Dear Visitor,
We recognize the importance of protecting personal data. Therefore, any data you provide—voluntarily or even involuntarily—while browsing our website will be processed in compliance with applicable regulations.
We invite you to review the following information, provided pursuant to Article 13 of EU Regulation No. 2016/679 ("GDPR"), regarding the management and processing of browsing data as well as data you submit by contacting the email addresses listed on the Site. Please note that we may update this notice at any time, with changes published on the Site. We encourage you to check this page periodically.
1. Types of Data Collected ("Data"), Purposes, and Legal Basis for Processing
a) Browsing Data
The IT systems and software procedures used to operate the Site automatically collect certain personal data during normal operation, the transmission of which is inherent to internet communication protocols. This category includes:
- IP addresses or domain names of users’ devices;
- MAC (Media Access Control) addresses;
- URI (Uniform Resource Identifier) addresses of requested resources;
- Time of request;
- Method used to submit the request to the server;
- File size received in response;
- Numerical status code of the server response (success, error, etc.);
- Other parameters related to the user’s operating system and IT environment.
We use this Data for the following purposes:
- To generate anonymous statistics on Site usage and ensure proper functionality. Data used for this purpose is deleted immediately after processing but may be retained to investigate cybercrimes against the Site. The legal basis for this processing is Article 6(1)(b) GDPR, as it is necessary to provide the requested service (i.e., Site navigation).
- To comply with legal obligations or judicial requests. The legal basis is Article 6(1)(c) GDPR, as processing is required to fulfill a legal obligation.
b) Data You Voluntarily Provide
When you email the addresses listed on the Site, we process your email address and any other personal data in the message for:
- Responding to your requests via email. The legal basis is Article 6(1)(b) GDPR, as processing is necessary to fulfill your request.
- Complying with legal obligations or judicial requests (Article 6(1)(c) GDPR).
Please do not send "special categories" of data (e.g., health or religious beliefs). Such data, if provided, will be deleted immediately.
c) Cookies
Our Site uses only technical cookies (session and navigation cookies) to ensure normal functionality (e.g., authentication for restricted areas). For details, see the Cookie Policy in the Site footer or at [insert link].
2. Data Retention Period
- Browsing Data: Retained for the duration of service provision and anonymized/deleted within 7 days of collection.
- Voluntarily Provided Data: Retained after fulfilling your request, except where required for tax, accounting, legal, or administrative compliance.
3. Processing Methods
Your Data is processed by authorized personnel using electronic tools, databases, and secure storage (digital/paper). No automated decision-making is employed.
We implement security measures (e.g., intrusion-resistant servers, periodic cybersecurity audits) to prevent data loss, misuse, or unauthorized access.
4. Data Provision
- Browsing Data: Mandatory for Site access. Without it, navigation is impossible.
- Other Data: Optional. Lack of provision may limit our ability to respond to requests.
5. Data Disclosure
Your Data may be shared with:
(i) Entities legally entitled to access it;
(ii) Third-party service providers (appointed as Data Processors). For a list of Processors, contact us (Section 9).
Your Data will not be disseminated.
6. Data Transfers Outside the EU
No Data collected via the Site is transferred outside the EU or to international organizations.
7. Links to Third-Party Sites/Services
This notice applies only to our Site. Linked third-party sites operate under their own privacy policies—review them separately.
8. Your Rights
As a data subject, you may exercise the following GDPR rights at any time:
- Request information on: Data origin; processing purposes/methods; logic of electronic processing; our/our Processors’ details.
- Obtain: Access, correction, or erasure of Data; restriction of processing; a portable copy of your Data.
- Object to processing:
a) For scientific/historical/statistical research (if related to your specific situation);
b) For public-interest tasks or our legitimate interests;
c) For promotional/marketing purposes. - Withdraw consent (where applicable) without affecting pre-withdrawal processing.
- Lodge a complaint with the supervisory authority of your EU residence/workplace or the alleged violation location.
The Italian Data Protection Authority (Garante) can be contacted via its website.
9. Data Controller
The Controller is Casale Petrarolo (VAT No. 08792280722), located at Contrada Petrarolo 13, Monopoli (BA), represented by its legal representative.
To exercise your rights, email: casalepetrarolo@gmail.com.