PRIVACY POLICY

 

This page describes how the site is managed with regard to the processing of personal data of users who visit it.

This is a privacy notice provided pursuant to Article 13 of Legislative Decree No. 196/2003 (Personal Data Protection Code) and EU Regulation 2016/679 (General Data Protection Regulation) for those who interact with web services for the protection of personal data.

This notice applies solely to the website www.giusilorelli.com and not to any other websites that users may visit through links on this site.

This notice also draws on Recommendation No. 2/2001, adopted on 17 May 2001 by the European data protection authorities meeting within the Working Party established under Article 29 of Directive 95/46/EC, to identify minimum requirements for the online collection of personal data — in particular, the manner, timing, and nature of the information that data controllers must provide to users when they connect to web pages, regardless of the purpose of the connection.

DATA CONTROLLER

The entity that will process your Personal Data for the purposes described in this Privacy Notice, and which therefore acts as Data Controller within the meaning of Article 4(7) of the Regulation — “the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data” — is:

Giusi Lorelli VAT No. 01951790995

PLACE OF DATA PROCESSING

Processing operations connected to the web services of this site take place at the photography studio of Giusi Lorelli, in Genova Sampierdarena.

TYPES OF DATA PROCESSED

Browsing data

The computer systems and software procedures used to operate this website collect, in the course of their normal operation, certain personal data whose transmission is implicit in the use of Internet communication protocols. This information is not collected in order to be associated with identified individuals, but by its very nature could, through processing and association with data held by third parties, allow users to be identified. This category includes IP addresses or domain names of the computers used by users connecting to the site, the URI (Uniform Resource Identifier) addresses of requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the server’s response (success, error, etc.) and other parameters relating to the user’s operating system and computing environment. These data are used solely to obtain anonymous statistical information about the use of the site and to monitor its correct functioning, and are deleted immediately after processing. The data may be used to establish liability in the event of hypothetical computer crimes against the site; absent such circumstances, web contact data are not retained for more than seven days.

Data voluntarily provided by the user

The optional, explicit, and voluntary submission of emails to the addresses listed on this site, or via contact form, results in the acquisition of the sender’s address — necessary to respond to requests — as well as any other personal data included in the message. Specific summary notices will be progressively included or displayed on the pages of the site set up for particular services upon request.

Cookies

For information regarding cookies, please refer to the page www.giusilorelli.com/cookie-policy/

OPTIONAL NATURE OF DATA PROVISION

Apart from what is specified above regarding browsing data, users are free to provide the personal data included in the contact request forms on the site, or when requesting the sending of newsletters, informational material, or other communications. Failure to provide such data may make it impossible to fulfil the request. For completeness, it should be noted that in certain cases — not part of the ordinary management of this site — the relevant Authority may request information pursuant to Article 157 of the Personal Data Protection Code, for the purpose of supervising the processing of personal data. In such cases, a response is mandatory under penalty of administrative sanction.

METHODS OF PROCESSING

Personal data are processed by automated means for the time strictly necessary to achieve the purposes for which they were collected. Specific security measures are in place to prevent data loss, unlawful or improper use, and unauthorised access.

RIGHTS OF DATA SUBJECTS

Individuals to whom personal data relate have the right at any time to obtain confirmation of whether or not such data exist, to learn their content and origin, verify their accuracy, and request their integration, updating, or rectification (Article 7 of the Personal Data Protection Code). Under the same article, individuals have the right to request the deletion, anonymisation, or blocking of data processed in violation of the law, and to object at any time, on legitimate grounds, to their processing.

Requests should be addressed to:

– by email, to: info [at] giusilorelli.com