Privacy policy
In accordance with national legislation (Legislative Decree 196 of 30 June 2003 – Personal Data Protection Code) and European law (EU Regulation 679/2016 – GDPR), as amended, this website respects and protects the privacy of visitors and users. This privacy policy applies exclusively to the online activities of this website and is valid for both visitors and users. It does not apply to information collected through channels other than this website. The purpose of this policy is to provide full transparency regarding the information collected by the website and how it is used.
Legal basis
This website processes data based on consent. By using or browsing the site, visitors and users explicitly accept this privacy policy and consent to the processing of personal data according to the methods and purposes described below, including possible disclosure to third parties when necessary for service delivery.
Providing data and therefore consenting to its collection and processing is optional: users may refuse consent and may revoke it at any time by accessing the privacy centre page. However, refusal may prevent the provision of certain services and affect the browsing experience.
Since 25 May 2018 (GDPR enforcement date), some data may be processed based on the legitimate interests of the data controller.
Data collected and purpose
Like all websites, this site uses log files that automatically collect information during user visits. This may include:
- IP address;
- browser type and settings;
- internet service provider (ISP) name;
- date and time of visit;
- referring and exit pages;
- number of clicks.
This information is processed automatically and collected in aggregate form to ensure proper website functioning and for security purposes. Since 25 May 2018, such data is processed based on the legitimate interests of the data controller.
For security purposes (anti-spam filters, firewalls, virus detection), automatically recorded data may also include personal data such as IP addresses, which may be used to block malicious activities or damage attempts, in compliance with applicable law.
These data are never used for user identification or profiling, but solely for site and user protection.
If the website allows comments or specific services requested by the user, identifying data such as email address may also be collected. Such data are voluntarily provided by the user and used exclusively to provide the requested service.
User-generated content is provided voluntarily, and users are responsible for ensuring they have the right to share any data or content submitted.
Data are retained only for the time strictly necessary to fulfil the purposes described and are never shared with third parties, except when required by law or judicial authorities.
Security-related data (e.g. blocking malicious attempts) are retained for 7 days.
Security measures
User data are processed lawfully and fairly, using appropriate security measures to prevent unauthorised access, disclosure, alteration, or destruction. Processing is carried out using IT and/or electronic tools, following organisational methods strictly related to the stated purposes.
In addition to the data controller, data may be accessed by authorised personnel involved in website management (administrative, commercial, marketing, legal, system administrators) or external parties such as technical service providers, hosting providers, IT companies, or communication agencies.
User rights
Under EU Regulation 679/2016 (GDPR) and national law, users may exercise the following rights:
- request confirmation of the existence of personal data (right of access);
- obtain information on the origin of data;
- receive intelligible communication of data;
- obtain information on processing methods and purposes;
- request updating, correction, integration, deletion, anonymisation, or blocking of data;
- receive their data in a structured, commonly used electronic format (where applicable);
- lodge a complaint with the supervisory authority (Data Protection Authority);
- exercise any other rights granted by applicable law.
Requests must be addressed to the data controller. Users may also manage their privacy preferences via the privacy centre page.
Where processing is based on legitimate interest, users retain the right to object to processing by submitting a request to the data controller.
Data processing location
Data are processed at the data controller’s premises and at the hosting provider’s data centre. The hosting provider (IperDada Pro), acting as data processor, is located within the European Economic Area (EEA) and complies with European regulations.
Data controller
The data controller is Luciano Caruso, who can be contacted via the DPO contact page.
Updates
This privacy policy was last updated on 12 May 2026.