Privacy Policy

Privacy disclaimer

The protection of your privacy is one of our main objectives.

Agriturismo l'Aquila, hereinafter the COMPANY, with tax domicile in via Bellini, 36 - Arbus (SU), CAP 09031, is constantly committed to protecting the online privacy of its users. This document will allow you to know our privacy policy to understand how your personal information is managed when you use our services and to allow you, where appropriate, to give consent to the processing of your personal data expressed and aware in the sections of the site where you are asked to provide personal data. We remind you that in the various sections of the COMPANY's websites (hereinafter " Site ") where we collect your personal data, specific information is published pursuant to art. 13 of EU Regulation 2016/679 (hereinafter: " Regulation") for your necessary acknowledgment before providing the requested data. The information and data you provide or otherwise acquired as part of the registration for the various services offered by the COMPANY, (such as: condominium administration, hereinafter, collectively, " Services "), will be processed in compliance with the provisions of the Regulation and the confidentiality obligations that inspire the COMPANY's activity. According to the provisions of the Regulation, the treatments carried out by the COMPANY will be based on the principles of lawfulness, correctness, transparency, limitation of purposes and conservation, data minimization, accuracy , integrity and confidentiality.INDEX
1.

Data
Controller
2. Personal data being processed
a. Navigation data
b. Data processed in the context of interaction with social media
c. Data provided voluntarily by the interested party
d. Data for registration of domain names
e. Traffic data
f. Cookies
3. Purpose of the processing
4. Legal basis and mandatory or optional nature of the processing
5. Recipients of personal data
6. Transfers of personal data
7. Retention of personal data
8. Rights of the interested party
9. Modifications

1. Data controller

The owner of the treatments carried out through the site is the owner. The holder's facility is equipped with a Microsoft Defender security suite for the protection of digital data stored on external hard drives at the headquarters and on the COMPANY's servers equipped with a Windows operating system. The Data Controller is available for any information regarding the processing of personal data of the COMPANY. It is possible to contact the Data Controller by writing to: [email protected].

2. Personal data being processed

By processing of personal data we mean any operation or set of operations, performed with or without the aid of automated processes and applied to personal data or sets of personal data, such as the collection, registration, organization, structuring, conservation, adaptation or modification, extraction, consultation, use, communication by transmission, dissemination or any other form of making available, comparison or interconnection, limitation, cancellation or destruction.
We inform you that the personal data being processed will consist - also depending on your decisions on how to use the Services - by an identifier such as the name, email address, an identification number, location data, an online identifier, the purchases made, and other data suitable for making you identified or identifiable, depending on the type of Services requested (hereinafter only "Personal Data" ) . in particular, the Personal Data processed through the Site are as follows:

to. Navigation data

The computer systems and software procedures used to operate the Site acquire, during their normal operation, some Personal Data whose transmission is implicit in the use of Internet communication protocols. This is information that is not collected to be associated with identified interested parties, but which by their very nature could, through processing and association with data held by third parties, allow users to be identified. This category of data includes the IP addresses or domain names of the computers used by users who connect to the Site, the addresses in URI (Uniform Resource Identifier) notation of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters relating to the operating system and the user's IT environment. These data are used for the sole purpose of obtaining anonymous statistical information on the use of the Site and of our customers' sites and to check their correct functioning, to identify anomalies and/or abuses, and are kept until the end of the relationship with the customer who owns the site in our Google Analytics and Facebook Pixel Accounts in charge of the analysis. The data could be used to ascertain responsibility in the event of hypothetical computer crimes against the site or third parties: except for this eventuality, the data on web contacts do not currently persist for more than fourteen days,

b. Data processed in the context of interaction with social media

In addition to filling out the appropriate registration form, on some of our customers' sites you can register for the Services, if you have a Facebook profile, also by simply clicking on the "Login with Facebook" button. In this case, Facebook will automatically send the COMPANY some of its Personal Data, specified in the appropriate "pop-up" window that is displayed at the time of the request, and there will be no need for it to fill out other forms. If, on the other hand, you are already a registered user on the site, and also have a Facebook profile, you can choose to associate your customer account with your Facebook account by clicking on "Login with Facebook" and then on "Associate account": in this way, your identification code will be associated with your Facebook user code,
In the same way, the COMPANY gives you the possibility to associate your customer account also with your Google, Twitter, Pinterest, Tumblr, Reddit, Vimeo, Youtube and Linkedin accounts. Also in these cases, the sites of the social networks concerned will send some of your Personal Data to the COMPANY, specified in the appropriate "pop-up" window which is displayed at the time of the request.

The data relating to registration/access via social networks are processed through the service offered by OneAll whose privacy policy can be read here .

c. Data provided voluntarily by the interested party

In the use of particular Services (for example a Direct Email Marketing Advertising Campaign, which allow you to request the sending of a specific promotion addressed to third parties or through the contact forms of the Customer Site which store the messages sent according to the treatment methods and for a life cycle indicated by the individual Customer) the Personal Data of third parties sent by you to the Service manager may be processed. With respect to these hypotheses, you act as an independent data controller, assuming all legal obligations and responsibilities. In this sense, you grant the widest indemnity on this point with respect to any objection, claim, request for compensation for damage from treatment, etc. that should reach the COMPANY from third parties whose Personal Data have been processed through their use of the Services (including their own Website) in violation of the applicable personal data protection regulations. In any case, if you provide or otherwise process Personal Data of third parties in the use of the Service, you guarantee from now on - assuming all connected responsibility - that this particular hypothesis of treatment is based on an appropriate legal basis (for example, the consent of the interested party) pursuant to art. 6 of the Regulation which legitimizes the processing of the information in question. if you provide or otherwise process Personal Data of third parties in the use of the Service, you guarantee from now on - assuming all connected responsibility - that this particular hypothesis of treatment is based on an appropriate legal basis (for example, the consent of the interested party) pursuant to art. 6 of the Regulation which legitimizes the processing of the information in question. if you provide or otherwise process Personal Data of third parties in the use of the Service, you guarantee from now on - assuming all connected responsibility - that this particular hypothesis of treatment is based on an appropriate legal basis (for example, the consent of the interested party) pursuant to art. 6 of the Regulation which legitimizes the processing of the information in question.

d. Domain name registration data

As regards the processing of Personal Data carried out as part of the domain name management service, necessary for putting a website online, it should be noted that the COMPANY will only implement the processing strictly necessary to provide the service, except for further processing on the basis of an appropriate legal basis pursuant to art. 6 of the Regulation (for example your consent). The data collected by the COMPANY as part of the domain name registration request are only those strictly necessary for the provision of the service and are required for the stipulation of the contract between it and its customer. Providing such data is in itself optional, however in the absence of such provision, the COMPANY will not be able to provide the requested service. It should be noted that the Personal Data of the domain name holder, for purposes strictly related to the provision of the service, may be disclosed to third parties. In particular, in order to manage domain names, the Internet Corporation for Assigned Names and Numbers (hereinafter: "Icann") requires the supplier of the COMPANY, OVH, hereinafter SUPPLIER, as registrar, to deposit in escrow with an accredited Escrow Agent - copy of the data necessary for the management of a domain name under the authority of Icann itself. The COMPANY must therefore communicate this data to the SUPPLIER who uses the company designated by ICANN for this service. Furthermore, the data may be communicated to the national and foreign registration Authorities to which the COMPANY and its SUPPLIER are required to transmit the technical and administrative documentation required by sector legislation as well as to any other subjects accredited for the registration of domain names with reference to extensions for which the SUPPLIER does not have accreditation. This sharing of data is necessary for its use of the service, therefore, according to the privacy legislation in force, it is justified pursuant to art. 6(1)(b)(c) of the Regulation. It follows that, at the time of subscribing to the service, you accept that some of your Personal Data are communicated to the subjects listed above. If instead, in requesting the registration of domain names, provides the COMPANY with Personal Data of other third parties involved in the processing, acts as independent data controller, assuming all legal obligations and responsibilities. In this sense, you grant the widest indemnity on this point with respect to any objection, claim, request for compensation for damage from treatment, etc. that should reach the COMPANY from third parties whose Personal Data have been processed through its use of the Services in violation of the applicable Personal Data protection regulations. In any case, if you provide or otherwise process Personal Data of third parties in the use of the Service, you guarantee from now on - assuming all connected responsibility - that this particular hypothesis of treatment is based on an appropriate legal basis pursuant to art. 6 of the Regulation which legitimizes the processing of the information in question. Furthermore, for the improvement of the service, the data will normally be published, and therefore disseminated, on the public WHOIS database which contains the Personal Data of the assignees of domain names. With reference to this processing, we specify that ICANN acts as an independent data controller and the COMPANY has no control over the processing carried out by this subject. ICANN policies when requesting the assignment of domain names, you can alternatively choose the "Private WHOIS" option, if available, however you cannot prevent the domain name from being published in the WHOIS databases of the relevant Authorities. ICANN policies are under review and any developments in this regard will be duly notified. Furthermore, the domain name could be published on the WHOIS databases of the relevant Authorities, which in turn are changing their data publication policies. It should be noted that these subjects act as independent data controllers and that the COMPANY, which in order to provide the domain name management service, must necessarily communicate the data of the registrants to these subjects (under penalty of being unable to provide the service), has no control over the use that these subjects make of the aforementioned data.
The COMPANY, as far as it is responsible, will not publish your personal data in the context of the supply of domain names.

And. Traffic data

As part of the e-mail service, the COMPANY processes some data for the purpose of transmitting communications on the electronic communication network. These data are those listed in Legislative Decree 30 May 2008, n. 109, and in particular they are:
- IP address used and e-mail address and any further identifier of the sender;
- IP address and fully qualified domain name of the mail exchanger host, in the case of SMTP technology or of any type of host relating to a different technology used for communication transmission;
- e-mail address, and any additional identifier, of the recipient of the communication;
- IP address and fully qualified domain name of the mail exchanger host (in the case of SMTP technology), or of any type of host (relative to a different technology used), which provided for the delivery of the message;
- IP address used for receiving or consulting e-mail messages by the recipient regardless of the technology or protocol used;
- date and time (GMT) of connection and disconnection of the user of the Internet e-mail service and IP address used, regardless of the technology and protocol used;
- the internet service used.

These data are processed and stored by the COMPANY to provide the service and by legal obligation, in particular, for the purpose of ascertaining and prosecuting crimes - and with stringent security measures that make them accessible only to specifically authorized personnel in writing, who access them only following a request from the judicial authority accompanied by a reasoned decree from a public prosecutor and in any case with particularly sophisticated authentication techniques required by law. By law, the data is kept by the COMPANY for the purpose of ascertaining and prosecuting crimes for six years from their generation. The data are also processed by the COMPANY for ordinary company processing related to the provision of the service (e.g.: for documentation purposes in the event of an invoice dispute or payment claim, for fraud detection, to perform analyzes on behalf of customers), by virtue of the provisions of the law. In this case, the data are stored, with stringent security measures applied in accordance with the law, for six months from their generation, and subsequently cancelled.

Cookies

Definitions, characteristics and application of the legislation.

Cookies are small text files that the sites visited by the user send and record on his computer or mobile device, to then be re-transmitted to the same sites on the next visit. Precisely thanks to cookies, a site remembers the user's actions and preferences (such as, for example, login data, the chosen language, font size, other display settings, etc.) so that they do not have to be indicated again when the user returns to visit said site or navigates from one page to another. Therefore, cookies are used to perform computer authentication, session monitoring and memorization of information regarding the activities of users who access a site and may also contain a unique identification code that allows user navigation within the site to be tracked for statistical or advertising purposes. While browsing a site, the user can also receive cookies from sites or web servers other than the one he is visiting on his computer or mobile device (so-called "third-party" cookies). Some operations could not be performed without the use of cookies, which in some cases are therefore technically necessary for the site to function. the user can also receive on his computer or mobile device cookies from sites or web servers other than the one he is visiting (so-called "third-party" cookies). Some operations could not be performed without the use of cookies, which in some cases are therefore technically necessary for the site to function. the user can also receive on his computer or mobile device cookies from sites or web servers other than the one he is visiting (so-called "third-party" cookies). Some operations could not be performed without the use of cookies, which in some cases are therefore technically necessary for the site to function.
There are various types of cookies, depending on their characteristics and functions, and these can remain on the user's computer or mobile device for different periods of time: so-called session cookies, which are automatically canceled when the browser is closed; so-called persistent cookies, which remain on the user's device until a pre-established deadline.
According to the legislation in force in Italy, the express consent of the user is not always required for the use of cookies. In particular, "technical cookies", i.e. those used for the sole purpose of transmitting a communication over an electronic communications network, or to the extent strictly necessary to provide a service explicitly requested by the user, do not require this consent. In other words, these are cookies that are essential for the site to function or necessary to perform activities requested by the user.
Among the technical cookies, which do not require express consent for their use, the Italian Guarantor for the protection of personal data (see Provision Identification of simplified procedures for the information and the acquisition of consent for the use of cookies of 8 May 2014, hereinafter only "Provision") also includes:

"analytics cookies" when used directly by the site manager to collect information, in aggregate form, on the number of users and how they visit the site,
navigation or session cookies (to authenticate),
functionality cookies, which allow the user to navigate according to a series of selected criteria (for example, the language, the products selected for purchase) in order to improve the service rendered to the same.

Conversely, for "profiling cookies", i.e. those aimed at creating user profiles and used to send advertising messages in line with the preferences expressed by the user while surfing the net, the user's prior consent is required.

Types of cookies used by the Site and possibility of (de-)selection.

The Site uses the following cookies which can be de-selected, except for third-party cookies, for which you must refer directly to the relative selection and de-selection methods of the respective cookies, indicated by means of links:

Technical-navigation or session cookies and strictly necessary for the functioning of the Site or to allow the user to take advantage of the contents and services requested by them.
Analytics cookies, which allow you to understand how the site is used by users. These cookies do not collect information on the identity of the user, nor any personal data. The information is treated in aggregate and anonymous form.
Functionality cookies, i.e. used to activate specific features of the Site and a series of selected criteria (for example, the language, the products selected for purchase) in order to improve the service rendered.
Profiling cookies used to send advertising messages in line with the preferences expressed by the user while surfing the net.

ATTENTION : by disabling technical and/or functionality cookies, the Site may not be accessible or some services or certain functions of the Site may be unavailable or not work properly and you may be forced to modify or manually enter some information or preferences each time you visit the Site.

Third-party cookies, i.e. cookies from sites or web servers other than the COMPANY's, used for the purposes of these third parties, including profiling cookies. It should be noted that these third parties, listed below with the relative links to the privacy policies, are independent data controllers of the data collected through the cookies served by them; therefore, you must refer to their personal data processing policies, information and consent forms (selection and de-selection of the respective cookies), as specified in the aforementioned Provision. For the sake of completeness, it should also be noted that the COMPANY does its utmost to be able to track cookies on its Site. These are updated on a regular basis in the following table, where we provide transparency on the cookies sent directly from the COMPANY website and on their purposes. As regards the third parties that send cookies through our Site, we provide below the links to the respective privacy policies: as already specified, we delegate to these third parties the responsibility of providing the information and collecting the consent of the users, as required by the Provision. Said responsibility refers not only to cookies that third parties send directly, but also to any additional cookies that are sent through our site by virtue of the use of services that the third parties themselves use. In fact, compared to these cookies, sent by service providers of the aforementioned third parties,

Below are the links to information on third-party cookies:

In detail, the cookies sent by the COMPANY through its website are indicated in our Cookie policy .

Cookie settings

Below it is possible for you to make a choice with reference to the receipt of profiling cookies. Failure to authorize the indicated cookies (profiling) will not affect the functioning of the Site. You can block or delete (in whole or in part) the technical and functionality cookies through the specific functions of your navigation browser. However, we inform you that not authorizing technical cookies could make it impossible to use the Site, view its contents and use the relative services. Disabling functionality cookies could cause some services or certain functions of the Site to be unavailable or not work properly and you could be forced to modify or manually enter some information or preferences each time you visit the Site.

The choices made with reference to the Site's cookies will in turn be recorded in a specific cookie. This cookie may, however, in some circumstances not work properly: in such cases, we advise you to delete unwanted cookies and to inhibit their use also through the functions of your navigation browsers.

Your cookie preferences will need to be reset if you use different devices or browsers to access the Site.

Profiling cookies

They are sent in order to send advertising messages in line with the preferences expressed by the user in the context of surfing the net.

How to view and modify cookies through your navigation program (so-called browser)

You can authorize, block or delete (in whole or in part) cookies through the specific functions of your navigation program (so-called browser).
For more information on how to set preferences on the use of cookies through your browser, you can consult the relative instructions:

3. Purpose of the treatment

The treatment that we intend to carry out, with your specific consent where necessary, has the following purposes:
a. Allow the provision of the Services requested by you and the subsequent and autonomous management of your control panel, which you will access by registering and creating your user profile when providing the Services, including the collection, storage and processing of data for the purpose of establishing and subsequent operational, technical and administrative management of the relationship connected to the provision of the Services and making communications relating to the performance of the established relationship;
b. allow navigation and consultation of the COMPANY's websites;
c. respond to requests for assistance or information, which we will receive via e-mail, telephone or chat through the "Contact Us" page of our Site, or via the appropriate form accessible from the "Contact Us" page of the Site. With particular reference to responses to requests for assistance that are received by the COMPANY by telephone, we inform you that calls can be recorded so that the COMPANY can demonstrate that it has correctly processed the requests.
d. fulfill legal, accounting and tax obligations;
And. carry out direct marketing via e-mail for services similar to those subscribed to by you, unless you have opposed this treatment initially or on the occasion of subsequent communications, for the pursuit of the COMPANY's legitimate interest in promoting products or services in which you may reasonably be interested;
f. develop studies, research, market statistics; send you advertising material, information, commercial information or surveys to improve the service ("customer satisfaction") via e-mail or text message, and/or through the use of the telephone with operator and/or through the official pages of the COMPANY on social networks;
g. only with reference to certain services, the data may be processed for the purpose of communication to third parties for their marketing purposes of third parties, i.e. to provide you with information and/or formulate offers on products, services or initiatives offered or promoted by other companies belonging to the COMPANY's collaborators and/or by other commercial partners and outsourcers who act as independent data controllers;
h. make customized commercial offers based on the products or services you have purchased, or in which you are interested by browsing our site, or on the basis of the group of customers you belong to (profiling). This means, for example, that if you are a reseller you will receive commercial offers intended for resellers; if you have browsed our site to look for information on certain services, you will receive offers relating to these services; finally, if you are using a service, based on your use of the service, you will receive targeted communications from the COMPANY (for example, if the capacity of the service is reaching the limit, you will be notified and invited to increase the capacity of the service itself; or, you will be offered complementary and/or compatible services with the one you have purchased). This type of analysis is typically carried out on purchase data relating to both natural and legal persons and the related decisions are not based on solely automated processing. This processing is necessary for the pursuit of the legitimate interest of the data controller in personalizing its commercial offers. You can always object to this treatment via the "Contact" page of the site;
the. for exclusive purposes of security and prevention of fraudulent conduct, the Data Controller sets up an automatic control system which involves the detection and analysis of user behavior on the site associated with the processing of Personal Data including the IP address. The consequences of this treatment are that if a person tries to engage in fraudulent conduct on the COMPANY's website, for example to benefit several times from the same promotion without being entitled to it, the COMPANY reserves the right to exclude this person from the promotion or to adopt any other appropriate measure for its own protection.

4. Legal basis and mandatory or optional nature of the treatment

The legal basis for the processing of Personal Data for the purposes referred to in section 3 (abc) is art. 6(1)(b) of the Regulation as the treatments are necessary for the provision of the contractual services. The provision of Personal Data for these purposes is optional but failure to provide it would make it impossible to activate the requested Services.
The purpose referred to in section 3(d) represents a legitimate processing of Personal Data pursuant to art. 6(1)(c) of the Regulation. Once the Personal Data has been provided, the processing may indeed be necessary to fulfill legal obligations to which the COMPANY is subject.
The treatments carried out for marketing purposes described in section 3(f) and for communication to third parties described in section 3(g) are based on the release of your consent pursuant to art. 6(1)(a) of the Regulation. The provision of your Personal Data for these purposes is entirely optional and does not affect the use of the Services. The treatments referred to in section 3 (e), carried out for e-mail marketing purposes on products or services similar to those purchased by you, instead find their legal basis, pursuant to art. 6.1.f of the Regulations, in the legitimate interest of the COMPANY to promote its products or services in a context in which the interested party can reasonably expect this type of treatment, to which he can also oppose at any time. In fact, if you wish to oppose the processing of your data for marketing purposes, referred to in sections 3(e) and 3(f), you can do so at any time via the "Contact" page of the site or by sending a written request to [email protected] or by registered mail to the COMPANY's registered office. The profiling treatment referred to in section 3(h), to which you can object at any time, is based on the legitimate interest of the Data Controller, pursuant to article 6.1.f. of the Regulation, to personalize their commercial communications. The treatment referred to in section 3 (i) is also based on the legitimate interest of the Data Controller to detect frauds and scams committed against him, in accordance with art. 6.1.f of the Regulation. referred to in sections 3(e) and 3(f), may do so at any time via the "Contact" page of the site or by sending a written request to [email protected] or by registered mail to the COMPANY's registered office. The profiling treatment referred to in section 3(h), to which you can object at any time, is based on the legitimate interest of the Data Controller, pursuant to article 6.1.f. of the Regulation, to personalize their commercial communications. The treatment referred to in section 3 (i) is also based on the legitimate interest of the Data Controller to detect frauds and scams committed against him, in accordance with art. 6.1.f of the Regulation. referred to in sections 3(e) and 3(f), may do so at any time via the "Contact" page of the site or by sending a written request to [email protected] or by registered mail to the COMPANY's registered office. The profiling treatment referred to in section 3(h), to which you can object at any time, is based on the legitimate interest of the Data Controller, pursuant to article 6.1.f. of the Regulation, to personalize their commercial communications. The treatment referred to in section 3 (i) is also based on the legitimate interest of the Data Controller to detect frauds and scams committed against him, in accordance with art. 6.1.f of the Regulation. it or by registered mail to the COMPANY's registered office. The profiling treatment referred to in section 3(h), to which you can object at any time, is based on the legitimate interest of the Data Controller, pursuant to article 6.1.f. of the Regulation, to personalize their commercial communications. The treatment referred to in section 3 (i) is also based on the legitimate interest of the Data Controller to detect frauds and scams committed against him, in accordance with art. 6.1.f of the Regulation. it or by registered mail to the COMPANY's registered office. The profiling treatment referred to in section 3(h), to which you can object at any time, is based on the legitimate interest of the Data Controller, pursuant to article 6.1.f. of the Regulation, to personalize their commercial communications. The treatment referred to in section 3 (i) is also based on the legitimate interest of the Data Controller to detect frauds and scams committed against him, in accordance with art. 6.1.f of the Regulation. The treatment referred to in section 3 (i) is also based on the legitimate interest of the Data Controller to detect frauds and scams committed against him, in accordance with art. 6.1.f of the Regulation. The treatment referred to in section 3 (i) is also based on the legitimate interest of the Data Controller to detect frauds and scams committed against him, in accordance with art. 6.1.f of the Regulation.

5. Recipients of personal data

Your Personal Data may be shared, for the purposes set out in section 3 above, with:
to. subjects who typically act as data controllers, i.e.: i) people, companies or professional firms that provide assistance and consultancy to the COMPANY in accounting, administrative, legal, tax, financial and debt collection matters relating to the provision of the Services; ii) subjects with whom it is necessary to interact for the provision of the Services (for example the suppliers and the national and foreign registration Authorities to which the technical and administrative documentation and the Maintainer forms must be transmitted, the authorities that manage the WHOIS database which contains the personal data of the assignees of domain names, the subjects that provide the payment service by credit card, (PayPal, SumUp) etc. iii) or parties delegated to carry out technical maintenance activities (including maintenance of network equipment and electronic communication networks); iv) collaborators of the COMPANY, Italian or foreign, for administrative or statistical purposes (collectively "Recipients");
b. subjects, bodies or authorities to whom it is mandatory to communicate your personal data by virtue of provisions of the law or orders of the authorities (for example, during criminal investigations the COMPANY may receive requests from the judicial authority to provide electronic traffic logs);
c. persons authorized by the COMPANY to process Personal Data necessary to carry out activities strictly related to the provision of the Services, who are committed to confidentiality or have an adequate legal obligation of confidentiality;
d. commercial partners for their own purposes, autonomous and distinct, only if you have given specific consent.

6. Transfers of personal data

Some of your Personal Data is shared with Recipients who could be found outside the European Economic Area. THE COMPANY ensures that the processing of your Personal Data by these Recipients takes place in compliance with the Regulation. Indeed, transfers may be based on an adequacy decision or on the Standard Contractual Clauses approved by the European Commission. Further information is available from the Owner. As part of the domain name registration services, the data is communicated to the subjects listed in section 2(e) of this policy: in some cases, such processing involves the transfer of the data in question outside the European Economic Area. Given that this transfer is necessary for its use of the service, according to the privacy legislation in force, is justified pursuant to art. 49(1)(b) of the Regulation.

7. Data retention

The Personal Data processed for the purposes referred to in section 3 (abc) will be kept for the time strictly necessary to achieve those same purposes. In any case, since these are treatments carried out for the provision of Services, the COMPANY will process the Personal Data up to the time allowed by the Italian law to protect its interests (Article 2946 of the Civil Code and subsequent amendments).
The Personal Data processed for the purposes referred to in section 3(d) will be kept until the time required by the specific obligation or applicable law.
For the purposes referred to in section 3 (e) (f), your Personal Data will instead be processed until your consent is revoked or up to three years after you have ceased to be a customer of the COMPANY, or have simply registered on the Site, and have not made any purchases of products or services. In any case, the possibility for the COMPANY to keep your Personal Data is reserved for the time allowed by Italian law to protect its interests (Article 2947(1)(3) of the Civil Code). Further information regarding the data retention period and the criteria used to determine this period can be requested by writing to the Data Controller at the email [email protected].

8. Rights of data subjects

You have the right to ask the COMPANY, at any time, to access your Personal Data, to rectify or cancel them or to oppose their treatment in the cases provided for by article 20 of the Regulation, you have the right to request the limitation of treatment in the cases provided for by art. 18 of the Regulation, as well as to obtain the data concerning you in a structured format, commonly used and readable by automatic device (portability), in the cases provided for by art. 20 of the Regulation.

Requests must be sent in writing to the owner at [email protected] or by registered mail to the COMPANY's registered office.

It should be noted that, in the presence of requests from interested parties relating to the reporting of abuses in the use of the services or spamming activities, activities already prohibited by contract, made by a COMPANY customer (it should be noted that this customer typically acts as data controller pursuant to the Regulation), as well as in the presence of any further request to exercise the rights pursuant to art.15 et seq. of the Regulation, the COMPANY, without going into the merits of the request, on the one hand will promptly inform the customer/owner, and on the other hand will provide the interested parties with the customer/owner's details.

In any case, you always have the right to lodge a complaint with the competent supervisory authority (Guarantor for the Protection of Personal Data), pursuant to art. 77 of the Regulation, if you believe that the processing of your data is contrary to the legislation in force.

9. Changes

This privacy policy has been in force since 21 May 2018. The COMPANY reserves the right to modify or simply update its content, in part or completely, also due to changes in the applicable legislation. If the amendments to this Policy concern substantial changes in the treatments or may in any case have a significant impact on the interested parties, the COMPANY will take care to appropriately notify the interested parties.