This document can be printed for reference using the print command in the settings of any browser.

Owner and Data Controller

Anna Valeria Barone – Via Lecce, 11 -73014- Gallipoli – pec: bbhagya@pec.it

Types of data collected

Among the Personal Data collected by this site, either independently or through third parties, are: name; surname; telephone number; e-mail address; tracker; usage data; answers to questions; clicks; keystroke events; motion sensor events; mouse movements; scroll position; tap events.

Full details on each type of Personal Data collected are provided in the relevant sections of this privacy policy or through specific information texts displayed prior to the collection of such Data.

Personal Data may be freely provided by the User or, in case of User Data, automatically collected during the use of this Application.

Unless otherwise specified, all Data requested by this Application are mandatory and failure to provide them may make it impossible for this Application to provide its services. In cases where this Application expressly indicates that some Data are not mandatory, Users are free not to communicate such Data without consequences on the availability or functioning of the Service.

Users in doubt as to which Personal Data are mandatory are invited to contact 

Users who have doubts as to which Personal Data are mandatory are invited to contact the Data Controller.

The possible use of Cookies – or of other tracking tools – by this Application or by the owners of third party services used by this Application has the purpose of providing the Service requested by the User, in addition to the further purposes described in this document. and in the Cookie Policy, if available.

Users are responsible for the Personal Data of third parties obtained, published or shared through this Application and confirm that they have the consent of the third party to provide the Data to the Owner.

Method and place of data processing

Modalities of processing

The Data Controller takes appropriate security measures to prevent unauthorised access, disclosure, modification or destruction of the Data.

The Data is processed by means of computer and/or computer-enabled tools, with organisational methods strictly related to the purposes indicated. 

Method and place of data processing

Modalities of processing

The Data Controller takes appropriate security measures to prevent unauthorised access, disclosure, modification or destruction of the Data.

The Data is processed by means of computer and/or computer-enabled tools, with organisational methods strictly related to the purposes indicated. In addition to the Data Controller, in some cases, the Data may be accessed by categories of appointees involved in the operation of this Application (administrative, sales, marketing, legal, system administrators) or by external subjects (such as third parties) third party technical service providers, postal couriers, hosting providers, IT companies, communication agencies) also appointed, if necessary, as Data Processors by the Data Controller. The updated list of such subjects may be requested from the Controller at any time.

Legal basis for processing

The Controller may process Personal Data relating to Users in the event one of the following hypotheses exists:

Users have given their consent for one or more specific purposes. Note: in some legislations, the Controller may be allowed to process Personal Data until the User objects to such processing (“opt-out”), without relying on consent or any other of the following legal bases. This, however, does not apply if the processing of Personal Data is subject to European data protection law;

• the provision of the Data is necessary for the performance of a contract with the User and/or for any pre-contractual obligations of the User
• the processing is necessary to fulfil a legal obligation to which the Controller is subject;
• processing is connected with a task carried out in the public interest or in the exercise of public authority vested in the Controller;
• processing is necessary for the purposes of the legitimate interests pursued by the Controller or by third parties.
• In any event, the Controller will be happy to help clarify the specific legal basis that applies to the processing, and in particular whether the provision of Personal Data is a legal or contractual obligation, or a requirement necessary to conclude a contract.

Place

The Data are processed at the Data Controller’s operational headquarters and at any other place where the parties involved in the processing are located.

Depending on the User’s location, Data transfers may involve the transfer of the User’s Data to a country other than his/her own. To learn more about the location of the processing of the Data provided, Users may consult the section containing details on the processing of Personal Data.

Users also have the right to know the legal basis for transfers of Data to a country outside the European Union or to an international body of public international law or established by two or more countries, such as the United Nations, and the security measures taken by the Data Controller to safeguard its Data.

Should such a transfer occur, Users can find out more by consulting the relevant sections of this document or inquire with the Data Controller using the information provided in the contact section.

Retention time

Personal Data will be processed and retained for the time required by the purpose for which it was collected.

Therefore:

Personal Data collected for purposes related to the performance of a contract between the Data Controller and the User will be retained until the full performance of that contract.

Therefore:

Personal Data collected for purposes related to the performance of a contract between the Controller and the User will be retained until the full performance of that contract.

Personal Data collected for purposes of legitimate interest of the Data Controller will be kept as long as necessary to achieve such purposes. Users can find specific information regarding the legitimate interests pursued by the Controller in the relevant sections of this document or by contacting the Controller.

The Data Controller may be allowed to retain Personal Data for longer if the User has given consent to such processing, until such consent is revoked. In addition, the Controller may be obliged to retain Personal Data for a longer period if this is necessary to comply with a legal obligation or by order of an authority.

Once the retention period has expired, the Personal Data will be deleted. Therefore, once this period has expired, the right of access, deletion, rectification and portability of the data can no longer be exercised.

The purposes of the processing

The User Data are collected to enable the Controller to provide the Service, comply with legal obligations, respond to enforcement requests, protect its rights and interests (or those of Users or third parties), detect any malicious or fraudulent activities, as well as the following: Contacting the User, Analysis, Protection against SPAM and Displaying content from external platforms.

For specific information on the Personal Data used for each purpose, the User may refer to the section “Detailed Information on the Processing of Personal Data”.

Detailed information on the processing of Personal Data

Personal Data is collected for the following purposes and using the following services:

>Google Analytics (Google Ireland Limited)

Google Analytics is a web analytics service provided by Google Ireland Limited (“Google”). Google uses the Personal Data collected for the purpose of tracking and examining the use of this Application, compiling reports on its activities and sharing them with other Google services.

Google may use the Personal Data to contextualise and personalise the advertisements of its advertising network.

Personal Data processed: Tracker; Usage Data. Place of processing: Ireland – Privacy Policy – Opt Out .

>Contact Form (this Application)

By filling in the contact form with his/her Data, the User authorises this Application to use them to reply to requests for information, quotations or any other nature indicated in the header of the form.

Personal Data processed: email address; first name; surname; telephone number; Tracker.

>Google Fonts (Google Ireland Limited)

Google Fonts is a font display service provided by Google Ireland Limited, which allows this Application to integrate such content into its pages.

Personal data processed: Tracker; Usage Data.

Place of processing: Ireland – Privacy Policy .

>Google reCAPTCHA (Google Ireland Limited)

Google reCAPTCHA is a SPAM protection service provided by Google Ireland Limited.

Use of reCAPTCHA is subject to Google’s privacy policy and terms of use.

Personal Data processed: answers to queries; clicks; keystroke events; motion sensor events; mouse movements; scroll position; tap events; tracker; Usage Data.

Place of processing: Ireland – Privacy Policy

>Google Analtycs

Processed Personal Data: Browsing data tracking; Tracker; Usage Data.

Place of processing: Ireland – Privacy Policy

Users’ rights

Users may exercise certain rights with regard to their Data processed by the Data Controller.

In particular, Users have the right to do the following:

>Revoke their consent at any time. Users have the right to withdraw their consent where they have previously given their consent to the processing of their Personal Data.

>Oppose the processing of their Data. Users have the right to object to the processing of their Data where the processing is carried out on a legal basis other than consent. Further details are provided in the section below.

>Access to their Data. Users have the right to know whether Data is being processed by the Data Controller, to obtain information on certain aspects of the processing and to obtain a copy of the Data being processed.

>Check and request rectification. Users have the right to verify the accuracy of their Data and request that it be updated or rectified.

>Limit the processing of their Data. Users have the right, under certain circumstances, to limit the processing of their Data. In this case, the Data Controller will not process their Data for any purpose other than its storage.

>To have their Data deleted or otherwise removed. Users have the right, in certain circumstances, to obtain from the Data Controller the deletion of their Data.

>Receive their Data and have them transferred to another controller. Users have the right to receive their Data in a structured, commonly used and machine-readable format and, if technically feasible, to have them transferred to another controller without any hindrance. This provision is applicable provided that the Data are processed by automated means and that the processing is based on the User’s consent, on a contract to which the User is party or on pre-contractual obligations of the User.

>Presenting a complaint. Users have the right to lodge a complaint before the competent data protection authority.

Details of the right to object to processing

Where Personal Data are processed for a public interest, in the exercise of an official authority vested in the Controller or for the purposes of the legitimate interests pursued by the Controller, Users may object to such processing by providing a reason relating to their particular situation to justify the objection.

Users should be aware that, however, should their Personal Data be processed for direct marketing purposes, they may object to such processing at any time without providing any justification. To find out whether the Controller processes data for direct marketing purposes, Users may refer to the respective sections of this document.

How to exercise these rights

Any requests to exercise the User’s rights may be addressed to the Controller via the contact details provided in this document. Such requests may be exercised free of charge and will be processed by the Controller as soon as possible and always within one month.

Further information on data collection and processing

Legal action

The User’s Personal Data may be used for legal purposes by the Data Controller in court or in the preparatory stages of any legal action arising from the improper use of this Application or related Services.

The User declares that he/she is aware that the Data Controller may be required to disclose personal data at the request of public authorities.

Further information on the User’s Personal Data

Upon the User’s request, in addition to the information contained in this privacy policy, this Application may provide the User with additional and contextual information regarding specific Services, or the collection and processing of Personal Data.

System Logs and Maintenance

For purposes related to operation and maintenance, this Application and any third-party services may collect files recording interaction with this Application (System Logs) or use other Personal Data (such as IP address) for this purpose.

Information not contained in this Policy

Further details in relation to the collection or processing of Personal Data may be requested from the Data Controller at any time. Please see the contact information at the beginning of this document.

How “Do Not Track” requests are handled.

This Application does not support “Do Not Track” requests.

To determine whether any of the third party services you use respect “Do Not Track” requests, please read their privacy policies.

Changes to this privacy policy

The Owner reserves the right to make changes to this privacy policy at any time by notifying Users on this page and possibly within this Application and/or – to the extent technically and legally feasible – by sending a notice to Users via any contact information available to the Owner. You are strongly advised to check this page often, referring to the date of last modification indicated at the bottom.

If the changes affect the processing carried out on the basis of the User’s consent, the Owner will collect the User’s new consent where required.

Definitions and regulatory references

Personal data

any information that, directly or indirectly, including in connection with any other information, including a personal identification number, makes a natural person identified or identifiable.

Usage data

Information collected automatically through this Application (or third-party services used by this Application), which may include: IP addresses or domain names of the computers used by Users using this Application, URI (Uniform Resource Identifier) notation addresses, the time of the request, the method used to submit the request to the server, the size of the file received in response, the numerical code indicating the status of the response given by the server (successful, error, etc.), the country of origin, the characteristics of the browser and operating system used by the User, the different visit times (e.g. the time spent on each page within the Application) and details about the path taken by the User to reach the Application. ), the country of origin, the characteristics of the browser and operating system used by the User, the different visit times (e.g. the time spent on each page within the Application) and details of the path followed within the Application with particular reference to the sequence of pages visited and other parameters relating to the User’s operating system and/or computer environment.

User

The individual who uses this Application which, unless otherwise specified, coincides with the Data Subject.

Data Subject

The natural person to whom the Personal Data refer.

Data Controller (or Processor)

The natural or legal person, public authority, service or other body that processes Personal Data on behalf of the Controller, as described in this privacy policy.

Data Controller (or Controller)

The natural or legal person, public authority, service or other body that, individually or jointly with others, determines the purposes and means of the processing of Personal Data, including the security measures relating to the operation and use of this Application. The Data Controller, unless otherwise specified, is the owner of this Application.

Anna Valeria Barone – Via Lecce, 11 -73014- Gallipoli – pec: bbhagya@pec.it

This Application

The methods by which the User’s Personal Data are collected and processed.

Service

The Service provided by this Application as defined in the relevant terms (if any) on this site/application.

European Union (or EU)

Unless otherwise specified, all references to the European Union within this document include all current member states of the European Union and the European Economic Area.

Cookies

Cookies are trackers consisting of small sets of data stored in the user’s browser.

Tracker

Tracker means any technology – e.g. cookies, unique identifiers, web beacons, embedded scripts, e-tags and fingerprints – that enables the tracking of Users, e.g. by accessing or storing information on the User’s device.

Legal notice

This Privacy Policy is drafted on the basis of provisions of multiple legislations, including Article 13/14 of Regulation (EU) 2016/679 (General Data Protection Regulation).

This privacy policy relates exclusively to this Application, unless otherwise specified within this document.

Updated to 25/03/2024