LANTERNA DI GIANNOTTI ANTONELLO & C. S.A.S. Via Monte Bianco 2, 53047 – Sarteano (SI), +39-0578 265300, e-mail: email@example.com is the Data Controller of personal data. In addition, any partner sites that participate in data processing activities independently can assume the role of autonomous data controllers.
Subject of the processing
1) Navigation data
The computer systems and software procedures used to operate this site acquire, during normal operation, some personal data that are then implicitly transmitted in the use of Internet communication protocols.
This is information that by its nature could, through associations and processing with data held by third parties, allow users / visitors to be identified (eg IP address, domain names of computers used by users / visitors connecting to the site, etc.).
This data is used only for statistical information and to check the correct functioning of the site.
The data on web contacts are not stored, however, for more than seven days, except for any verification of computer crimes against the site. No data deriving from the web service will be communicated or disseminated.
2) Data provided voluntarily by users / visitors
If users / visitors, by connecting to this site, send their personal data to access certain services, or to make requests in electronic mail, they are aware that this involves the acquisition by the Data Controller of the sender’s address and / or any other personal data that will be processed exclusively to respond to the request, or for the provision of the service.
Personal data provided by users / visitors will be communicated to third parties only if the communication is necessary to comply with the requests of users / visitors themselves or by law (as in the case of billing).
The processing is carried out through automated tools (for example using procedures and electronic media) and / or manually (for example on paper) for the time strictly necessary to achieve the purposes for which the data were collected and, in any case, in compliance with the regulations in force on the subject.
Purpose of the processing
In addition to those indicated in the individual information preceding the compilation of the forms of the various sections of the site, the purposes of the processing carried out by the Owner must be understood as
Legal basis of the processing
The legal basis of the processing of customer data carried out by the owner through the site indicated in the inscription consists of the contract stipulated with the interested parties, while, in its absence, the legal basis is to be found in the legitimate interest of the owner for the free economic initiative referred to in ‘art. 41 cost As regards the additional purposes that require consent, it will be requested in a specific form and will also be considered a valid legal basis.
In addition to the owner, in some cases they may have access to the data categories of Managers and authorized parties involved in the corporate organization of the Site (administrative, commercial, marketing, legal, system administrators). Furthermore, the Data Controller may use external parties (such as third party technical service providers, transporters, hosting providers, cloud services, IT companies, communication agencies) that may be appointed as external managers. The updated list of data processors may always be requested from the Data Controller, by contacting the address indicated above.
Transfer to a third country
The data controller uses servers located in the following countries for the services offered by the site: – Italy and therefore, on the basis of Reg. 2016/679 / EU to be considered suitable as it falls within the eu framework.
The data processed by the Data Controller will never be disclosed.
Place of data processing
The processing operations connected to the web services of this site take place at the aforementioned offices of the Data Controller and are only handled by technical personnel of the office in charge of processing. In case of need, the data connected to the newsletter service can be processed by the staff of the company that manages the data center (data controller in accordance with Article 28 of Reg. 2016/679 / EU), at the company’s headquarters.
Times and place of data storage
The data is processed for the time necessary to perform the service requested by the user and then destroyed with safe means of destruction, such as paper shredders and wiping for data on computer support. Regarding the authorization to send newsletters and commercial / promotional information, the relative data will be kept for 10 years.
Optional or mandatory provision of data
Apart from that specified for navigation data that automatically acquire data, users / visitors are free to provide their personal data or not to provide it. Failure to provide such data may only result in the impossibility of obtaining what is requested.
Rights of interested parties
The subjects to whom the personal data refer have the right at any time under the terms of the GDPR to obtain confirmation of the existence of the same data and to know its content and origin, verify its accuracy or request its integration or updating, or rectification.
In relation to the processing of the aforementioned data, the customer has the right to obtain from the Data Controller:
Automated decision making processes
No automated decision-making processes are carried out on the aggregate data collected, unless they are aimed at better management of the site.
Last modification Date 8/3/2023