You are at: https://www.matteojbalzaretti.it.

This Web Site collects certain Personal Data of its Users. Data collected through the Website are processed in accordance with the principles of fairness, lawfulness, transparency, purpose and storage limitation, minimization and accuracy, integrity and confidentiality, as provided for in the EU Regulation 679/2016 (GDPR).
What personal data is collected and why (type of data, purpose and legal basis)
By browsing this Site, personal data may be collected, as further detailed below.
Cookies are also installed, as you can read in the cookie policy:

Browsing Data

The Site’s computer systems implicitly collect, in the course of their operation, some personal data (provided for by Internet communication protocols). These are not associated with specific subjects, except through a complex and complicated system of processing and association with other data, held by third parties. This category of personal data includes IP addresses or domain names of computers used by users connecting to the site, browsers and parameters of the computer system used to connect to the site, navigation data, including time of the request and response obtained from the server.
Data processed: IP addresses or domain names of computers used by users connecting to the site, browsers and parameters of the computer system used to connect to the site, navigation data, including time of the request and response obtained from the server.
Purposes: use of the site, anonymous statistics on the use of the Site.

Contact form

When filling out the contact form on the Site, the user is required to provide his/her name and email address, which are necessary for the Holder to follow up on the request received.
Data processed: name and email address.
Purpose: response to a request received from the user.
Legal basis: consent, expressed at the bottom of the form completion.

Social sharing buttons

Social sharing buttons are installed on the site, which allow the user to share on the main social networks the content of the site. The use of social buttons involves the sharing of certain user information (better specified below) with the social network concerned, which may collect, store, analyze, archive it, according to the provisions of the specific information of each social (linked below).
In most cases the collection of user data is done through the use of cookies.
You will find more information in the Site’s cookie policy, including how to disable certain cookies.

Method of processing and storage

The data processing is carried out in automated and/or manual form, in compliance with the provisions of Article 32 of GDPR 2016/679 on security measures; that is, the data are processed and managed in such a way as to avoid or otherwise limit as much as possible the risks of loss, destruction, theft and in such a way as to allow their recovery, should any of the cases described occur.
According to the provisions of Article 4 of GDPR 2016/679, the data provided may be: collected, recorded, organized, stored, consulted, processed, modified, selected, extracted, compared, used, interconnected, blocked, communicated, deleted and destroyed.
Appropriate data protection systems are in place (use of antivirus, passwords, locked archives for storing paper forms). Data are processed and stored in electronic form on PCs.

Period of data retention.

Personal data are kept for as long as necessary to handle answers to users’ questions when filling out the form on the site.
For social sharing buttons, see the relevant policies.
In any case, the user has the right to request the destruction or deletion of the data provided.
The data may also be kept for a longer period of time to fulfill tax obligations or the order of an Authority. At the end of the period necessary for storage, the data will be deleted and no longer recoverable.

Communication and dissemination of data

Personal data will never be disseminated and will not be communicated without your explicit consent
Access to data
Data could be made accessible due to a legal obligation, which may involve the transfer of data to public bodies, judicial authorities, insurance institutions.
The data could be visible to a consultant/IT technician who needs to work for the repair/maintenance of IT tools.
The names and contact details of the consultant or computer technician may be communicated upon simple request by e-mail to: mj@matteojbalzaretti.it.

Transfer of personal data

Data will not be transferred to either European Union member states or to third countries outside the European Union (with the exception of social buttons as the servers may be located in or outside the European Union).

Special categories of personal data

The Site does not collect, nor does it process, any data that qualifies as “special categories of personal data” under Articles 9 and 10 of GDPR 2016/679.

Rights of the data subject

At any time, the user may exercise, pursuant to Articles 15 to 22 of GDPR 2016/679, the right to:

a. request confirmation of the existence or non-existence of personal data concerning him/her;

b. obtain information about the purposes of the processing, the categories of personal data, the recipients or categories of recipients to whom the personal data have been or will be communicated and, when possible, the storage period;

c. obtain rectification and erasure of data;

d. obtain the restriction of processing;

e. obtain portability of the data, i.e. receive them from a data controller, in a structured, commonly used and machine-readable format, and transmit them to another data controller without hindrance;

f. object to the processing at any time and also in the case of processing for direct marketing purposes;

g. object to automated decision-making related to fixed persons, including profiling;

h. request from the data controller access to and rectification or erasure of personal data or restriction of processing concerning him or her or to object to its processing, as well as the right to data portability;

i. revoke consent at any time without affecting the lawfulness of the processing based on the consent given before revocation;

j. to lodge a complaint with a supervisory authority.

Methods of exercising rights

To exercise the above rights or to receive clarification or other information regarding the processing of personal data, you can write to the e-mail address mj@matteojbalzaretti.it will be answered within 30 days.

If you intend to file a complaint with the Supervisory Authority, you can visit https://www.garanteprivacy.it/home/diritti/come-agire-per-tutelare-i-tuoi-dati-personali for any information.