DISCLOSURE ON PERSONAL DATA PROCESSING
Glossary of the Disclosure
This disclosure is provided pursuant to EU Reg. 679/2016, as well as other applicable (national and EU) regulations, using statutory concepts and terms. For any clarifications, please view the Data Protection Authority’s glossary at: https://www.garanteprivacy.it/web/guest/home/docweb/-/docweb-display/docweb/2008062
Data Processing Controller and Supervisors. Contacts
Pursuant to EU Regulation 679/2016, the Data Processing Controller of the personal data of users of www.arnaldopomodoro.it (hereinafter the “Website”) is Studio Arnaldo Pomodoro, with registered office in Via Vigevano 5 - Milan, e-mail firstname.lastname@example.org, tel. 02/58104131, hereinafter the “DataController”. You may use the same contacts for any information regarding data processing and any requests you may have for the Data Controller, as in the event of exercising the rights of data subjects.
You may obtain a list of the appointed data supervisors by making a specific request to the Data Controller.
Data Processing Purpose and Method
Data are collected and used for the following purposes:
a) PROCESSING: to enable the browsing and electronic use of the Website, as well as for statistical purposes (anonymously) in regard of the use thereof; EXPIRY OF DATA PROCESSING: automatically deleted when leaving the Website, for non-anonymous data; DATA RECIPIENTS: internal authorized personnel of the Data Controller;
b) PROCESSING: (on request) to reply to users requesting information on the Data Controller’s activities or the Website; EXPIRY OF DATA PROCESSING: 3 months from collection; DATA RECIPIENTS: internal authorized personnel of the Data Controller;
c) PROCESSING: (on request) to provide the services or facilities specifically requested, i.e.: make orders at the online shop; register for the membership program online; request works of art to be examined or authenticated online; EXPIRY OF DATA PROCESSING: 3 months from service delivery (or - in case of ongoing service) from cancellation of the service; DATA RECIPIENTS: internal authorized personnel of the Data Controller;
d) PROCESSING: (on request) to send promotional newsletters (by email) on the activities of the Foundation; EXPIRY OF DATA PROCESSING: 24 months from collection; DATA RECIPIENTS: internal authorized personnel of the Data Controller.
All data may be retained for an additional period if it is mandatory under the applicable legislation (e.g. fiscal, accounting, administrative requirements) and exclusively for such purposes. Likewise, they may be communicated to judicial authorities and other required entities as mandatory recipients under applicable legislation.
Optional Provision of Data and Legal Basis
All the processing specified above is optional. If you fail to provide your consent, you will be unable to use the relevant services / facilities (such as the newsletter), or browse the Website. The legal basis for data processing is therefore consent thereto for each of the purposes specified above.
By using this Website, you are giving your consent to the processing of your data and using cookies, as set out in the Disclosure. If you do not wish to give your consent to processing, you must immediately stop browsing this Website. Continuing to browse this Websitewill be equivalent to providing your consent.
With regard to any services and facilities on request, please select the appropriate checkbox to confirm your consent, or otherwise, to the processing of your data at the time of data collection.
Types of Data Being Processed
Browsing data: the computer systems and software procedures used to operate this Website acquire personal data during their normal operation whose transmission is implicit in the use of Internet communication protocols. Such information is collected anonymously and cannot be associated with any identified data subjects.
This category of data includes IP addresses or domain names of the computers used by users connecting to the site, addresses of the requested resources in Uniform Resource Identifier (URI) representation, the time of the request, the method used to submit the request to the server, the response given by the server (e.g. success, error, etc.), and other parameters relating to the user’s IT environment. These data are used for the sole purpose of obtaining anonymous statistical information on the use of the Websiteand to check its correct operation. They will be deleted immediately after processing. The data could be used to ascertain any liabilities in case of possible IT crimes against the Website.
Data optionally provided by users: the optional, express, and voluntary sending of data in the forms provided or by e-mail to the addresses specified on this Website, willentail the subsequent acquisition of the data specified by the sender, which are needed to respond to requests.
Third-party data: to obtain certain services such as examining or authenticating a work of art, the interested party may provide the personal data of third parties. In this case, the interested party will provide assurance to the Data Controller that the same is authorized to freely use such data in the cases permitted by law or that the same has obtained the relevant consent from such third party (who has viewed this disclosure and accepted the processing required herein); the Data Controller may request the interested party to provide prompt written confirmation of such authorization by third parties.
Data Processing Methods
Processing is carried out by using automated tools (e.g. IT procedures and media) for the period strictly necessary to achieve the purposes for which the data have been collected and, in any case, in compliance with current applicable regulations. Specific security measures are observed to prevent data loss, unlawful or incorrect use, and unauthorized access.
Data Subjects’ Rights
The subjects to whom the personal data refer will at any time have the right to obtain - in addition to the revocation of their consent - confirmation of the existence, or otherwise, of such data and to gain knowledge as to the content and origin, verify the exactness, or request the supplementation or updating, or correction thereof pursuant to articles 15 and ss. of the Gdpr. Pursuant to the same articles of law, you will have the right to request the deletion, transformation into anonymous form, or limitation of any data being processed in violation of the law, and in any case to object to the processing thereof for legitimate reasons.
Likewise, you will have the right to request the portability of your data (provided with your consent) into an electronic format (.csv) pursuant to article 20 of the Gdpr.
Requests should be sent to the Data Controller by using the contacts specified above.
Data subjects may file a complaint with the Italian Data Protection Authority to the contacts specified below for any violation of their rights: http://www.garanteprivacy.it/web/guest/home/docweb/-/docweb-display/docweb/4535524.
Cookies are computer records of information transmitted by a web server to the user’s computer for future identification of such computer at the time of future visits to the same website. Cookies help to facilitate web traffic analysis and allow web applications to send information to individual users.
With exclusive reference to users of this Website, we inform you that:
- This Website uses technical cookies, strictly necessary for browsing and for the use of the Website functions, and cookies for performance analysis (e.g. Google Analytics) used for compiling aggregate anonymous statistics. Cookies of this type do not enable the acquisition of your personal identification data after adoption of appropriate anonymization procedures;
- This Website does not directly use profiling cookies: cookies are not used to transmit information of a personal nature, nor are persistent cookies of any kind used, i.e. systems for tracking users;
- However, on this Website, objects (images, maps, music files, or links to specific web pages of other domains) that download third-party cookies may be incorporated. These are often capable of gathering information on the activities that you perform on this Website and/or on advertisements which you may have clicked on; however, such third-party cookies are used by applying settings that are capable of anonymizing your data, whereby you will not be identifiable. Such cookies, among others, include social media networks and social media plug-ins (YouTube, Facebook, Twitter, Instagram, Pinterest, Google+, etc.). To disable or refuse third-party cookies, please refer to the websites of the above social networks.
List of cookies used:
- _ga - Third-party tracking cookie (Google Analytics) used for analyzing visits. Duration: 2 years
- _gat - Third-party tracking cookie (Google Tag Manager) used for analyzing visits. Duration: 10 minutes
- _gid - Third-party tracking cookie (Google Analytics) used for analyzing visits. Duration: 1 day
- cookie_privacy - First-party technical cookie used displaying the policy on Cookies. Duration: 30 days
- csrftoken - First-party technical cookie used for recording the user’s login session. Duration: 30 days
- sessionid - First-party technical cookie used for recording the user’s login session. Duration: 30 days.
Subject to the foregoing, the Data Controller hereby informs you that you may use Your Online Choices. Through this service, you may manage your tracking preferences for most advertising tools. The Data Controller, therefore, advises you to use such resource in addition to the information provided by this document: see http://www.youronlinechoices.com/it.
Social Network Widgets
Social network widgets are special “buttons” or “blocks” that you may find on the Website that depict the icons of social networks and allow any users browsing the Website to directly interact with such social network platforms with a “click”.
The links where you can read the privacy policies regarding data management by the social networks linked to such buttons and widgets are shown below. No information is collected or processed by the Website where the widget is embedded.
For more information, including on the deactivation of such cookies, we recommend that you consult the following links:
Twitter - https://support.twitter.com
Twitter - http://twitter.com/privacy
Facebook - https://www.facebook.com
LinkedIn - https://www.linkedin.com
Google Plus - http://www.google.it
Other Google services (e.g. YouTube) - http://www.google.com
AddThis - http://www.addthis.com
Cancellation of Cookies
You may at any time delete cookies from your system and set specific privacy preferences so as not to store cookies depending on the browser used. For more information:
Internet Explorer - http://support.microsoft.com/kb/278835
Safari - http://support.apple.com/kb/PH5042
Opera - http://www.opera.com/browser/tutorials/security/privacy/
Latest update: March 2019