PRIVACY POLICY

Dear User, thank you for visiting our website.
The following section describes how the website is managed with regard to the processing of personal data of users who visit it. This information is also provided pursuant to Article 13 of Legislative Decree no. 196/03 (Personal Data Protection Code) and Articles 13 and 14 of European Regulation 679/2016 (hereinafter also “GDPR”) to those who interact with the web services provided directly by the Company.
This information applies to this website and not to other websites that may be accessed via links. This information is based on Recommendation No. 2/2001, which the European data protection authorities, convened in the Working Party established by Article 29 of Directive No. 95/46/EC, adopted on May 17, 2001, to identify minimum requirements for the collection of personal data online, and, in particular, the methods, timing, and nature of the information that data controllers must provide to users when they connect to web pages, regardless of the purpose of the connection. We therefore invite you to review our Privacy Policy, illustrated below.
The Policy and Privacy Standards used for the protection of personal data are based on the following principles:
<strong>Data Controller</strong>

The data controller is the Company whose contact details are indicated in the footer of this website.

<strong>PRINCIPLE OF ACCOUNTABILITY

</strong>
The processing of personal data is managed over time by data processors identified within the company organization.

<strong>PRINCIPLE OF TRANSPARENCY
</strong>
Personal data is collected and subsequently processed in accordance with the principles set forth in this Privacy Policy. Upon provision of data, the interested party is provided with a concise yet comprehensive information notice, in accordance with Article 13 of Legislative Decree no. 196/03 and Articles 13 and 14 of the GDPR.

<strong>PRINCIPLE OF RELEVANCE OF COLLECTION
</strong>
Personal data is processed lawfully and fairly; it is recorded for specific, explicit, and legitimate purposes; it is relevant and not excessive in relation to the purposes of the processing; and it is retained for the time necessary for the purposes for which it was collected.

<strong>PURPOSE OF USE PRINCIPLE</strong>

The purposes of personal data processing are disclosed to data subjects at the time of collection. Any new data processing, if unrelated to the stated purposes, is initiated after providing the data subject with a new notice and requesting their consent, where required by Legislative Decree no. 196/03 and the GDPR. In any case, personal data will not be disclosed to third parties or disseminated without the data subject’s prior consent, except in the cases expressly indicated in Article 24 of Legislative Decree no. 196/03 and the GDPR.

<strong>VERIFIABILITY PRINCIPLE
</strong>
Personal data is accurate and updated over time. They are also organized and stored in such a way that the interested party is given the opportunity to know, if they wish, what data has been collected and recorded, as well as to check its quality and request any corrections, additions, or deletions due to violations of the law or objection to its processing. They are also entitled to exercise all other rights, pursuant to and within the limits of art. 7 of Legislative Decree no. 196/03 and art. 15 et seq. of the GDPR, at the addresses indicated in the information pursuant to art. 13 of Legislative Decree no. 196/03 and art. 13 and 14 of the GDPR on the Company’s website.<strong>SECURITY PRINCIPLE
</strong>
Personal data is protected by technical, IT, organizational, logistical, and procedural security measures against the risk of destruction or loss, even accidental, and unauthorized access or unauthorized processing.
These measures are periodically updated based on technical progress, the nature of the data, and the specific characteristics of the processing, and are constantly monitored and verified over time. Third parties who perform support activities of any kind for the provision of the services requested by the Company, in relation to which they process personal data, are designated by the latter as Data Processors and are contractually bound to comply with the security and confidentiality measures. The identity of these third parties is disclosed to users.
Furthermore, the Company assumes no responsibility for:<ol>
<li>the rules and methods for managing personal data on other websites, accessible from our pages through links and references;</li>
<li>the contents of any email services, web spaces, and chat forums provided to users.</li>
</ol>
<p style=”text-align: justify;”>The processing operations related to the web services offered by this site take place at the Company’s premises, and possibly at the Data Controllers’ offices, and are handled by data processors responsible for managing the requested services, marketing activities—when requested by the user—data retention activities, and occasional maintenance operations.

<strong>SCOPE OF DATA COMMUNICATION
</strong>
The personal data provided may be disclosed to third parties to fulfill legal obligations, execute orders from authorized public authorities, or to assert or defend a right in court. If necessary in relation to specific services or products requested, personal data may be disclosed to third parties who, as independent data controllers, perform functions strictly related and instrumental to the provision of the services or products. Without such disclosure, these services and products could not be provided. Personal data will not be disclosed unless the requested service requires it.

<strong>DATA PROVIDED VOLUNTARILY BY THE USER</strong>

The types of personal data collected and processed on this site are those necessary to provide the various services provided. The data collected is processed using paper, automated, and electronic means, and with methods strictly related to the purposes of the processing. Your telephone number and email address may also be used to provide you with services. Therefore, it is clear that if you do not provide this data, we will not be able to provide you with services that require the use of these tools. Any voluntary sending of emails to the addresses indicated on the site entails the acquisition of the sender’s address as well as any other information contained in the message; this personal data will be used solely to perform the requested service or performance.
<strong>BROWSING DATA</strong>

It is useful to know that the website’s software procedures acquire, during their normal operation, some personal data whose transmission is implicit in the use of internet communication protocols. While this information is not intended to be associated with identified users, by its nature, if combined with other data held by third parties (e.g., your internet service provider), it could allow users to be identified.This category of data includes the IP addresses or domain names of computers used by users connecting to the site, the URL (Uniform Resource Locator) addresses of requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response from the server (successful, error, etc.), and other parameters relating to the user’s operating system and IT environment. This data is used solely for anonymous statistics on site usage and to verify its proper functioning. The Data Controller and, depending on the service requested, the designated Data Processors retain, for a limited period in accordance with the law, the log of connections/browsing activities in order to respond to any requests from judicial authorities or other public bodies authorized to request such logs to ascertain potential liability in the event of cybercrime.
Aside from what is specified for navigation data, the user is free to provide or withhold the personal data requested in the service registration form. However, some data may be marked as mandatory on this form; it should be understood that this data is necessary to provide the requested service. If this data is not provided, the requested service cannot be provided.Upon provision of data, pursuant to Article 13 of Legislative Decree no. 196/03 and Articles 13 and 14 of the GDPR, the interested party is provided with concise yet complete and transparent information on the purposes and methods of processing, the mandatory or optional nature of providing data, the consequences of failure to provide it, the subjects or categories of subjects to whom personal data may be disclosed and the scope of dissemination of the data, the rights pursuant to Article 7 of Legislative Decree no. 196/03 and Article 15 et seq. of the GDPR (access, integration, updating, correction, deletion due to violation of the law, objection to processing, etc.), and the identity and location of the Data Controller and Data Processors. The interested party is therefore required to provide informed, freely given consent, expressed in a specific and documented form in the manner required by law, where required by law. If personal data is provided at a later stage, additional information may be provided to the previously provided disclosures and new consents for processing as required by the Privacy Code and the GDPR may be requested.
<strong>SECURITY MEASURES ADOPTED TO PROTECT COLLECTED DATA</strong>

The Company uses secure architectures and technologies to protect personal data from unauthorized disclosure, alteration, or improper use. The protections implemented for personal data are specifically designed to minimize the risk of destruction or loss, even accidental, of data, unauthorized access, or processing that is unauthorized or inconsistent with the purposes for which it was collected. These security measures obviously meet the minimum requirements set by the Legislator (Technical Regulations regarding minimum security measures pursuant to Articles 33 to 36 of Legislative Decree No. 196/03).Data subjects have the right at any time to obtain confirmation of the existence or otherwise of their personal data and to know its content and origin, verify its accuracy, or request its integration, updating, or rectification (Article 7 of Legislative Decree no. 196/03 and Article 16 of the GDPR). Pursuant to the same article, the data subject has the right to request the deletion, anonymization, or blocking of data processed in violation of the law, as well as to object, for legitimate reasons, to its processing. Requests should be sent to the Company’s contact details listed in the website footer.