Privacy Policy
PRIVACY NOTICE PURSUANT TO ARTICLE 13 OF EU REGULATION 679/16 (GDPR)
FOR THE PROCESSING OF PERSONAL DATA
In compliance with EU Regulation 679/16 (GDPR) and subsequent amendments, we hereby provide you with the required information regarding the processing of the personal data you have provided. This notice is not to be considered valid for other websites that may be accessed through links present on the websites belonging to the data controller, who shall not be held responsible in any way for third-party websites. This is a notice provided pursuant to Article 13 of the European Regulation on the protection of personal data.
- The “DATA CONTROLLER” is Maria Grazia De Rosa, email: mariagrazia.derosa@sldlegal.it;
- Processing will be carried out using both manual and IT/telematic tools, in compliance with applicable regulations and the principles of fairness, lawfulness, transparency, relevance, completeness and non-excessiveness, accuracy, and with organisational and processing methods strictly related to the purposes pursued, while ensuring the security, integrity and confidentiality of the data processed, in compliance with the organisational, physical and logical measures required by applicable provisions.
- For the purposes set out in this notice, only non-special categories of personal data will be processed. Specific notices may be provided on the pages of the Website in relation to particular services or data processing activities provided by the User or Data Subject, and the relevant consents will be collected in those same contexts (where necessary).
Purposes of processing
- To enable browsing of this website and the technical management of connections to it. The IT systems and software procedures used to operate this Website acquire, during their normal operation, certain personal data which are transmitted implicitly through the use of Internet communication protocols. This information is not collected for the purpose of being associated with identified data subjects. This data is used only for statistical purposes (and is therefore anonymous) and to check the proper functioning of the Website.
- Any request for contact made by the data subject, providing a response to such requests, and following up on assistance requests and the needs of clients and users. For this purpose, only the data communicated by the data subject in relation to the services offered by the data controller are processed.
The data requested for the purposes indicated are necessary to enable browsing of the website and to follow up on contact and/or booking requests made by the data subject. Failure to provide such data may make it impossible to browse the website, to obtain a response to enquiries, or to obtain what has been requested.
The legal basis and lawfulness of the processing can be identified in the contractual or pre-contractual obligations connected with the provision of a service or with responding to requests from the data subject (Art. 6(b)).
The data provided for the above-mentioned purposes will be retained for the time technically necessary for the purpose referred to in point a, while for browsing data this corresponds to the technical time required to enable the connection.
Contact data will be retained for the period necessary to manage the data subject’s requests.
Please note that the data provided may be processed for the protection of the data controller’s legitimate interests and for defence in legal proceedings. In this case too, the principles of necessity, proportionality and non-excessiveness will apply, and retention will be consistent with what has been indicated above, and will in any case be defined on a case-by-case basis.
Comments on content and reviews of products and/or services
The comment services allow Users to submit and make public their own comments regarding the content of this Website.
If the Personal Data provided by the User includes an email address, this may be used to send notifications of comments relating to the same content. Users are responsible for the content of their own comments.
If a comment and/or review service for services and/or products is installed and provided by third parties, that service may collect traffic data relating to the pages on which the comment service is installed.
- Comment system managed directly;
- Review system managed directly using an external application (plugin/service).
Personal Data collected: email and name.
Disclosure, possible recipients or categories of recipients of the data
No data will be disclosed in any way.
The data provided will be processed exclusively by persons authorised to process data and duly instructed, under the supervision of the Data Controller, as well as through data processors bound to the data controller by a specific contract (Art. 28 of Regulation 2016/679), such as: companies providing services for the management of the IT system and telecommunications networks, professionals and consultants, or service providers to the data controller. The data will in any case only be disclosed to the extent strictly necessary from a technical or professional standpoint, favouring anonymous processing wherever possible.
The data will be processed within the EU.
An updated list with the identifying details of all Data Processors may be requested from the above-mentioned Data Controller at any time.
The data may also be disclosed to third parties (Public Bodies, Police Forces, Judicial Authorities, etc.), but exclusively for the purpose of complying with legal, regulatory or EU obligations.
Rights of the data subject, Articles 15, 16, 17, 18, 19, 20, 21 and 77 of the GDPR
We inform you of the existence of the right to know the recipients of any disclosure, the right of access to personal data, the right of rectification, the right of erasure and, where applicable, the right to be forgotten, the right to restriction of processing, the right to data portability, and the right to object at any time to the processing of personal data concerning you.
We also inform you that you have the right to withdraw your consent to the processing of your data at any time, without affecting the lawfulness of processing based on consent given before such withdrawal (Art. 7(3) GDPR). Pursuant to Art. 77 of the Regulation, you are entitled to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work, or the place where the alleged infringement occurred, which in Italy corresponds to the Data Protection Authority (Garante per la Protezione dei Dati Personali), whose contact details can be found at www.garanteprivacy.it.
You may exercise these rights simply by contacting the Data Controller using the contact details indicated in this notice.
This notice was drawn up on 12/03/2026.
The data controller: Maria Grazia De Rosa
