PRIVACY POLICY

1. OVERVIEW OF DATA PROTECTION
General information
The following information provides a clear and immediate overview of what happens to your personal data when you visit our website.

“Personal data” refers to all data by which you can be personally identified. For more detailed information on this subject, please consult the Data Protection Declaration set out below.

Data collection on our website
Who is responsible for data processing on this website (the so-called “controller”)?
Data processing on this website is carried out by the website operator, whose contact details can be found in the section “Mandatory Legal Information” on this website.

How do we collect your data?
Some data are collected when you provide them to us, for example by filling out a contact form.
Other data are collected automatically by our IT systems when you visit the website. These are mainly technical data (e.g. browser type, operating system, time of access). This data collection takes place automatically as soon as you access the website.

What do we use your data for?
Some of the data are used to ensure the proper functioning of the website.
Other data may be used to analyze user browsing behavior.

What rights do you have regarding your data?
You have the right to obtain, at any time and free of charge, information about the origin, recipients, and purposes of your stored personal data. You also have the right to request the rectification, blocking, or deletion of this data.
If you have any questions on this subject, you can contact us at any time using the address provided in the section “Mandatory Legal Information.”
You also have the right to lodge a complaint with the competent supervisory authority.
Under certain circumstances, you also have the right to request the restriction of the processing of your personal data (see “Right to restriction of processing”).

Analytics tools and third-party tools
When visiting our website, your browsing behavior may be statistically analyzed. This is done primarily through cookies and analytics programs. Such analysis is generally anonymous; browsing patterns cannot be traced back to you personally.
You can object to this analysis or prevent it by not using certain tools. Detailed information can be found in the Data Protection Declaration below.

2. GENERAL AND MANDATORY INFORMATION
Data protection
The operators of this website take the protection of your personal data very seriously and treat your personal data confidentially and in accordance with applicable data protection regulations and this privacy policy.
Whenever you use this website, various types of personal data are collected. This privacy policy explains what data we collect, for what purpose, and how this is done.
Please note that data transmission over the Internet (e.g. via email) may have security vulnerabilities. Complete protection of data against access by third parties is not possible.

Information about the data controller
The data controller responsible for data processing on this website is:

FILIPPO PIREDDA

The controller is the natural or legal person who alone or jointly determines the purposes and means of the processing of personal data (e.g. names, email addresses).

Revocation of your consent to data processing
Many data processing operations are only possible with your explicit consent. You may revoke consent already given at any time by sending us an informal email.
The legality of data processing carried out prior to the revocation remains unaffected.

Right to object (Art. 21 GDPR)
You have the right to object at any time, on grounds relating to your particular situation, to the processing of your personal data based on Art. 6(1)(e) or (f) GDPR, including profiling based on these provisions.
If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds which override your interests, rights and freedoms, or for the establishment, exercise or defense of legal claims.

If your personal data are processed for direct marketing purposes, you have the right to object at any time to the processing of your personal data for such marketing, including profiling related to such direct marketing.
If you object, your personal data will no longer be used for direct marketing purposes.

Right to lodge a complaint with the competent supervisory authority
In the event of breaches of the GDPR, data subjects have the right to lodge a complaint with a supervisory authority, in particular in the Member State of their habitual residence, place of work, or the place of the alleged infringement.
This right exists irrespective of other administrative or judicial remedies.

Right to data portability
You have the right to receive personal data that we process on the basis of your consent or in fulfillment of a contract, in a structured, commonly used, and machine-readable format, and to transmit those data to another controller where technically feasible.

SSL/TLS encryption
For security reasons and to protect the transmission of confidential content (such as orders or inquiries), this website uses SSL or TLS encryption.
You can recognize an encrypted connection by the address bar of your browser changing from “http://” to “https://” and by the lock symbol.
If SSL or TLS encryption is activated, data transmitted to us cannot be read by third parties.

Encrypted payment transactions
If, after concluding a paid contract, you are required to provide your payment data (e.g. account number for direct debit), such data will be processed exclusively via encrypted SSL or TLS connections.
This ensures that the data cannot be read by third parties.

Information, rectification, and deletion of data
Within the framework of applicable legal provisions, you have the right at any time to obtain information about your stored personal data, its origin, recipients, and the purpose of data processing, as well as the right to request correction, blocking, or deletion of this data.
For this purpose, you may contact us at any time using the address provided in the section “Mandatory Legal Information.”

Right to restriction of processing
You have the right to request the restriction of processing of your personal data in the following cases:
if you contest the accuracy of the data, for the period required to verify the accuracy;
if the processing is unlawful but you oppose deletion;
if the data are no longer required by the controller, but you require them to assert, exercise, or defend legal claims;
if you have objected pursuant to Art. 21(1) GDPR, pending verification of whether the legitimate grounds of the controller override yours.

If processing has been restricted, such data may only be processed with the consent of the data subject or for the establishment, exercise, or defense of legal claims or for reasons of important public interest.

Prohibition of unsolicited advertising emails
The use of contact data published within the scope of mandatory legal information for the purpose of sending unsolicited advertising or informational material is hereby prohibited.
The website operators expressly reserve the right to take legal action in the event of unsolicited promotional material, such as spam emails.

3. DATA COLLECTION ON OUR WEBSITE
Cookies
In some instances, our website uses so-called cookies. Cookies do not cause any damage to your computer and do not contain viruses. They serve to make our website more user-friendly, efficient, and secure.
Cookies are small text files that are stored on your device and saved by your browser.

Most of the cookies we use are “session cookies,” which are automatically deleted at the end of your visit.
Other cookies remain stored on your device until you delete them. These cookies allow us to recognize your browser on your next visit.

You can configure your browser to inform you whenever cookies are set, to allow cookies only in individual cases, to exclude the acceptance of cookies in certain cases or generally, and to enable the automatic deletion of cookies when closing the browser.
Disabling cookies may limit the functionality of this website.

Cookies that are necessary to carry out electronic communication processes or to provide certain functions requested by you (e.g. shopping cart function) are stored on the basis of Art. 6(1)(f) GDPR.
The website operator has a legitimate interest in storing cookies to ensure technically error-free and optimized service provision.
Any other cookies (e.g. cookies used to analyze browsing behavior) are addressed separately in this privacy policy.

Server log files
The website provider automatically collects and stores information in so-called server log files, which your browser automatically transmits.
These include:
browser type and version,
operating system used,
referrer URL,
hostname of the accessing computer,
time of the server request,
IP address.

This data is not merged with other data sources.
The basis for data processing is Art. 6(1)(f) GDPR, which allows the processing of data to fulfill a legitimate interest in the technically error-free presentation and optimization of the website.

Contact form
If you send us inquiries via the contact form, your details from the inquiry form, including the contact information you provide, will be stored by us for the purpose of processing the inquiry and in case of follow-up questions.
We will not share this information without your consent.

Processing is based exclusively on your consent (Art. 6(1)(a) GDPR).
You may revoke this consent at any time.
The data will remain stored until you request deletion, revoke your consent, or the purpose for data storage no longer applies.
Mandatory statutory provisions remain unaffected.

Inquiries by email, telephone, or fax
If you contact us by email, telephone, or fax, your inquiry, including all personal data resulting from it (name, inquiry content), will be stored and processed for the purpose of handling your request.
We will not pass on this data without your consent.

The legal basis is Art. 6(1)(b) GDPR if the request is related to the performance of a contract or pre-contractual measures.
In all other cases, processing is based on your consent (Art. 6(1)(a) GDPR) and/or our legitimate interest (Art. 6(1)(f) GDPR) in the effective handling of inquiries.
The data will remain stored until you request deletion, revoke your consent, or the purpose for data storage ceases to apply.
Mandatory legal retention periods remain unaffected.

Registration on this website
You may register on our website to use additional features. The data entered for this purpose will be used only for the purpose of using the respective service or offer for which you have registered.
Mandatory fields must be completed in full, otherwise registration will be refused.

The email address provided may be used to inform you of important changes or technical updates.
Data processing is based on your consent (Art. 6(1)(a) GDPR), which you may revoke at any time.
The data will remain stored as long as you are registered on the website and will be deleted when your account is deleted, subject to statutory retention obligations.

Comment function
When you use the comment function on this website, the time of creation, your email address, and—if you do not post anonymously—the username you selected will be stored in addition to your comment.

Storage of IP addresses
IP addresses of commenters are stored. This is necessary to enable the website operator to defend itself against legal violations such as defamatory or illegal content.

Subscribing to comments
You may subscribe to comments after registration. You will receive a confirmation email to verify ownership of the email address.
You can unsubscribe from this function at any time via a link in the emails.
The data collected for comment subscriptions will be deleted unless required for other purposes (e.g. newsletter subscription).

Storage period
Comments and the associated data remain stored until the commented content is deleted or deletion is required for legal reasons (e.g. offensive content).

Legal basis
The processing of comments is based on your consent (Art. 6(1)(a) GDPR), which may be revoked at any time.

Processing of data (customers and contracts)
We collect, process, and use personal data only to the extent necessary to establish, modify, or terminate a legal relationship (contract data), in accordance with Art. 6(1)(b) GDPR.
Usage data are processed only to the extent necessary to enable use of the services and billing.
The data are deleted upon completion of the order or termination of the business relationship, subject to statutory retention obligations.

Data transfer for contracts (online shops and shipping)
We transfer personal data to third parties only if this is necessary for the performance of the contract, for example to shipping companies or payment service providers.
No further data transfer takes place unless you have expressly consented.
Legal basis: Art. 6(1)(b) GDPR.

Data transfer for services and digital content
The same applies to contracts for services or digital content: data are shared with third parties only where necessary (e.g. payment service providers), and never for advertising purposes without consent.
Legal basis: Art. 6(1)(b) GDPR.

4. SOCIAL MEDIA
Facebook plug-ins (Like & Share buttons)
This website incorporates plug-ins from the social network Facebook (Facebook Inc., 1 Hacker Way, Menlo Park, CA, USA).
The Facebook plug-ins can be recognized by the Facebook logo or the “Like” button.

When you visit our website, a direct connection is established between your browser and the Facebook server via the plug-in. Facebook thereby receives the information that you have visited our website with your IP address.
If you are logged into your Facebook account and click the “Like” button, you can link the contents of our website to your Facebook profile.
This allows Facebook to associate the visit to our website with your user account.

We have no influence on the scope of the data that Facebook collects through this plug-in.
For more information, please see Facebook’s privacy policy:
https://www.facebook.com/privacy/explanation.

If you do not want Facebook to associate your visit with your Facebook account, please log out of Facebook before visiting our website.
Legal basis: Art. 6(1)(f) GDPR (legitimate interest in effective social media visibility).

Instagram plug-ins
This website includes functions of the Instagram service (Instagram Inc., 1601 Willow Road, Menlo Park, CA, USA).
If you are logged into your Instagram account and click the Instagram button, the content of this website may be linked to your Instagram profile.

We have no control over the data transmitted to Instagram.
For more information, please consult Instagram’s privacy policy:
https://instagram.com/about/legal/privacy/.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in effective social media visibility).

5. PLUG-INS AND TOOLS
YouTube
Our website uses plug-ins from the YouTube platform, operated by Google (YouTube, LLC, 901 Cherry Ave., San Bruno, CA, USA).
When you visit a page with an embedded YouTube video, a connection to the YouTube servers is established. YouTube is informed that you have visited our website.

YouTube may store cookies on your device to collect statistical data and improve its services.
If you are logged into your YouTube account, YouTube may associate your browsing behavior directly with your personal profile.
You can prevent this by logging out of your YouTube account.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in presenting online content in an appealing manner).
YouTube privacy policy:
https://policies.google.com/privacy?hl=it.

Google Web Fonts
This website uses Google Web Fonts to ensure uniform display of fonts.
When you access a page, your browser loads the required web fonts into your browser cache to display texts correctly.
To do this, the browser you use must connect to Google servers, which may become aware of your IP address.

If your browser does not support Web Fonts, a standard font installed on your device will be used.
Legal basis: Art. 6(1)(f) GDPR (legitimate interest in uniform presentation of the website).

Further information:
https://developers.google.com/fonts/faq
https://policies.google.com/privacy?hl=it