Privacy Policy

Data Controller

The Controller of the personal data collected through the site is Giuseppe Di Franco.
For the technical/editorial management of the site and related services, the Controller relies on Lutech S.p.A., which acts as Data Processor on behalf of the Controller pursuant to Article 28 GDPR, within the limits of the instructions received from the Controller.

Types of data processed

Through the "Contacts" form, personal data voluntarily provided by the user may be processed, such as:

• First and last name;
• e-mail address;
• message text freely entered by the user.

Subject to the user's specific consent, the personal contact data provided through the "Contacts" form may also be processed for informational and promotional communication purposes under the terms set out in the following paragraph.

Users are asked not to enter in the free text field of the form special categories of data pursuant to Article 9 GDPR, such as, by way of example, data relating to health, political opinions, religious or philosophical beliefs, trade union membership, sexual orientation, biometric or genetic data, nor information not necessary for the request.

Purposes and legal basis of the processing

Personal data are processed for the following purposes:

a) Management of requests sent through the "Contacts" form

The personal data provided through the contact form (first name, last name, e-mail address and message content) are processed in order to receive, manage and respond to your request. The legal basis applied to this processing depends on the nature of your communication: it is the performance of pre-contractual measures or, in any case, the management of the data subject's request pursuant to Article 6(1)(b) GDPR, as well as, where applicable, the legitimate interest of the Controller in managing the communications received through the site pursuant to Article 6(1)(f) GDPR.

b) Sending of informational or promotional communications

Subject to specific and separate consent, the contact data provided through the "Contacts" form may be processed for the sending of informational, promotional, editorial or update communications relating to the Controller, to articles, publications, reflections, events or other content connected to the Controller's personal and professional activity. The legal basis of this processing is the data subject's consent pursuant to Article 6(1)(a) GDPR.

The granting of such consent is free and optional. Failure to grant it does not affect the ability to send the message through the "Contacts" form or to receive a response to the request. The user may withdraw any consent given at any time, without affecting the lawfulness of the processing based on consent before its withdrawal, by writing to the address contatti@giuseppedifranco.it or by using any unsubscribe mechanisms made available in the communications received.

Processing methods

Data are processed with electronic tools and with organizational measures suitable to ensure their security and confidentiality.
Access to personal data will be limited to authorized persons who need to process them for the purposes indicated above, within the limits of their respective duties and authorizations.

Data retention

The data transmitted through the "Contacts" form are retained for the time necessary to manage the request and, in any case, for no more than 12 months from collection, unless it is necessary to retain them for a further period to comply with legal obligations, protect the Controller's rights or manage specific requests still pending.
Technical logs are subject to a standard retention of 7 days.
Data relating to cookies and analytics tools will be retained according to the durations indicated in the cookie policy and in the settings of the relevant tools, as well as according to the preferences expressed by the user.
Data processed on the basis of consent for communication, update or marketing purposes will be retained until the consent is withdrawn or the data subject objects and, in any case, for a period not exceeding 12 months from the last useful contact, unless the consent is renewed or a different legal obligation applies.

Rights of the data subject

The data subject may exercise the rights provided for by Articles 15-22 GDPR, by writing to the address contatti@giuseppedifranco.it, including the right to:

• obtain access to personal data (Art. 15);
• request their rectification or erasure (Arts. 16 and 17);
• obtain the restriction of processing (Art. 18);
• object to the processing (Art. 21);
• request data portability (Art. 20);
• withdraw the consent given at any time, without affecting the lawfulness of the processing carried out before the withdrawal (Art. 7).

You also have the right to lodge a complaint with the competent supervisory authority (www.garanteprivacy.it).