For us, maintaining your privacy online is considered an obvious right and, as a Data Controller, in the context of the General Data Protection Regulation 679/2016 (GDPR), we are committed to ensuring the confidentiality of your personal data that we collect during our commercial transactions.
The processing and protection of your personal data is subject to the terms of this Privacy Policy, as well as to the provisions of the GDPR and other applicable provisions of national, EU, and international law on the protection of individuals with regard to the processing of personal data, as amended from time to time.
What does the GDPR define as personal data?
Any information that can be used to directly or indirectly identify a natural person, such as their name, identification number, location data, an online identifier, or one or more factors relating to their physical, genetic, psychological, economic, cultural, or social identity.
What data do we collect from you, and for what purpose?
The personal data we collect while you browse our site, and while you use the features it offers, includes:
- Data you provide us directly, when registering or filling in the contact form: full name, email address, and contact address and phone numbers
- Technical data, such as your IP address and the browser you use when visiting our website
By registering on our site, you consent to the general terms of use described herein.
Consent
Where we process your personal data on the basis of consent you have given, we keep a record of that consent, including all the details it contains, as proof it was granted and to make it easier for you to withdraw it, should you request to do so. Consent is given for clear and specific processing purposes, which are communicated to you in advance — you have full knowledge of them at the time you give your consent.
Your rights
As the subject of the data we process, you can access the personal data we have collected about you. You can also request the deletion, correction, or restriction of the processing of that data, or object to its processing — except where we are legally required to retain your data for administrative, legal, or security reasons. You also have the right to withdraw consent you have previously given for the processing of your data.
In brief, your rights over your personal data under the GDPR are as follows:
- Right of access
- Right of rectification
- Right of erasure (“right to be forgotten”)
- Right to restriction of processing
- Right to data portability
- Right to object
- Right to object to automated individual decision-making, including profiling
Submitting requests — exercising your rights
To exercise the rights described above, you may submit a corresponding request. We commit to responding and providing you with the relevant information without delay, and within one month of confirmed receipt of your request.
This period may be extended by a further two months where necessary, taking into account the complexity and number of requests. In that case, you will be informed within one month of confirmed receipt of your request.
If we are unable to respond within the applicable timeframe, you will be informed of the reasons within one month of confirmed receipt of your request.
Requests are reviewed for their scope and frequency per requester, to guard against possible abuse, in line with the rights set out in Art. 12(3) of the GDPR.
How do we process your personal data?
In compliance with the GDPR, we process your personal data fairly and transparently, ensuring the lawfulness, objectivity, and transparency of that processing:
- We collect data for specified, explicit, and legitimate purposes, and do not process it in a manner incompatible with those purposes
- We collect only the data that is necessary and appropriate for the purposes of processing
- We keep data up to date, and take care of its accuracy — including deleting or correcting it where it is inaccurate relative to the purpose of processing
- We retain data only for as long as the purpose of processing requires, after which we ensure its secure destruction
- We protect personal data from loss, misuse, unauthorized access, and data leaks, by applying appropriate technical and organizational safeguards
Legal basis for processing
For all the processing purposes described above, the legal basis is a legal obligation: processing your personal data is necessary for us to comply with an obligation arising from law. Failing to process the necessary data would result in a breach of that legislation, the corresponding penalties, and an inadequate level of service to you.
In particular, the company’s purpose and functions are determined by the relevant legislation and by the individual regulations, provisions, and circulars issued to implement it, and every action we take is carried out in application of that legislation.
Sharing your personal data
Your personal data is treated with full confidentiality and security, and is not shared further, except in cases where sharing is legally required.
How long we keep your data
Your personal data is retained for no longer than is reasonably necessary for the purpose of the individual processing operations carried out on it, based on a number of criteria. Where processing is based on a legal obligation, as described above, the retention period is determined by the requirements of that legislation, the period during which audits may be carried out by the competent authorities, applicable statutes of limitation, and your own legitimate interests.
Where processing is based on consent you have given, whether explicit or implicit, the retention period is determined by your ability to withdraw that consent. As soon as you withdraw your consent, the corresponding personal data is deleted.
Further processing
We reserve the right to amend this Privacy Policy whenever a change to its content requires disclosure. If we need to use your personal data for a new purpose not covered by this Policy, we will notify you of the updated Privacy Policy before processing begins, describing the new use and setting out the relevant purposes and conditions of processing. Where necessary, we will seek your consent for the new processing in advance.
Other terms
The personal data referred to in this Policy is collected directly from you, the data subject.
As the controller of your data, we confirm that we have taken all necessary organizational measures to protect your personal data, and that we maintain a comprehensive security plan in line with the requirements of the GDPR.
The collection and processing of personal data under this Privacy Policy is carried out by lawful means, in a manner that respects privacy, personality, and human dignity.
This Privacy Policy is observed in good faith, in accordance with fair business practice and the free will of the parties, with the aim of good and effective cooperation that protects everyone involved.
If you are unable to exercise the rights the GDPR grants you, or more generally if you have questions, need clarification, or wish to file a complaint, you have the right to contact the Data Protection Authority for support and assistance.