Privacy Policy

This Privacy Policy is provided pursuant to art. 13 of Regulation 2016/679 (GDPR) and art. 13 of Legislative Decree no. 196/2003 (Personal Data Protection Code) and relates to all personal data processed according to the methods indicated below.

Data Controller
The Data Controller for the collected Personal Data is: ANNA GIOIELLI snc di Fabio e Francesco Gori
Operational headquarters: VIA IV NOVEMBRE 53
50060 – TOSI (FI)
Data Controller email address: info@annagioielli.com

Types of Data Collected

Complete details on each type of data collected are provided in the dedicated sections of this privacy policy. Personal Data may be freely provided by the User or, in the case of Usage Data, collected automatically during the use of the website. Unless otherwise specified, all requested Data are mandatory. If the User refuses to provide them, it might be impossible to provide the service. In cases where some data are optional, Users are free not to communicate such Data, without consequences on the availability or operation of the Service. Users who are unsure about which Data are mandatory are encouraged to contact the Data Controller. Any use of Cookies or other tracking tools by the website or third-party service providers used by the website, unless otherwise stated, serves the purpose of providing the Service requested by the User. Users assume responsibility for third-party Personal Data obtained, published, or shared through the website and guarantee they have the right to communicate or disseminate them, releasing the Data Controller from any liability towards third parties.

METHODS AND LOCATION OF DATA PROCESSING

Purpose of Processing Collected Data

The user’s data are collected to allow the Data Controller to provide its Services, as well as for the following purposes: Statistics, Newsletter, Personalized Advertising, Accounting, Content and functionality performance testing, Interaction with social networks and external platforms, Displaying content from external platforms, and Interaction with data collection platforms and other third parties. For further detailed information about processing purposes and the Personal Data relevant to each purpose, Users may refer to the respective sections of this document.

Processing Methods

The Data Controller adopts appropriate security measures to prevent unauthorized access, disclosure, modification, or unauthorized destruction of Personal Data. Processing is carried out using computer and/or electronic tools, with organizational methods and logic strictly related to the indicated purposes. In addition to the Data Controller, other external parties (administrative, commercial, marketing, legal personnel, system administrators), or external subjects (such as third-party technical service providers, mail carriers, hosting providers, IT companies, communication agencies) appointed, if necessary, as Data Processors by the Data Controller, may have access to the data. An updated list of Data Processors may always be requested from the Data Controller.

Legal Basis for Processing

The Data Controller processes Personal Data relating to the User if one of the following conditions applies:

• the User has given consent for one or more specific purposes;
• processing is necessary for the performance of a contract with the User and/or the execution of pre-contractual measures;
• processing is necessary to comply with a legal obligation to which the Data Controller is subject;
• processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the Data Controller;
• processing is necessary for the legitimate interests pursued by the Data Controller or third parties.

The User may always ask the Data Controller to clarify the concrete legal basis of each processing and in particular to specify whether the processing is based on law, provided by a contract, or necessary to conclude a contract.

Location

The Data are processed at the Data Controller’s operational headquarters and in any other location where the parties involved in the processing are located. For further information, contact the Data Controller. User Personal Data may be transferred to a country other than where the User is located. For more information on the place of processing, Users may refer to the section on the details of the processing of Personal Data. Users have the right to obtain information regarding the legal basis for the transfer of Data outside the European Union or to an international organization governed by international public law or consisting of two or more countries, such as the UN, and the security measures taken by the Data Controller to protect Data. If any such transfers occur, the User can refer to the respective sections of this document or request information from the Data Controller using the contact details provided above.

Retention Period

The Data are processed and stored for the time required by the purposes for which they were collected:

• Personal Data collected for purposes related to the execution of a contract between the Data Controller and the User will be retained until the completion of that contract.
• Personal Data collected for purposes related to the Data Controller’s legitimate interests will be retained until the fulfillment of those interests. Users may obtain further information regarding the legitimate interests pursued by the Data Controller by referring to the relevant sections of this document or by contacting the Data Controller.

When processing is based on the User’s consent, the Data Controller may retain Personal Data for longer until such consent is revoked. Additionally, the Data Controller may be required to retain Personal Data for a longer period in compliance with a legal obligation or by order of an authority. At the end of the retention period, Personal Data will be deleted. Therefore, at the expiration of this term, the right of access, deletion, rectification, and the right to data portability can no longer be exercised.

Details on the Processing of Personal Data

Personal Data are collected for the following purposes and using the following services:

• Mailing List or Newsletter

  By registering for the mailing list or newsletter, the User’s email address is automatically included in a list of contacts that may receive email messages containing information, including commercial and promotional material. The User’s email address may also be added as a result of registration on the website or after requesting a quote.
  Personal Data collected: email, first and last name.

• Contact Form

  By filling in the contact form, Users consent to the use of their Data to respond to requests for information, quotes, or other purposes indicated in the form’s header.
  Personal Data collected: first and last name, email (mandatory data), phone, and various types of Data.

• Registration for Access to Reserved Area

  By filling in the registration form, Users consent to the use of their Data to create a unique account usable for various website functions (responding to requests, quotes, or e-commerce).
  Personal Data collected: first and last name, email (mandatory data), phone, and various types of Data.