Privacy & Cookie Law Policy for users accessing this website pursuant to Article 13 of Regulation (EU) 2016/679
WHY THIS INFORMATION
The following information concerns the use of personal data and cookies on this website.
As for cookies, this information is provided to the user/browser in accordance with the decision of the Italian Data Protection Authority dated June 10, 2021, “Guidelines on cookies and other tracking tools,” and in compliance with Article 13 of the EU Regulation 2016/679 for the protection of personal data.
In accordance with Regulation (EU) 2016/679 (hereinafter “Regulation”), this page describes the methods of processing the personal data of the user/browser while using the services of the website and the options for contact and acquisition of the user’s personal data, in full compliance with Article 13 of the EU Regulation 2016/679 for the protection of personal data, concerning users accessing the following websites electronically at the following addresses:
This information does not apply to other websites, pages, or online services accessible through hyperlinks that may be published on the websites but refer to resources external to the domains mentioned.
Following the consultation of the above-mentioned websites, data related to identified or identifiable individuals may be processed.
The Data Controller is:
TUSCANY EXPERTS SRL
Via Goro di Gregorio, 6 – 53100 Siena, IT
VAT ID: 01331160521
TYPES OF DATA PROCESSED AND PURPOSES OF PROCESSING
Technical navigation functionalities
The computer systems and software procedures used for the operation of this website acquire, during their normal operation, some personal data, the transmission of which is implicit in the use of Internet communication protocols.
This category of data includes, by way of example but not limited to, IP addresses or domain names of the computers and terminals used by users, URI/URL addresses (Uniform Resource Identifier/Locator) of the requested resources, the time of the request, the method used in submitting the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response from the server (successful, error, etc.), and other parameters related to the user’s operating system and computer environment.
These data, necessary for the use of web services, are also processed for the purpose of:
- obtaining statistical information on the use of services (most visited pages, number of visitors by time of day or daily, geographical areas of origin, etc.);
- checking the proper functioning of the services offered.
Navigation data are not kept for more than the time necessary, and they are deleted immediately after aggregation (except for any need for the investigation of crimes by the judicial authorities).
Data provided by the user
The optional, explicit, and voluntary sending of messages to the contact addresses of the Data Controller, as well as the completion and submission of forms on the website, involve the acquisition of the sender’s contact data, which is necessary to respond, as well as all personal data included in the communications.
Specific information will be published on the pages of the Data Controller’s websites dedicated to the provision of certain services.
Cookies and other tracking systems
The website uses technical and session cookies (non-persistent) in a strictly limited manner to ensure safe and efficient navigation on the site. The storage of session cookies on terminals or browsers is under the control of the user, while on the servers, information related to cookies is recorded in the service logs at the end of HTTP sessions, with storage times strictly necessary for proper operation.
Operation of the banner
The privacy management banner on this website does not allow any profiling cookies to activate until the user has given consent. If the user clicks the “I consent” button, all profiling cookies will be activated. If the user decides to click the “Customize” button, they can customize their choices and decide which profiling cookies to activate. If the user clicks the “Reject” button or the “X” in the upper right of the banner, no profiling cookies will activate.
The user’s choices will be stored for six months through a technical cookie that will be installed on the user’s device to access the website. It is important to explain that if the user changes their device, such as switching from a computer to a mobile phone, the choices will not be available on the new device for technical reasons, and therefore, they will need to be selected on the new device.
The user’s choices can be changed at any time by accessing the privacy control panel from the privacy control icon. The new configuration will last for six months.
What cookies are installed on this site?
The following cookies are installed:
hCaptcha is a spam protection service provided by Intuition Machines Inc.
Personal Data processed: Tracking tool; Usage Data; clicks; responses to questions; keypress events; motion sensor events; touch events; mouse movements; scroll position.
Gravatar is an image display service managed by Automattic Inc., which allows Automattic Inc. to integrate such content within its pages.
Google Fonts (Google Inc.)
Google Fonts is a service for displaying writing styles managed by Google Ireland Limited and is used to integrate such content within its pages.
Personal Data processed: Usage Data; Tracking tool.
LEGAL BASIS FOR PROCESSING
The personal data indicated on this page are processed by the Data Controller in the performance of the services provided by the website and, subsequently, if provided by the website itself, by contractual or legal obligations.
In the case of specific sections for newsletter subscriptions or marketing services, they will be managed by specific notices.
OPTIONAL NATURE OF DATA PROVISION
As provided by the June 10, 2021, decision “Guidelines on cookies and other tracking tools,” the website user is free to authorize or not authorize profiling cookies according to their free choice and will. In some cases, such as the Google reCaptcha cookie, blocking such profiling cookies may prevent the request from being submitted through the data acquisition forms. If necessary, the cookie can be re-enabled from the privacy preferences or, if the decision is made to keep the cookies blocked, the request can be sent via email.
Apart from what is specified for navigation data, the user is free to provide the personal data shown in the request forms on the websites or indicated in contacts with the structures to request the newsletter, informational material, or other communications.
Failure to provide this data may make it impossible to obtain what has been requested.
The Data Controller does not rely on legitimate interest for the processing of personal data, except for the protection of their rights.
DATA PROCESSING METHODS
Personal data is processed using automated tools for the time strictly necessary to achieve the purposes for which they were collected.
Specific security measures are observed to prevent data loss, illegal or incorrect use, and unauthorized access.
The data collected following the consultation of the above-mentioned websites are transmitted to the following subjects designated by the Data Controller, as Data Processors, pursuant to Article 28 of the Regulation. The complete list of Data Processors is available at the Data Controller’s office and can be requested via email.
Personal data is also processed by the staff responsible for processing, who act on the basis of specific instructions provided regarding the purposes and methods of the same processing.
Data will only be transferred within the EU. Some applications such as Google Analytics and reCaptcha may undergo extra-EU transfers.
DATA RETENTION PERIOD
The retention period of the user’s cookie choices is six months as required by the decision.
The retention period of cookies varies depending on their type of ownership. For third-party profiling cookies, specific information can be found directly on the relevant websites.
PERSONAL RIGHTS UNDER ARTICLE 15 OF EU 2016/679
Data subjects have the right to obtain from the Data Controller, in cases provided for, access to their personal data and the rectification or erasure of the same or the restriction of the processing concerning them or to object to processing (Articles 15 and following of the Regulation). Requests should be sent to the Data Controller at the contact details provided at the beginning of this information.
RIGHT TO LODGE A COMPLAINT
Data subjects who believe that the processing of their personal data carried out through this website violates the provisions of the Regulation have the right to lodge a complaint with the Italian Data Protection Authority, as provided for in Article 77 of the Regulation, or to take appropriate legal action (Article 79 of the Regulation).