©
Legal notice The site and the domain on which it is hosted are owned by: Giuliana Del Gaudio, with registered office in via F. Baracca 4, Cardano al Campo 21010 – Varese For the purposes of art. 1, paragraph 1, of the decree-law of March 22, 2004, no. 72, convLegal notice The site and the domain on which it is hosted are owned by: Mrs. Giuliana Del Gaudio, with office in via F. Baracca 4, Cardano al Campo 21010 - Varese For the purposes of art. 1, paragraph 1, of the decree-law of March 22, 2004, no. 72, conv"We guarantee full compliance with all the rules provided by the Law for the protection of Privacy, explicitly confirming our careful adherence to the provisions of the GDPR Regulation no. 679/2016 and what derives from it, and in particular to what is cont
Legal notice
The site and the domain on which it is hosted are owned by:
Giuliana Del Gaudio, with registered office at via F. Baracca 4, Cardano al Campo 21010 – Varese
For the purposes of Art. 1, paragraph 1, of Decree-Law of March 22, 2004, No. 72, converted with amendments by Law of May 21, 2004, No. 128, it is hereby notified that the works present on this website have fulfilled the obligations arising from the legislation on copyright and related rights.
The reproduction, distribution, and any other use of the works present on this site without the authorization of the copyright holder is prohibited. Violations will be subject to the penalties provided for by articles 171, 171-bis, 171-ter, 174-bis, and 174-ter of law 633/1941.
Pursuant to and for the purposes of Article 13 of EU Regulation No. 2016/679 of 27 April 2016 (hereinafter also referred to as "GDPR") regarding the protection of natural persons with regard to the processing of personal data, this privacy notice is provided.
Specifically, the sole director pro tempore, as Data Controller, wishes to inform you that, in compliance with the obligations arising from the GDPR, is required to provide certain information regarding the methods and purposes of the processing of personal data, which may be acquired as a result of the user's consultation and use of the website.
1. DATA CONTROLLER
The Data Controller for all personal data collected and processed in relation to the use of the website www.gdgweddingmakeup.it is the sole director pro tempore with registered office at via F.Baracca 4, Cardano al Campo 21010 – Varese
Owner's email address: amministrazione@gdgweddingmakeup.it
Phone: 39 3479338525
PEC:
2. TYPES OF DATA PROCESSED
2.1 Personal data:
The optional and voluntary completion of the contact form on the website, involving the provision of personal data such as the user's name and email address, implies the subsequent acquisition of said data, as well as those contained in the text of the message sent.
It should also be noted that the optional, explicit, and voluntary sending of your curriculum vitae to the email address indicated herein entails the subsequent acquisition of the sender's address, the CV, and any other personal data included in the message.
2.2 Browsing data
The computer systems and software procedures responsible for the operation of the site acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols.
This category of data includes the IP addresses or domain names of the computers used by users who connect to the site, the addresses in URI (Uniform Resource Identifier) notation of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.), and other parameters related to the user's operating system and IT environment.
This data is used solely for the purpose of obtaining anonymous statistical information on the use of the site and to check its correct functioning. The data may be used to ascertain responsibility in the event of hypothetical computer crimes against the site and the Data Controller, but only at the request of the competent supervisory authorities.
It should be noted that, except for technical cookies strictly necessary for normal navigation, no other type of cookie is used.
3. PURPOSE OF THE PROCESSING
3.1 The personal data collected through the user's completion of the contact form are processed in order to respond to the user's requests.
3.2 The personal data collected through the submission of purchase orders will be used solely for the purpose of fulfilling the requested order.
3.3 The Data Controller still has the possibility to process the aforementioned data in aggregate form, in compliance with the measures prescribed by the EU Regulation and the Guidelines of the Privacy Authority and by virtue of the specific exemption from consent provided by the same Authority, for electronic analysis and processing (for example, the classification of the entire class of users into homogeneous categories by levels of services, consumption, expenditure, etc.) aimed at periodically monitoring the development and economic performance of the company's activities.
4. LEGAL BASIS OF PROCESSING
4.1 The legal basis for the processing of the above-mentioned personal data is:
- as for point 2.2 Type of data processed, the need to allow navigation on the site;
- as for point 3.1, Purpose of processing, the need to respond to the user's request;
- as for point 3.2 Purpose of processing, the consent of the data subject, expressed by voluntarily sending their goods order.
4.2 The Data Controller still has the possibility to process the aforementioned data in aggregated form, in compliance with the measures prescribed by the EU Regulation and the Privacy Authority's Guidelines and by virtue of the specific exemption from consent provided by the same Authority, for electronic analyses and processing (for example, the classification of the entire class of users into homogeneous categories by service levels, consumption, expenditure, etc.) aimed at periodically monitoring the development and economic trend of the commercial activity.
5. METHODS OF PROCESSING
Personal data are processed with automated and non-automated tools, for the purposes for which they were collected. Specific security measures are observed to prevent data loss, unlawful or improper use, and unauthorized access. The collected data may be used on behalf of the Data Controller by administrators appointed to carry out processing services and to ensure the proper functioning of the site's activities. Processing related to the web services of this site may also take place at the web service provider. It should be noted that personal data will be stored and monitored, also in relation to the knowledge acquired based on technological progress, the nature of the data, and the specific characteristics of the processing, by adopting appropriate and preventive security measures, both physical and logical, in order to minimize the risks of destruction or loss of the data; unauthorized access; processing not allowed or not in line with the purposes of collection. It should be noted that the data will be saved using a cloud computing system, specifically Microsoft One Drive, which guarantees an encrypted communication system via SSL. The processing will be carried out by the Data Controller and by persons expressly authorized by the controller.
6. DATA RETENTION PERIOD
6.1 The data provided through the completion of the request form: such data is kept for the period necessary to respond to the user's request.
6.2 Browsing data: will be retained for the technical time necessary to carry out the functions for which they were collected and in any case for a maximum period of 6 months.
6.3 The data collected through the submission of the application to the email address indicated on the site and the related CV will be kept for 24 months from the closure of the relevant selection process.
6.4 The Data Controller may retain the user's personal information even after the provision of the services if such retention is reasonably necessary to comply with legal obligations, meet regulatory requirements, resolve disputes between users, prevent fraud and abuse, or enforce this privacy policy.
6.5 The Data Controller will retain the data of the data subject until the expiration of the retention period or until the withdrawal of consent by the latter, with the notice that, in any case, such data will be automatically deleted or made permanently and irreversibly anonymous.
7. COOKIES
7.1 In order to make navigation as efficient and simple as possible, this Site uses cookies. Therefore, when you visit the Site, a minimal amount of information is placed on the User's device, such as small text files called "cookies", which are saved in the User's web browser directory. There are different types of cookies, but essentially the main purpose of a cookie is to make the Site work more efficiently and to enable certain features.
7.2 Cookies are used to improve the overall navigation of the User. In particular:
• They allow you to navigate efficiently from one page to another on the website.
• They remember the username and the preferences entered.
• They allow you to avoid entering the same information (such as username and password) multiple times during your visit.
• They measure the use of services by Users, in order to optimize the browsing experience and the services themselves.
• They present targeted advertising information based on the interests and behavior shown by the User during navigation.
• There are various types of cookies. Below are the types of cookies that may be used on the Site with a description of the purpose related to their use.
7.3 Our site uses only technical cookies. Cookies of this type are necessary for the proper functioning of certain areas of the site. Cookies in this category include both persistent cookies and session cookies. In the absence of these cookies, the site or some parts of it may not function properly. Therefore, they are always used, regardless of user preferences. Cookies in this category are always sent from our domain.
8. RECIPIENTS AND CATEGORIES OF RECIPIENTS
8.1 The personal data provided will not be disseminated, that is, they will not be disclosed to unspecified parties. The data may instead be communicated to well-defined parties only by the Data Controller for the purposes indicated, in particular
a) to legal, tax, and business consultants, for the best management of tax and billing matters, who will in any case remain autonomous data controllers, unless expressly appointed as external data processors;
b) to collaborators, substitutes, and other professionals who will collaborate in relation to individual assignments, who will remain holders of autonomous processing unless they are appointed as managers or persons in charge of a particular processing.
8.2 The list of subjects appointed as external Data Processors, if applicable, is available upon request at the following contacts:
Giuliana Del Gaudio, with registered office at via F. Baracca 4, Carano al Campo 21010 – Varese, also via email at the following email address: amministrazione@gdgweddingmakeup.it
9. DATA SUBJECT'S RIGHTS
9.1 The data subject has the right:
- to access, rectify, erase, restrict, and object to the processing of data;
- to obtain from the data controller, without hindrance, the data in a structured, commonly used and machine-readable format in order to transmit them to another data controller;
- to withdraw consent to processing, without prejudice to the lawfulness of processing based on consent acquired before the withdrawal;
9.2 In this regard, please note that the deadline for responding to the data subject is, for all rights, one month from receipt of the request, extendable up to three months in cases of particular complexity.
9.3 The exercise of the aforementioned rights may be carried out by written communication to be sent by email to: amministrazione@gdgweddingmakeup.it or by registered letter with return receipt to the address: viale F.Baracca 4, Cardano al Campo 21010 – Varese.
10. COMPLAINT TO THE SUPERVISORY AUTHORITY
10.1 The data subject has the right to lodge a complaint with the Data Protection Authority. The complaint is the tool that allows the data subject to contact the Authority to report a violation of the rules regarding the protection of personal data pursuant to art. 77 of the GDPR and to request a review by the Authority. The complaint may be submitted by the data subject to the Supervisory Authority of the place where they reside, or where they work, or where the alleged violation occurred.
10.2 The Data Subject also has the right to file a judicial appeal before the ordinary court if they believe that the rights they enjoy have been violated as a result of processing.
11. TRANSFER OF DATA ABROAD
11.1 Personal data may be transferred outside the European Union in the event of a professional assignment shared with legal, tax, or business consultants for the management of assignments involving the resolution of issues related to non-EU countries. The Data Controller will verify that the legal, tax, and business consultants guarantee the same security standards for data processing as provided by the GDPR.
11.2 Personal data may be transferred outside the European Union for the storage of personal data on the Microsoft One Drive cloud server. Microsoft adheres to the Privacy Shield, thus ensuring compliance with Article 45 of the GDPR.
12 DPO (DATA PROTECTION OFFICER)
The sole director pro tempore appoints himself as the data protection officer, in accordance with Articles 37 et seq. of the GDPR and provides the following contact details: e-mail: amministrazione@gdgweddingmakeup.it
©
Legal notice The site and the domain on which it is hosted are owned by: Giuliana Del Gaudio, with registered office in via F. Baracca 4, Cardano al Campo 21010 – Varese For the purposes of art. 1, paragraph 1, of the decree-law of March 22, 2004, no. 72, convLegal notice The site and the domain on which it is hosted are owned by: Mrs. Giuliana Del Gaudio, with registered office in via F. Baracca 4, Cardano al Campo 21010 - Varese For the purposes of art. 1, paragraph 1, of the decree-law of March 22, 2004, no. 72, conv"We guarantee full compliance with all the regulations provided by the Law for the protection of Privacy, explicitly confirming our careful adherence to the provisions of the GDPR Regulation no. 679/2016 and what follows from it, and in particular to what is contained