Privacy Policy of the website www.lapiccolascuola.it

Hello,
this privacy policy contains important information on the processing and protection of personal data of site users www.lapiccolascuola.it.

The data collected through the site are processed according to the principles of correctness, lawfulness, transparency, limitation of purposes and conservation, minimization and accuracy, integrity and confidentiality, as required by EU Regulation 679/2016 (GDPR).

Data Controller

The data controller is Elisabetta Caruso, Matera, VAT number 01298460773, email address info@lapiccolascuola.it.

Website

Elisabetta Caruso is the owner and owner of the contents of the site www.lapiccolascuola.it, hereinafter referred to as the “Site”. The Site is hosted on hosting managed by Denali – https://www.denali.eu/ whose servers are located within the European Union. Here you can read the Data Processing https://github.com/denalicloud/legal/blob/master/gdpr-data-protection-agreement.md for the protection of data involved in the service of hosting. 

What personal data is collected and why (type of data, purpose and legal basis)

By browsing this site, personal data may be collected, as better specified below.
Cookies are also installed, as you can read in the cookie policy. 

• Navigation data

The computer systems of the site implicitly collect, during their operation, some personal data (required by Internet communication protocols). These are not associated with specific subjects, except through a complex and complicated system of processing and association with other data held by third parties. This category of personal data includes the IP addresses or domain names of the computers used by users who connect to the site, the browsers and the parameters of the computer system used to connect to the site, navigation data, including the time of the request and response obtained from the server.

Data processed: IP addresses or domain names of the computers used by users who connect to the site, browsers and parameters of the computer system used to connect to the site, navigation data, including the time of the request and response obtained from the server.

Purpose: use of the site, any anonymous statistics on the use of the site.

Legal basis: legitimate interest of the Data Controller.

Non-EU data transfer: no.

• Contact form

When completing the contact form on the Site, the User is required to provide their name and email address, necessary for the Owner to respond to the request received.
Data processed: name, surname, email address, message from the User.
Purpose: response to a request received from the User.
Legal basis: consent, expressed at the bottom of the form.
Non-EU data transfer: no.

• Newsletter

To subscribe to the newsletter, it is necessary to provide your name and e-mail address, which the User enters in the form.
The provision of this data is voluntary, but necessary in order to obtain the sending of the newsletter.
The personal data provided is processed for the sole purpose of sending the newsletter to which the User has asked to subscribe, through the Site.

The data processing relating to the sending of the newsletter takes place through and on the servers used by Mailer Lite, whose servers are located in Dublin (Ireland), which holds the role of data controller pursuant to art. 28 GDPR. You can read the Mailer Lite privacy policy at this link:

https://www.mailerlite.com/gdpr-compliance.

Data processed: name, email address.
Purpose: sending of the newsletter.
Legal basis: consent given by the user.
Non-EU data transfer: no.

• Facebook Pixel

Pixel of Facebook is a tool for tracking the behavior of users of a site, which allows the collection of aggregated and anonymous data on navigation, to insert users into groups consistent with the interests expressed (user targeting). When users log in to Facebook, they will then be shown advertisements consistent with their interests.

Data processed: online identifiers, including cookie identifiers and IP addresses, data relating to navigation on the Site

Purpose: user targeting, advertising

Legal basis: consent

Non-EU data transfer: yes.

• Google Fonts

The Google Fonts tool is used to display styles and fonts within the site https://policies.google.com/privacy?hl=it 

Processed data: site usage data.

Purpose: visualization of styles and fonts.

Legal basis: legitimate interest of the Data Controller

Non-EU data transfer: yes.

• Google Analytics (Anonymized IP)

Analyze traffic data on the site. Here the related policy:

https://support.google.com/analytics/answer/6004245?hl=it&utm_id=ad

Processed data: site usage data.

Purpose: Analysis of traffic data on the Site.

Legal basis: consent.

Non-EU data transfer: yes.

• MATOMO

Analyze traffic data on the site. Here the related policy: https://matomo.org/matomo-cloud-privacy-policy/ and here: https://matomo.org/matomo-cloud-dpa/ the data processing agreement.

Processed data: site usage data.

Purpose: Analysis of traffic data on the Site.

Legal basis: consent.

Non-EU data transfer: no.

• Google reCaptcha spam filter V3

Protects the site from spam. Here the related policy: https://policies.google.com/technologies/cookies?hl=it 

Processed data: site traffic data.

Purpose: Site protection from spam.

Legal basis: legitimate interest of the Data Controller.

Non-EU data transfer: yes.

• Links to social profiles

On the site there are links to access the social profiles connected to the site. These are links that lead to pages external to the site, which involve data processing directly by the related social networks, without the involvement of the site.

Methods of data processing and data storing

Data processing is carried out in an automated form, in compliance with the provisions of art. 32 of the GDPR 2016/679 regarding security measures; that is, the data is processed and managed in such a way as to avoid or in any case limit the risks of loss, destruction, theft and in such a way as to allow their recovery, should one of the cases described occur.

Based on the provisions of art. 4 of the GDPR 2016/679, the data provided can be: collected, recorded, organised, stored, consulted, processed, modified, selected, extracted, compared, used, interconnected, blocked, communicated, canceled and destroyed. Appropriate systems for data protection have been adopted.

Data retention period

The data is kept for the technical times necessary for the indicated uses.

In any case, the User has the right to request the destruction or cancellation of the data provided.

The data may also be kept for a longer period, to fulfill fiscal obligations or the order of an Authority.

At the end of the period necessary for conservation, the data will be deleted and no longer recoverable. 

Communication  of data

Personal data will never be disclosed and will not be communicated without the explicit consent of the User.

Data access

The data could be made accessible due to a legal obligation, which may involve the transfer of data to public bodies, judicial authorities, insurance bodies.

The data could be visible to a consultant/IT technician who has to operate for the repair/maintenance of the IT systems and the updating of the Site.

For any information you can write by mail to the address info@lapiccolascuola.it.

Processing of personal data

The data could be transferred to third countries not belonging to the European Union, based on what is better specified above, with reference to each function.

Special categories of personal data

The Site does not collect or process data that can be classified as “particular categories of personal data”, pursuant to articles 9 and 10 of the GDPR 2016/679.

Rights of the interested party

At any time, the user may exercise, pursuant to articles 15 to 22 of the GDPR 2016/679, the right to:

a) request confirmation of the existence or not of personal data concerning him;

b) obtain information about the purposes of the processing, the categories of personal data, the recipients or categories of recipients to whom the personal data have been or will be communicated and, when possible, the retention period;

c) obtain the rectification and cancellation of data;

d) obtain the limitation of the treatment;

e) obtain data portability, i.e. receive them from a data controller, in a structured format, commonly used and readable by an automatic device, and transmit them to another data controller without impediments;

f) oppose the treatment at any time and also in the case of treatment for direct marketing purposes;

g) oppose an automated decision-making process relating to natural persons, including profiling;

h) ask the data controller to access personal data and correct or cancel them or limit their processing or to oppose their processing, in addition to the right to data portability;

i) withdraw the consent at any time without prejudice to the lawfulness of the treatment based on the consent given before the revocation;

j) propose a complaint to a Supervisory Authority.

Methods of exercising rights

To exercise the aforementioned rights or to receive clarifications or other information regarding the processing of personal data, you can write to the e-mail address info@lapiccolascuola.it. An answer will be given within 30 days.

If you intend to lodge a complaint with the Guarantor Authority, you can visit the site https://www.garanteprivacy.it/home/diritti/come-agire-per-tutelare-i-tuoi-dati-personali, per ogni informazione.

Policy revised in January 2023.