- Lorenzo Mennonna
- Via del Caparra 25, 50142 Florence (Italy)
- maestrideltartufo@gmail.com
Types of Data Collected
Full details on each type of data collected are provided in the dedicated sections of this privacy policy or through specific information notices displayed prior to data collection.
Personal Data may be freely provided by the User or, in the case of Usage Data, collected automatically when using the website. Unless otherwise specified, all Data requested is mandatory. If the User refuses to communicate it, it may be impossible to provide the Service. In cases where some Data is stated as optional, Users are free to refrain from communicating such Data without any consequences on the availability or operation of the Service. Users who are in doubt about which Data is mandatory are encouraged to contact the Data Controller.
The use of Cookies, or other tracking tools, by this website or by the owners of third-party services used, unless otherwise specified, serves the purpose of providing the Service requested by the User.
The User assumes responsibility for the Personal Data of third parties obtained, published, or shared through this website and guarantees that they have the right to communicate or disseminate them, releasing the Controller from any liability toward third parties.
Mode and Place of Processing the Collected Data
Purposes of Processing the Collected Data
The User’s data is collected to allow the Controller to provide its Services, as well as for the following purposes: Statistics, Newsletter, Personalized Advertising, Accounting, Content and Functionality Performance Testing, Interaction with Social Networks and External Platforms, Displaying Content from External Platforms, and Interaction with Data Collection Platforms and Other Third Parties. To obtain further detailed information on the purposes of processing and the Personal Data concretely relevant to each purpose, the User may refer to the relevant sections of this document.
Methods of Processing
The Controller adopts appropriate security measures to prevent unauthorized access, disclosure, modification, or destruction of Personal Data.
Processing is carried out using computers and/or IT tools, with organizational methods and logics strictly related to the purposes indicated. In addition to the Controller, in some cases, the Data may be accessed by other parties involved in the organization of this website (administrative, commercial, marketing, legal personnel, system administrators) or external parties (such as third-party technical service providers, mail carriers, hosting providers, IT companies, communication agencies) appointed, if necessary, as Data Processors by the Controller. The updated list of these parties may be requested from the Data Controller at any time.
Legal Basis of Processing
The Controller processes Personal Data relating to the User if one of the following conditions exists:
- The User has given consent for one or more specific purposes.
- Processing is necessary for the performance of a contract with the User and/or for the implementation of pre-contractual measures.
- Processing is necessary to comply with a legal obligation to which the Controller is subject.
- Processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the Controller.
- Processing is necessary for the purposes of the legitimate interests pursued by the Controller or by a third party.
It is always possible to ask the Controller to clarify the specific legal basis that applies to each processing, and in particular whether the processing is based on the law, stipulated by a contract, or necessary to conclude a contract.
Place
The Data is processed at the Controller’s operating offices and in any other places where the parties involved in the processing are located. For further information, contact the Controller.
The User’s Personal Data may be transferred to a country other than the one in which the User is located. To obtain further information on the place of processing, Users may refer to the section detailing the processing of Personal Data.
The User has the right to obtain information regarding the legal basis of data transfers to countries outside the European Union or to any international organization governed by public international law or set up by two or more countries, such as the UN, as well as regarding the security measures taken by the Controller to safeguard the Data. If any such transfer takes place, Users can check the relevant sections of this document or inquire with the Controller using the contact details provided in the opening section.
Retention Period
Data is processed and retained for the time required by the purposes for which it was collected:
- Personal Data collected for purposes related to the performance of a contract between the Controller and the User shall be retained until such contract has been fully performed.
- Personal Data collected for the purposes of the Controller’s legitimate interests shall be retained as long as needed to fulfill such interests. Users may find more information regarding the legitimate interests pursued by the Controller in the relevant sections of this document or by contacting the Controller.
When processing is based on the User’s consent, the Controller may retain Personal Data longer until such consent is revoked. Furthermore, the Controller may be obliged to retain Personal Data for a longer period whenever required to do so by a legal obligation or an order of an authority.
At the end of the retention period, Personal Data shall be deleted. Therefore, the right of access, erasure, rectification, and data portability cannot be enforced after expiration of the retention period.
Detailed Information on the Processing of Personal Data
Personal Data is collected for the following purposes and using the following services:
Mailing List or Newsletter
By registering to the mailing list or the newsletter, the User’s email address is automatically added to a contact list to which email messages containing information of a commercial and promotional nature may be transmitted. The User’s email address might also be added to this list as a result of registering on the website or after making a request for a quote.
- Personal Data collected: Email, first name, and last name.
Contact Form
By filling out the contact form with their Data, the User consents to their use to reply to requests for information, quotes, or any other kind of request as indicated by the form’s header.
- Personal Data collected: First name, last name, email (mandatory data), phone number, and various types of Data.
Registration for Access to Reserved Areas
By filling out the registration form with their Data, the User consents to their use to create a unique account usable for various website functions (answering requests for information, quotes, or e-commerce).
- Personal Data collected: First name, last name, email (mandatory data), phone number, and various types of Data.
Interaction with Social Networks and External Platforms
This type of service allows interaction with social networks or other external platforms directly from this website. The interactions and information acquired are subject to the User’s privacy settings for each social network. If a service enabling interaction with social networks is installed, it may still collect traffic data for the pages where the service is installed, even when Users do not use it.
- Facebook Social Widgets (Facebook Inc.): Interaction services with the Facebook social network, provided by Facebook, Inc.
- Personal Data collected: Cookies and Usage Data.
- Place of processing: USA – Privacy Policy.
- YouTube Social Widgets (Google Inc.): Interaction services with the YouTube platform, provided by Google Inc.
- Personal Data collected: Cookies and Usage Data.
- Place of processing: USA – Privacy Policy.
Remarketing and Behavioral Targeting
This type of service allows this website and its partners to inform, optimize, and serve advertising based on the User’s past use of this website. This activity is tracked by using Usage Data and Cookies, which are transferred to the partners managing the remarketing and behavioral targeting activity.
- Remarketing with Google Analytics for Display Advertising (Google Inc.): A remarketing and behavioral targeting service provided by Google Inc. that connects the tracking activity performed by Google Analytics and its Cookies with the Adform or Google Ads advertising network.
- Personal Data collected: Cookies and Usage Data.
- Place of processing: USA – Privacy Policy.
Statistics
The services contained in this section enable the Data Controller to monitor and analyze traffic data and can be used to keep track of User behavior.
- Google Analytics (Google Inc.): A web analysis service provided by Google Inc. (“Google”). Google utilizes the Data collected to track and examine the use of this website, prepare reports on its activities, and share them with other Google services. Google may use the Data collected to contextualize and personalize the ads of its own advertising network.
- Personal Data collected: Cookies and Usage Data.
- Place of processing: USA – Privacy Policy – Opt Out.
Additional Information on Personal Data
Privacy Policy
By filling out the contact form with their Data, the User consents to their use to respond to requests for information, quotes, or any other nature indicated by the form’s header.
User Rights
Pursuant to Articles 15–21 of EU Regulation 2016/679, data subjects are granted a series of rights:
- Right of Access: The data subject has the right, pursuant to Article 15, to obtain confirmation as to whether or not personal data concerning them is being processed, and, where that is the case, to obtain a copy thereof. They also have the right to obtain access to the personal data concerning them and to further information such as the purpose of the processing, categories of recipients, data retention period, and exercisable rights.
- Right to Rectification: The data subject has the right, pursuant to Article 16, to obtain the rectification of inaccurate personal data concerning them or to have incomplete data completed.
- Right to Erasure: The data subject has the right to obtain the erasure of personal data concerning them without undue delay if one of the grounds provided for by Article 17 applies.
- Right to Restriction of Processing: The data subject has the right, in the cases provided for by Article 18 of Regulation 2016/679, to obtain the restriction of processing.
- Right to Data Portability: The data subject has the right to receive the personal data concerning them in a structured, commonly used, and machine-readable format and has the right to transmit those data to another controller without hindrance, in accordance with Article 20 of Regulation 2016/679.
- Right to Object to Processing: The data subject has the right to object to the processing of personal data concerning them in accordance with Article 21 of Regulation 2016/679.
The data subject also has the right to lodge a complaint with the competent supervisory authority, the Italian Data Protection Authority (Garante della Privacy). Requests regarding the points above must be addressed in writing to the Data Controller. The Data Controller will, within the time limits established by applicable legislation, provide a prompt response to requests for the exercise of the data subjects’ rights.
