In this page, we describe the methods and logic of processing personal data of users (hereinafter, also the users) who consult the website: serenamazzetti.com (hereinafter, also the Website).

This is an informative document pursuant to Article 13 of the EU Regulation 2016/679 ‘General Data Protection Regulation’ (hereinafter GDPR) and the current Italian legislation on the protection of personal data, Legislative Decree 196/2003 and subsequent amendments, in particular those introduced by Legislative Decree no. 101/2018, to those who interact with the Website, any other subdomains, but not for other external websites possibly linked.

By the processing of personal data, we mean any operation or set of operations, performed with or without the aid of automated processes and applied to personal data or sets of personal data, even if not recorded in a database, such as collection, recording, organization, structuring, storage, processing, selection, blocking, adaptation, modification, extraction, consultation, use, communication by transmission, dissemination, or any other form of making available, comparison, or interconnection, limitation, erasure, or destruction.

  1. Data Controller

The data controller for personal data is identified as follows.

Serena Mazzetti Via Ciro Menotti, 17 56021 Cascina PI VAT ID 01450640501

Below, in this document, the data controller as defined above will be identified as the Data Controller.

By a decree of May 25, 2018, published in the Official Gazette of the Italian Republic, the subjects exercising the functions of the data controller within the Data Controller have been identified.

The processing of data related to the information request form takes place in Italy and is managed through electronic tools and after adopting the appropriate security measures, by personnel in service at the office responsible for the processing and/or by third parties, in particular by Rational Scale Srl, the sole shareholder, as responsible for managing the information systems.

  1. Data Protection Officer

The data protection officer for personal data is a figure provided for in Article 37 of the GDPR. They cooperate with the Guarantor Authority and constitute the point of contact, also in relation to data subjects, for issues related to the processing of personal data (Articles 38 and 39 of the GDPR), as well as for the coordination of the implementation and maintenance of the processing activities register (Article 30 of the GDPR).

As provided for in Article 37, seventh paragraph, of the GDPR, the contact details of the Data Protection Officer are as follows:

Email: serenamazzetti@outlook.it

  1. Legal Basis of Processing

The personal data indicated on this page are processed in compliance with EU Regulation 2016/679 ‘General Data Protection Regulation.’

Following the consultation of this website, data related to identified or identifiable individuals may be processed. Data provided voluntarily and freely by users are acquired and processed in compliance with the rules set out by the GDPR and used exclusively for the purposes indicated below.

The data controller undertakes to respect and protect your privacy by processing the personal data provided by you in compliance with the legal provisions aimed at ensuring the security, accuracy, updating, and relevance of the data for the stated purposes. Personal data provided by users making requests are used solely to fulfill the request submitted from time to time and are communicated to third parties only when this is strictly necessary and functional for that purpose, in compliance with European and national regulations. The data is processed by personnel specifically authorized for data processing, only when processing is necessary for the performance of assigned tasks.

  1. Processing Methods

Personal data are processed with electronic tools for the time strictly necessary to achieve the purposes for which they were collected.

Specific security measures are observed to prevent data loss, unlawful or incorrect use, and unauthorized access.

  1. Types of Data and Purposes of Processing

All personal data provided through the Website will be processed lawfully and fairly to provide the requested services, respond to user communications and inquiries, and collect statistical data for website improvement.

Voluntarily Provided Data Through the Website, it is possible to submit requests and communications through the contact addresses listed on the site. Providing such data is mandatory, necessary to respond to the submitted requests and to contact the sender for clarifications regarding the reported issue.

Navigation Data This category of data includes IP addresses or domain names of the computers used by users who connect to the site, URI (Uniform Resource Identifier) addresses of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response from the server (successful, error, etc.), and other parameters related to the user’s operating system and computer environment. Navigation data are acquired not for the purpose of identifying users but for the sole purpose of anonymously collecting statistical information about the use of the site and its services.

  1. Cookies

Cookies are small text files that websites visited send to the user’s terminal, where they are stored, and then retransmitted to the same websites during subsequent visits.

The Website uses:

Technical cookies are not used for user profiling activities.

Users can choose to enable or disable cookies by adjusting their browser settings according to the instructions provided by the respective suppliers.

  1. Rights of Data Subjects

Data subjects (individuals to whom the data refer) can exercise their rights at any time in accordance with Articles 15 and following of the GDPR. This includes the right to access their personal data, request rectification or limitation, update incomplete or incorrect data, and delete data collected in violation of the law. Data subjects also have the right to object to the processing, subject to legitimate reasons on the part of the data controller.

For this purpose, you can contact those who perform the functions of data controller, as provided by the decree of May 25, 2018, by sending a request to the relevant contact points or by email to the address previously mentioned in the “Data Protection Officer” section.

There is also the possibility to file a complaint with the Guarantor.