INFORMATION IN ACCORDANCE WITH ART.13 OF REGULATION (EU) 2016/679 – LIMOLO HOUSE 56 GREEN BY DANIELA MELONI updated v1 29/03/2024
With this document (“Notice”), the Data Controller, as defined below, wishes to inform you of the purposes and methods of the processing of your personal data and of your rights under Regulation (EU) 2016/679 on the protection of individuals with regard to the processing of personal data and on their free movement (“GDPR”). This Policy may be supplemented by the Owner where any additional services you request would involve additional processing.
Data controller:
LIMOLO HOUSE 56 GREEN BY DANIELA MELONI
Via Cesare Battisti 56, 09072 Cabras
VAT: 01253100950 | IUN: F0710
Email: daniela@limolo.it
Cookies: Profiling Cookies;
Behavioral data: Navigation logs;
Common data: Master data.
Categories of data subjects: The processing activities carried out are aimed at the following categories of data subjects: Web users.
Purpose of processing and condition that makes processing lawful
NEWSLETTER
Transmission of business proposals promoted by the Data Controller for communication, awareness raising and promotion activities, on the topics of sustainable development, environmental management, biodiversity protection, climate change, and circular economy, organizing or promoting meetings, conferences, seminars, as well as granting awards and/or scholarships.
Condition of Lawfulness Processing: Consent – Art. 6, c.1, let. a. GDPR
Purpose of processing: 1) Transmission of business newsletters to the e-mail addresses of customers and/or potential customers; 2) Transmission of instant messages through tools such as SMS, Whatsapp, Telegram, for example; 3) Transmission of instant messages through tools such as SMS, Whatsapp, Telegram, for example.
Optional – Failure to provide data will result in the data subject not being able to receive messages regarding promotions offered by the Data Controller
Personal data retention period: Deleted data will be deleted immediately upon termination of the contract or revocation of consent. Prospect data, for which the contract will not be finalized, will be deleted within 24 months of registration.
Method of Processing: The processing is carried out, mainly, by computer tools.
SITE – NAVIGATION DATA
To derive anonymous statistical information on usage, check the proper functioning of the site, ascertain responsibility in case of hypothetical computer crimes against the Owner.
Condition of Lawfulness Treatment: Legitimate Interest – Art. 6, c.1, let. f. GDPR
Purpose of processing:
Data analysis to perform website evolution and maintenance..;
Establishment of liability in case of potential computer crimes to the detriment of the site and/or Data Subjects..;
Statistical, anonymous analysis of site usage…
Mandatory – Failure to provide data will result in the inability of the company to deliver the web service provided.
Personal data retention period: Data are retained for 30 days.
Method of Processing: Processing is carried out with computer tools.
SOCIAL FACEBOOK PAGE
When a user uses the Page administered by the Owner, Facebook (“Social Media”) collects information such as the types of content viewed or interacted with, actions performed as well as information about the devices used (IP addresses, operating system, browser type, language settings, cookie data).
Page Insights are aggregate statistics created from certain events recorded by Facebook’s servers when users interact with Pages and the content on them.
As explained in Facebook’s Privacy Policy, Social Media also collects and uses information to provide statistical data collection services called Page Insights to page administrators to enable them to understand how people interact with the content on them.
Details on the processing methods performed by Facebook can be found at the following link:
https://www.facebook.com/privacy/explanation
Details on personal data processed for Insights can be found at the following link:
https://www.facebook.com/legal/terms/information_about_page_insights_data
Details about the cookies used by Facebook, are available at the following link:
https://www.facebook.com/policies/cookies/
The Data Controller as administrator of the Page and Facebook Ireland Limited (4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland) are joint data controllers in accordance with Article 26 of the GDPR for the processing of such personal data recorded for events delivered through Insights of the Page (“Insights Data”).
The co-ownership agreement, between the Owner and Facebook, covers the creation of such events and their aggregation in Insights in the Page provided to each administrator.
The legal basis for processing is the legitimate interest of the Data Controller, Art. 6(1)(f) GDPR. Therefore, it is not necessary to obtain your prior consent for processing.
Condition of Lawfulness Treatment: Legitimate Interest – Art. 6, c.1, let. f. GDPR
Purposes of processing: 1) Statistical surveys regarding the use of elements contained within the Facebook page administered by the Data Controller.
Mandatory – Failure to provide the requested data will result in the inability of the Owner to provide services through the Page posted on Facebook.
Personal data retention period: The data collected will be processed for the time strictly necessary for the fulfillment of the purposes described above as specified in the Facebook policies described above.
Method of Processing: Processing is carried out by computer means by the Facebook Co-owner.
GOOGLE FONT
Your personal data will be used to improve the usability of the Owner’s site content through the use of the Google Fonts service. All Google fonts allow pages to load faster, are automatically optimized for the web resulting in the reduction of the volume of data transmitted to users’ clients improving the quality of enjoyment of the content of the Owner’s site or applications. The use of Google fonts is safe and avoids distortion of the display of text on the Owner’s site or application. Google Fonts supports all popular browsers and works reliably on most modern mobile operating systems.
Condition of Lawfulness Treatment: Legitimate Interest – Art. 6, c.1, let. f. GDPR
Purpose of processing: 1) Use of CSS files, which determine the style and quality of the content of the site/App, provided by the Google Font service…
Mandatory – Opposition to processing may result in the Data Controller being unable to ensure the best consultation of the content on the site/app.
Personal data storage period: The manner in which data is collected and stored can be obtained from https://policies.google.com/privacy
Method of Processing: The Google Font service is provided by Google in its capacity as Autonomous Owner. Use of Google Fonts does not require registration or authentication to Google systems. No cookies are stored in the browser. The files (CSS, fonts) are provided to the browser through the domains of Google fonts.googleapis.com and fonts.gstatic.com. The CSS and fonts provided are completely separate from all other Google services. For more information you can see Google’s privacy policy https://policies.google.com/privacy
Extra-EU data transfer: Personal data are processed exclusively within the European Union.
Recipients of treatment:
Data Processor: Hosting Services Providers; Communication Manager; ICT Systems Maintenance Services;
Designated Person Responsible for Processing: Personnel employed by the Data Controller;
Rights of the data subject – complaint to the supervisory authority: In relation to the processing operations described in this Notice, as a data subject you will be able, under the conditions provided by the GDPR, to exercise the rights enshrined in Articles 15 to 22 of the GDPR and, in particular, the following rights:
Right of access: the right to obtain confirmation of whether or not personal data concerning you is being processed and, if so, to obtain access to your personal data;
Right of rectification: the right to obtain, without undue delay, the rectification of inaccurate personal data concerning you and/or the supplementation of incomplete personal data;
Right to erasure (right to be forgotten): right to obtain, without undue delay, the erasure of personal data concerning you. The right to erasure does not apply to the extent that the processing is necessary for the fulfillment of a legal obligation or the performance of a task carried out in the public interest or for the establishment, exercise or defense of a right in court;
Right to restriction of processing – Article 18 GDPR: right to obtain restriction of processing, when: (a) the data subject disputes the accuracy of personal data; (b) the processing is unlawful and the data subject objects to the deletion of personal data and instead requests that their use be restricted; (c) personal data are necessary for the establishment, exercise or defense of a legal claim; (d) the data subject has objected to the processing pending verification as to whether the data controller’s legitimate reasons prevail over those of the data subject.
Right to data portability: the right to receive, in a structured, commonly used, machine-readable format, personal data about you and to provide it to another Data Controller;
Right to object: right to object to the processing of personal data about you on grounds related to your particular situation and in any case to the use of your data for marketing purposes.
Where a processing is based on consent, you can revoke this (withdrawal of consent) at any time and as easily as it was provided without affecting the lawfulness of the processing based on the consent given before the revocation.
You also have the right not to be subject to a decision based solely on automated processing, including profiling, that has a legal effect or significantly affects you. However, we may make an automated decision if you make
necessary to enter into or perform a contract with us, if it is authorized by an Italian or European Union law or if you have given your consent.
In any case, you have the opportunity to challenge the decision, express your views and ask for the intervention of a person who can review the decision.
You may, at any time, file a complaint with the data protection authority: www.garanteprivacy.it
The above rights can be exercised against the Holder by contacting the references described above.