Privacy Policy

Identity and contact details of the Data Controller

The Data Controller pursuant to Arts. 4 and 24 of the Regulation is Prof. Luca Richeldi. You can contact the Data Controller by writing to the e-mail address: info@lucaricheldi.it.

Purpose of the processing and legal basis

The personal data directly provided by you or otherwise collected by the Data Controller will be processed exclusively for:

• a) purposes connected to the execution of the services provided (responding to requests for information and/or contact received via chat, email, etc.);
• b) purposes related to the fulfillment of a legal obligation to which the Controller is subject.

The legal basis for the processing of personal data for the purposes referred to in point a) is Art. 6, paragraph 1, letter b) of the Regulation ("processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract"). The legal basis for the purposes referred to in point b) is the fulfillment of a legal obligation to which the Controller is subject pursuant to Art. 6, paragraph 1, letter c) of the GDPR.

Methods of data processing

The processing of your personal data may be carried out with the aid of electronic or automated means, with methods and procedures strictly necessary for the pursuit of the purposes described above. In relation to the aforementioned purposes, the processing of your personal data will take place using manual, IT, and telematic tools for the mere realization of the purposes themselves and, in any case, in such a way as to guarantee security and confidentiality.

Recipients of personal data

Personal data may be communicated for the purposes specified above to subjects who carry out activities necessary for the provision of the services offered by the Site (for example, analysis of the functioning of the Site itself) who will process the data as Data Processors (Art. 28 of the Regulation) and/or as authorized persons acting under the authority of the Controller and the Processor (Art. 29 of the Regulation) or as subjects expressly designated for data processing within the terms provided by the GDPR and national legislation adapting to the provisions of the GDPR (Legislative Decree no. 101/2018) such as, for example, IT service providers and/or archiving services.

Transfer of personal data to a third country

No personal data of the User will be transferred to a third country outside the European Union or to International Organizations.

Data retention period

Personal data processed will be kept in compliance with the provisions of Art. 5 paragraph 1 letter e) of the Regulation in a form that allows the identification of data subjects for a period of time not exceeding the achievement of the purposes referred to in point 2 for which the personal data are processed or for the time strictly necessary to fulfill legal obligations. At the end of the retention period, the data provided by you will be deleted or anonymized.

Rights of the data subject

The data subject has the right to:

• access their personal data;
• rectification or erasure of the same or restriction of processing concerning them;
• object to processing;
• data portability within the terms of Art. 20 cited;
• withdraw consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.

Without prejudice to any other administrative or judicial remedy, the data subject who considers that the processing concerning them violates the GDPR has the right to lodge a complaint with a supervisory authority. To exercise the above rights, the data subject may contact the Controller at the contact details indicated.

Nature of data provision

The communication of your data is mandatory in order to proceed with responding to your request for information and/or contact received by the Controller. Failure to provide personal data will make it impossible for the Controller to proceed with responding to your request.

Automated decision-making process

Pursuant to Art. 13, paragraph 2, letter f) of the GDPR, we inform you that the personal data collected will not be the subject of any automated decision-making process, including profiling referred to in Art. 22, paragraphs 1 and 4 of the Regulation.

Updates

This privacy policy may undergo changes and/or additions following any subsequent regulatory changes and/or additions, the update or provision of new services, or technological innovations that have occurred.