PRIVACY POLICY

Information pursuant to art. 13 of Regulation (EU) 2016/679 on the protection of personal data (GDPR)

This Privacy Policy is provided to inform you of the processing of your personal data.

Identity and contact details of the Data Controller

The Data Controller is Fabio Vaccaro, with headquarters in Rapallo (GE), taxifabiorapallo@gmail.com (VAT no. 01843870997);

Purpose and legal basis of processing
The User's Personal Data is collected to allow the Owner to provide its Services, as well as for the following purposes: Statistics, User database management, Remarketing and behavioral targeting, Heat mapping and session recording, Interaction with social networks and external platforms, Contacting the User, Interaction with data collection platforms and other third parties, interaction with live chat platforms, content commenting, registration and authentication, and contact management and sending messages.
Interaction with social networks and external platforms
This type of service allows interaction with social networks or other external platforms directly from the pages of this site.
The interactions and information acquired from this site are in any case subject to the User's privacy settings for each social network.
Data Collected:
– Browsing Data:
The computer systems and software procedures used to operate this website acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols. For example, IP addresses or domain names of computers used by users, the numerical code indicating the status of the server response (successful, error, etc.), and other parameters relating to the user's operating system and IT environment. This data is used solely to obtain anonymous statistical information on site usage and to verify its proper functioning, and is deleted immediately after processing. The data may be used to ascertain liability in the event of hypothetical cybercrimes against the site.
– Data provided voluntarily by the user
The optional, explicit, and voluntary sending of emails or messages to the addresses indicated on this site and to messaging apps entails the subsequent acquisition of the sender's address and/or telephone number, which is necessary to respond to requests, as well as any other personal data the user provides in the message.
The email address will be processed for subscription to the newsletter, subject to the user's consent.
Specific summary information will be progressively reported or displayed on the site pages dedicated to particular services upon request.
By registering or authenticating, the User allows the Application to identify them and grant them access to dedicated services.
Depending on the information provided below, registration and authentication services may be provided with the assistance of third parties. If this occurs, this application may access some Data stored by the third-party service used for registration or identification.
Facebook Authentication (Facebook, Inc.)
Facebook Authentication is a registration and authentication service provided by Facebook, Inc. and connected to the Facebook social network.
Personal Data collected: various types of Data as specified in the service's privacy policy.
Place of processing: United States – Privacy Policy. Privacy Shield participant.
The User assumes responsibility for the Personal Data of third parties obtained, published, or shared through this site and guarantees that he or she has the right to communicate or disseminate such data, thereby releasing the Data Controller from any liability to third parties.
In any case, it is always possible to ask the Data Controller to clarify the specific legal basis for each processing operation, and in particular to specify whether the processing is based on law, provided for by a contract, or necessary to enter into a contract.
The Data is processed at the Data Controller's operating offices and in any other place where the parties involved in the processing are located. For further information, please contact the Data Controller.
Recipients of Personal Data
Within the scope of the aforementioned purposes, your data may be disclosed to companies and professional operators that provide electronic data processing and software and IT consulting services, as well as management of information services related to the above;
Transfer of data to third countries
User data, furthermore, they may be transferred to the third parties indicated in Article 4 of this policy established in countries outside the European Union, always in accordance with the principles set forth in Articles 45 and 46 of the GDPR regarding the existence of an adequacy decision by the European Commission or adequate safeguards. Data retention period Personal data will be retained for the period of time strictly necessary to achieve the specific purposes of the processing and, specifically: For the purposes indicated in Article 2, for the time necessary to fulfill the request and, in any case, no longer than 10 years from the time your data is collected for the fulfillment of regulatory obligations and, in any case, no longer than the statutory limitation periods for rights; For technical purposes such as IP address acquisition, data is retained for 30 days. Data for analytics purposes is retained for 24 months.
When processing is based on the User's consent, the Data Controller may retain Personal Data for a longer period until such consent is revoked. Furthermore, the Data Controller may be required to retain Personal Data for a longer period in compliance with a legal obligation or by order of an authority.
Rights of the Data Subject

The user may, at any time, exercise the following rights:
Access to personal data: obtain confirmation as to whether or not personal data concerning him or her are being processed and, where that is the case, access to the following information: the purposes, categories of data, recipients, retention period, the right to lodge a complaint with a supervisory authority, the right to request rectification or erasure, or restriction of processing, or to object to processing, as well as the existence of an automated decision-making process;
Request for rectification or erasure of personal data or restriction of processing concerning him or her; "Restriction" means the marking of stored data with the aim of limiting its processing in the future;
Objection to processing: to object, on grounds relating to your particular situation, to the processing of data for the performance of a task carried out in the public interest or for the pursuit of a legitimate interest of the Data Controller;
Data portability: in the case of automated processing carried out on the basis of consent or in performance of a contract, to receive the data concerning you in a structured, commonly used, and machine-readable format; specifically, the data will be provided to you by the Data Controller in .xml or similar format;
Withdrawal of consent to processing for marketing purposes, whether direct or indirect, market research, and profiling; the exercise of this right does not in any way affect the lawfulness of the processing carried out before the withdrawal;
Lodge a complaint pursuant to art. 77 of the GDPR to the competent supervisory authority based on your habitual residence, place of work, or the place where your rights were infringed. For Italy, the competent authority is the Italian Data Protection Authority, which can be contacted using the contact details provided on the website garanteprivacy.it.
The aforementioned rights may be exercised by sending a specific request to the Data Controller using the contact channels indicated in Article 1 of this Privacy Policy.
Requests relating to the exercise of your rights will be processed without undue delay and, in any case, within one month of the request; only in particularly complex cases and in the number of requests may this deadline be extended by an additional two (2) months.
At the end of the retention period, your Personal Data will be deleted. Therefore, upon expiration of this period, the right to access, erasure, rectification, and the right to data portability can no longer be exercised.
Communication and provision of data

The provision of data by the user is mandatory as it is necessary to provide the requested service. Therefore, any refusal by the user to provide the data may result in the failure to provide the service, to the extent that such data is necessary for such purposes.
Updates

The Data Controller reserves the right to make changes to this Privacy Policy at any time by giving notice to users on this page.
Therefore, please consult this page, referring to the date of the last modification indicated at the bottom.
If you do not accept the changes made to this Privacy Policy, you must cease using this site and may request the Data Controller to remove the relevant content. Unless otherwise specified, the previous "Privacy Policy" will continue to apply to personal data collected up to that point.