This section describes the methods and management of personal data that the user chooses to provide by submitting the contact form on the website www.giorgetti.it, a website owned by Giorgetti Domenico and Fabrizio.
This information is provided to users in relation to the rules set forth in EU Regulation 2016/679, and specifically Articles 12-23 of the same Regulation.
Data Controller
Pursuant to Articles 12 and 23 of Regulation (EU) 2016/679 (hereinafter “GDPR”), Giorgetti Domenico and Fabrizio (hereinafter “GDF”), with registered office in Via Curio Fornaci, 30 – 05100 TERNI, VAT no. 00469630552 – info@giorgetti.it, in its capacity as “Data Controller,” informs you that your personal data, collected on the GDF website (www.giorgetti.it) for the purpose of registration in the contact form and on all pages therein, will be processed in full compliance with applicable legislation, guaranteeing your recognized rights and fundamental freedoms.
Data Collected with the Contact Form
By filling out the contact form, the user:
- Communicates their first name and last name;
- Communicates the email address to which they wish to be contacted;
- Writes a message to be sent to info@giorgetti.it.
Storage Period
The information provided by the user when filling out the contact form (name, email address, message text) will be processed and stored for the time strictly necessary to achieve the purpose for which the data was collected, i.e., for sending a response to the submitted query or, at most, for a period of 5 years from the moment of collection.
Origin, Legal Basis, and Purpose of Processing
The processing of your personal data is carried out by GDF to fulfill your request for registration to the contact form. The first name, last name, email address indicated by the user when filling out the contact form, and the information entered by the user in the body of the message are used exclusively to respond to the user’s request.
Recipients of Personal Data
Personal data collected by GDF via www.giorgetti.it may be processed by subjects involved in the organization of the website (such as administrative, commercial, marketing, legal personnel, system administrators) or by external personnel (such as third-party technical service providers, postal couriers, hosting providers, IT companies, communication agencies) appointed from time to time, if necessary, as Data Processors pursuant to Article 4, no. 8) GDPR, which defines “data processor” as a natural or legal person, public authority, agency, or other body which processes personal data on behalf of the controller.
In any case, each user can always request from the Data Controller an updated list of Data Processors in the manner set out in the section relating to user rights (i.e., by sending an email to info@giorgetti.it).
With the exception of the cases just indicated, the user’s personal data are not communicated to third parties, unless:
- The user has given their express consent to the communication;
- The communication is necessary to provide the service or product requested by the user;
- The communication is necessary in relation to third parties collaborating with GDF to provide the service or product requested by the user (in this case, only the data essential for the provision of the service or supply of the product will be communicated, and these third parties are prohibited from using such data for other purposes);
- It is required by law.
Right of Access
The data subject has the right to obtain from the Data Controller confirmation as to whether or not personal data concerning them are being processed, and, where that is the case, access to the personal data and the following information:
- The purposes of the processing;
- The categories of personal data concerned;
- The recipients or categories of recipient to whom the personal data have been or will be disclosed, in particular recipients in third countries or international organizations;
- Where possible, the envisaged period for which the personal data will be stored, or, if not possible, the criteria used to determine that period;
- The existence of the right to request from the controller rectification or erasure of personal data or restriction of processing of personal data concerning the data subject or to object to such processing;
- The right to lodge a complaint with a supervisory authority;
- Where the personal data are not collected from the data subject, any available information as to their source.
Where personal data are transferred to a third country or to an international organization, the data subject shall have the right to be informed of the appropriate safeguards pursuant to Article 46 relating to the transfer.
GDF specifies that:
- It does not communicate users’ personal data to international organizations or third countries;
- The data subject has the possibility at any time to request the rectification or erasure of their personal data according to the methods indicated in the relevant section (i.e., by sending an email to info@giorgetti.it);
- Personal data are not collected through fully automated procedures, but the user’s consent is always necessary when they enter their data in the forms provided on the website.
Right to Erasure and Right to Rectification
The data subject has the right to obtain from the Data Controller:
- Rectification of data, if incorrect;
- Erasure of their personal data.
To exercise this right, you can send a written request to info@giorgetti.it. The Data Controller will proceed, without delay and in full compliance with Article 17 of the European Regulation, with the requested erasure.
Right to Restriction of Processing
The data subject has the right to obtain from the Data Controller restriction of processing where one of the following applies:
- The accuracy of the personal data is contested by the data subject, for a period enabling the Data Controller to verify the accuracy of the personal data;
- The processing is unlawful and the data subject opposes the erasure of the personal data and requests instead the restriction of their use;
- The data subject has objected to processing pursuant to Article 21(1) GDPR pending the verification whether the legitimate grounds of the Data Controller override those of the data subject;
- The personal data are no longer needed for the purposes of the processing by the Controller, but are required by the data subject for the establishment, exercise, or defense of legal claims.
Right to Object to Processing
The data subject may object to the processing:
- On grounds relating to their particular situation, pursuant to Article 21(1) GDPR, and the controller shall no longer process the personal data unless the controller demonstrates compelling legitimate grounds for the processing which override the interests, rights, and freedoms of the data subject or for the establishment, exercise, or defense of legal claims;
- At any time, where personal data are processed for direct marketing purposes.
Right to Data Portability
Where the processing is based on consent or on a contract and the processing is carried out by automated means, the data subject shall have the right to receive the personal data concerning them, which they have provided to a controller, in a structured, commonly used, and machine-readable format and have the right to transmit those data to another controller without hindrance. Where technically feasible, the data subject shall have the right to have the personal data transmitted directly from one controller to another. The exercise of this right, in any case, must not adversely affect the rights and freedoms of others.
GDF specifies that: The processing of personal data occurs exclusively after the user’s consent has been given, solely for the purposes explicitly stated at the time of data collection. If the data subject wishes to exercise the right to restriction of processing, they may send a written request to info@giorgetti.it. The data subject also has the right to withdraw their consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal.
Right to Lodge a Complaint
The data subject has the right to lodge a complaint with a supervisory authority.
