NOTICE PROVIDED PURSUANT TO ARTICLE 13 OF EUROPEAN REGULATION 2016/679
INTRODUCTION
This section describes the site management methods adopted by Andrea Bastoni, in relation to the processing of the personal data of users who access and browse the site. In compliance with Article 13 of EU Regulation 2016/679 on the protection of natural persons with regards to the processing of personal data, in addition to the free movement of such data, Andrea Bastoni hereby provides the following information to those who interact with the services offered by this site, which can be accessed online using the following address: www.andreabastoni.com
THE DATA CONTROLLER
In order to provide its web services, Andrea Bastoni may process data relating to identified or identifiable natural or legal persons. The data controller is Andrea Bastoni, with head office in Italy, at Via Giosuè Carducci n. 3, 41043, Formigine (MO).
PLACE OF DATA PROCESSING AND DISCLOSURE AND DISSEMINATION
The following site is "hosted" physically at Adobe Servers (more about Adobe Privacy Policy: https://www.adobe.com/privacy/policy.html)
The data controller may disclose the data stored on the site to public bodies or authorities when so required by law or when necessary to protect the data controller's rights.
No data originating from the web service is disseminated.
The data controller may disclose the data stored on the site to public bodies or authorities when so required by law or when necessary to protect the data controller's rights.
No data originating from the web service is disseminated.
TYPES OF DATA PROCESSED
Navigation data
During standard operation, the computer systems and software procedures used to operate this website acquire certain items of personal data automatically through the use of Internet communication protocols. This information is not collected in order to be associated with identified individuals; however, the nature of this information is such that it could - through processing and association of data held by third parties - allow users to be identified. This kind of data includes IP addresses, domain names of computers used by users connecting to the website, as well as the URI (Uniform Resource Identifier) addresses of any resources requested, the time of the request, the method used to submit the request to the server, the size of the file obtained in reply, the numerical code indicating the server reply status (successful, error, etc..) and other parameters relating to the user’s operating system and computer environment. This data is used for the sole purpose of obtaining anonymous statistical information about site usage and to check that the site is working properly. This data is deleted immediately after processing. This data could be used to ascertain liability in the event of computer crimes against the site.
Data provided voluntarily by the user
Users can interact with the site and in doing so provide their own personal data.
During standard operation, the computer systems and software procedures used to operate this website acquire certain items of personal data automatically through the use of Internet communication protocols. This information is not collected in order to be associated with identified individuals; however, the nature of this information is such that it could - through processing and association of data held by third parties - allow users to be identified. This kind of data includes IP addresses, domain names of computers used by users connecting to the website, as well as the URI (Uniform Resource Identifier) addresses of any resources requested, the time of the request, the method used to submit the request to the server, the size of the file obtained in reply, the numerical code indicating the server reply status (successful, error, etc..) and other parameters relating to the user’s operating system and computer environment. This data is used for the sole purpose of obtaining anonymous statistical information about site usage and to check that the site is working properly. This data is deleted immediately after processing. This data could be used to ascertain liability in the event of computer crimes against the site.
Data provided voluntarily by the user
Users can interact with the site and in doing so provide their own personal data.
“CONTACTS” PAGE
In the "Contacts" page, the user can enter his name, surname and e-mail address to request information.
Andrea Bastoni will use this data exclusively to respond to requests received (Article 6, section 1, subsection b).
Andrea Bastoni will use this data exclusively to respond to requests received (Article 6, section 1, subsection b).
RECIPIENTS OF PERSONAL DATA
User data will be processed by Andrea Bastoni internally.
DATA STORAGE AND RETENTION
Pursuant to Article 5 of EU Regulation n. 679/2016 "Principles relating to processing of personal data", data will be kept in a form which permits identification of data subjects for no longer than is necessary for the purposes for which the personal data is processed.
The data required for invoicing purposes will be retained for 10 years as of issue of the payment receipt, following recording of the remuneration in compliance with regulations concerning the keeping of accounting records and the evidentiary purposes thereof.
The data gathered for newsletter subscription purposes will be retained until receipt of an unsubscribe request or revocation of consent.
The personal data processed for soft spam purposes will be retained by the data controller until receipt of opposition to such processing, which must be sent by email to info@andreabastoni.com
The data required for invoicing purposes will be retained for 10 years as of issue of the payment receipt, following recording of the remuneration in compliance with regulations concerning the keeping of accounting records and the evidentiary purposes thereof.
The data gathered for newsletter subscription purposes will be retained until receipt of an unsubscribe request or revocation of consent.
The personal data processed for soft spam purposes will be retained by the data controller until receipt of opposition to such processing, which must be sent by email to info@andreabastoni.com
DATA SUBJECTS’ RIGHTS
Data subjects may independently access their personal account in order to:
- Access their personal data and download copies of this data;
- Delete their personal data from the data controller's database;
- Rectify, modify, and update their personal data;
- Unsubscribe from newsletters.
Furthermore, by sending an email to info@andreabastoni.com, the data subject may:
- Object to the data controller sending commercial emails concerning similar services and products ("soft spam");
- Seek a restriction of the processing of their personal data or object to such processing by the data controller, pursuant to Article 18 of the GDPR;
- Receive personal data concerning them in a structured, commonly used, and machine-readable format (Right to portability" Art. 20 of EU Regulation 2016/679);
- Be informed in the event that their data suffers a serious infringement (Article 34 of the GDPR).
Finally, the data subject may file a complaint with the data protection authority (known as the Garante per la protezione dei dati personali in Italy ) if they feel that the data concerning them has been processed in a way that breaches the said European Regulation.