PRIVACY POLICY

Any changes and updates will become binding as soon as they are published on the Application. If the Data Subject does not accept the modifications made to the Privacy Policy, they are required to cease using this Application and may request the Controller to delete their Personal Data.

1. Categories of Personal Data processed

   The Controller processes the following types of Personal Data voluntarily provided by the Data Subject:

   • Contact information: first name, last name, address, email, phone number, images, authentication credentials, any additional information provided by the Data Subject, etc.

   Failure to provide the Personal Data for which there is a legal or contractual obligation, or which are necessary requirements for entering into a contract with the Controller, will result in the Controller's inability to establish or continue the relationship with the Data Subject.

   The Data Subject who provides the Controller with Personal Data of third parties is directly and solely responsible for their origin, collection, processing, communication, or disclosure.

2. Cookies and similar technologies

   The Application uses cookies, web beacons, unique identifiers, and similar technologies to collect the Data Subject's Personal Data about the pages visited, links clicked, and other actions taken when the Data Subject uses the Application. They are stored to be transmitted during the Data Subject's subsequent visits. You can view the Cookie Policy in the following section of this notice.

This cookie policy was created and updated by CookieFirst.com.

3. Legal basis and purpose of processing

   The processing of Personal Data is necessary:

   1. For the performance of the contract with the Data Subject, specifically:
      1. For the fulfillment of any obligations arising from the pre-contractual or contractual relationship with the Data Subject
   2. For compliance with a legal obligation, specifically:
      1. For the fulfillment of any obligations established by applicable laws, statutes, and regulations, particularly in tax and fiscal matters

   The Data Subject's Personal Data may also be used by the Controller for legal protection in court proceedings before judicial authorities.

4. Processing methods and recipients of the Personal Data

   The processing of Personal Data is carried out using both paper-based and computerized tools, with organizational methods and logic strictly related to the stated purposes, and by adopting appropriate security measures.

   The Personal Data is processed exclusively by:

   • Authorized persons appointed by the Data Controller who have committed to confidentiality or have an adequate legal obligation of confidentiality;
   • Bodies operating autonomously as separate data controllers or entities appointed as data processors by the Data Controller to perform all necessary processing activities to pursue the purposes stated in this notice (e.g., business partners, consultants, IT companies, service providers, and hosting providers);
   • Subjects or entities to whom the Personal Data must be communicated due to a legal obligation or upon order of authorities.

   The aforementioned subjects are required to use appropriate safeguards to protect the Personal Data and can only access the data necessary to perform their assigned tasks.

   The Personal Data will not be indiscriminately disclosed in any way.

5. Location

   The Personal Data will not be transferred outside the territory of the European Economic Area (EEA).

6. Retention period of the Personal Data

   The Personal Data will be retained for the period of time necessary to fulfill the purposes for which they were collected, in particular:

   • For purposes related to the performance of the contract between the Data Controller and the Data Subject, they will be retained for the entire duration of the contractual relationship and, after termination, for the ordinary legal period of 10 years. In the case of legal disputes, they will be retained for the entire duration of the proceedings, including the expiration of the time limits for filing appeals.
   • For purposes related to the legitimate interests of the Data Controller, they will be retained until such interests are fulfilled.
   • For compliance with a legal obligation, upon order of authority, or for legal defense, they will be retained in accordance with the timing provided by those obligations and regulations, and in any case until the expiration of the statutory limitation period as stipulated by the applicable laws.
   • For purposes based on the Data Subject's consent, they will be retained until the consent is revoked.

   At the end of the retention period, all Personal Data will be erased or stored in a form that does not allow the identification of the Data Subject.

7. Rights of the Data Subject

   Data Subjects can exercise certain rights concerning the Personal Data processed by the Data Controller. In particular, the Data Subject has the right to:

   • be informed about the processing of their Personal Data
   • withdraw consent at any time
   • restrict the processing of their Personal Data
   • object to the processing of their Personal Data
   • access their Personal Data
   • verify and request the rectification of their Personal Data
   • obtain the restriction of the processing of their Personal Data
   • obtain the erasure of their Personal Data
   • transfer their Personal Data to another controller
   • lodge a complaint with the supervisory authority for the protection of their Personal Data and/or take legal action.

   To exercise their rights, Data Subjects can send a request to the following email address: This email address is being protected from spambots. You need JavaScript enabled to view it.. The requests will be promptly handled by the Data Controller and processed as soon as possible, in any case within 30 days.