To comply with the obligations imposed by the applicable regulation (EU Regulation on Personal Data Protection No. 679/2016, GDPR) and subsequent amendments, this website respects and protects the privacy of its visitors and users, taking all possible reasonable measures to ensure that the rights of the users are not violated.
This privacy policy exclusively applies to online activities on this site and applies to visitors/users of the site. It does not apply to information gathered through other channels on this website. The objective of the privacy policy is to provide maximum transparency with regard to the information that the website collects and uses.
This website processes data based on consent. By using and consulting this website, visitors and users explicitly consent to this Privacy Policy and the processing of their personal data in relation to the methods and purposes described hereinafter, including the possible diffusion to third parties, if necessary to provide the service.
The provision of data and the Consent to collect and process data is optional. Users can refuse to provide consent and can revoke consent provided previously at any time (via the link Contacts in the page footer). However, refusing consent may make it impossible to provide certain services and affect the browsing experience on the website.
Like all websites, this website saves information collected automatically during users’ visits in log files. The information collected may include the following:
Internet Protocol (IP) address;
Type of browser and parameters of the device used to connect to the website;
Name of the internet service provider (ISP);
Date and time of the visit;
Entry (referral) and exit web page;
The number of clicks performed on the website.
The information above is processed in an automated manner and collected in an aggregate format to verify that the website works as expected, as well as for security purposes.
For security purposes (anti-spam filters, firewall, virus detection), the data automatically registered can also include personal data such as the IP address, which can be used, in compliance with legislation in force on the matter, for the purpose of blocking attempts to damage said site or cause damage to other users, or however harmful or illegal activities. These data are never used to identify or profile the user, but only for the purposes of the site and its users.
Where the website allows users to post comments or offers services requested specifically by users, the website automatically collects and saves some of the users’ identification data, including their email addresses. This data is deemed voluntarily submitted by users at the time the service is provided. By inserting a comment or other information, the user expressly accepts the privacy information and, in particular gives consent for the contents entered to be freely diffused, including to third parties.
The data received will exclusively be used to supply the service requested and for the sole time necessary for service supply.
The information that users make public via the services and tools available to them on the website are provided by users consciously and voluntarily. This website shall not be liable for any breaches or violations in connection with such information. Users are responsible for making sure they have the authorisation to publish personal data belonging to third parties or content protected by national and international laws.
The data gathered from the site while in use are used exclusively for the purposes indicated and kept for the strict time necessary to perform the stated activities. In any case, the data detected by the site will never be supplied to third parties, for any reason, unless following a legitimate request by the judicial authorities and only for cases outlined by law.
Data used for security purposes (to block attempts to cause damage to the website) are saved for only seven days.
Data collected by the website are processed on the premises of the Data Controller:
CONFALONIERI MATITE Srl
Single-member Company
Via Castelfidardo, 11 – 20121 MILAN
This website may share some of the data collected with service providers based outside the European Union. In particular, with Google, Facebook and Microsoft (LinkedIn), through social media plug-ins and the Google Analytics service. Transfers are authorised based on specific decisions from the European Union and the Data Protection Authority, in particular decision 1250/2016 (Privacy Shield – Italian Data Protection Authority page), for which no consent is required. The above-mentioned companies all adhere to the Privacy Shield.
This website processes users’ data lawfully and fairly, adopting the necessary security measures aimed at preventing unauthorised access, diffusion, change or destruction of data. Data processing is carried out using electronic and/or telematic tools, with organisational and logical arrangement strictly correlated to the above indicated purposes. Other than the owner, in some cases, the data may be accessed by categories of workers involved in site organisation (administrative, sales, marketing and legal staff, system administrators) or external subjects (such as suppliers of third-party technical services, couriers, hosting providers, IT companies and communication agencies).
Pursuant to Regulation EU 679/2016 (GDPR) and national regulations, the User can exercise the following rights according to the methods and within the limits set by the applicable regulations:
request confirmation of the existence of personal data pertaining to them (right to access);
be informed on the origin of the data;
receive the data in intelligible form;
be informed on the logic, methods and purposes of processing;
request the update, rectification, integration, erasure, and transformation into anonymous form, block any unlawful processing, including data no longer necessary for the purposes for which they were collected.
in the case of data processing based on consent, receive, at no other cost than a fee for the support service, their data provided to the Data Controller in a structured and commonly used format readable by automated devices;
right to lodge complaints to the Supervisory Authority (Data Protection Authority – link to the Data Protection Authority);
more in general, exercise all the rights recognised by the applicable laws and regulations.
Requests must be submitted to the Data Controller.
In the case of data processing based on legitimate interests the rights of the data subjects are guaranteed (except for the portability right, which is not regulated), in particular the right to object to data processing, which can be exercised by sending a request to the Data Controller.
This Privacy Policy was updated on 30 June 2021