for the protection of personal data and / or act in court.
To exercise their rights, Users can direct a request to the contact details of the Owner indicated in this document. The requests are made free of charge and processed by the Data Controller as soon as possible, in any case within 30 days.
10. HOLDER OF THE TREATMENT
The Data Controller is Enrica Sapigni,
C.so Mazzini 82, 47035 Gambettola FC.
Tax code. SPGNRC84P60C573X
VAT number 03586930400
email address firstname.lastname@example.org
Last updated: 14/11/2019