top of page

PRIVACY POLICY

PURSUANT TO ART. 13 OF EU REGULATION 2016/679 OF 27 APRIL 2016 (GDPR)​

1. Object and Purpose of the processing

​The Data Controller processes the personal, identifying and non-sensitive data communicated by you during registration on the Data Controller's website such as (name, surname, address, telephone number, e-mail) for the following purpose:
1. allow you to register on the website;
2. manage and maintain the website;

3. allow the owner to provide the services offered on the website www.michelegritti.com

4. for statistical analyzes on navigation of the website www.michelegritti.com
5. fulfill the obligations established by law, by a regulation, by community legislation or by an order from the Authority;
6. prevent or discover fraudulent activity or abuse harmful to the website;
7. exercise the rights of the Owner, for example the right of defense in court;
8. Only with your specific and distinct consent (art. 7 GDPR), for the following Marketing Purposes: to send you commercial communications, promotions and/or advertising material on products or services offered by the Owner.

Furthermore, accessing and consulting the site www.michelegritti.com involves the automatic recording of data relating to you, i.e. to the internet domain and various information relating to the TCP/IP protocols, the type of browser and the operating system you use. used, date/time and duration of time on the site, pages visited and any search engine from which the site was accessed.

These data will not be used in any way to trace your person or other information not communicated to us, but may be used by the Data Controller in the event of suspected use in violation of the law in force, for statistical purposes and to improve navigation and the contents of the website. site.

2. Data processing methods and storage times

Your personal data are subjected to processing (art. 4 point 2 GDPR) both on paper and electronically and/or automatically according to the principles of correctness, lawfulness, transparency, in order to protect the confidentiality and rights of the interested party at all times in compliance than provided by current legislation.

The Data Controller will process personal data for the time necessary to fulfill the aforementioned purposes and for the Service and Marketing Purposes.

3. Nature of the provision and possible consequences of refusal

The provision of data for the purposes referred to in art. 1 points 1-7 is mandatory. In their absence, we will not be able to guarantee either registration on the site or the performance of the requested service. The provision of data for the purposes referred to in art. 1 point 8 is optional. You can therefore decide not to provide any data or to subsequently deny the possibility of processing data already provided: in this case, you will not be able to receive newsletters, commercial communications and advertising material relating to the Services offered by the Data Controller.

4. Data Access and Communication

The personal data collected are processed by employees and collaborators of the Data Controller, in their capacity as appointees and/or system administrators. Your personal data may also be communicated to third parties (for example: providers for the management and maintenance of the website and information systems, suppliers, professional firms, etc.) who carry out outsourcing activities on behalf of the Data Controller, in their capacity of external managers, co-owners or persons in charge of processing and to Authorities, Public Administrations and third parties in fulfillment of legal obligations.

5. Owner, managers and appointees

The Data Controller is Michele Gritti, VAT number 03021520303 with registered office in Via Cornappo, 56 Reana del Rojale (UD)

The list of data controllers and persons in charge of processing is kept at the registered office of the Data Controller.

6. Data transfer

The management and storage of personal data will take place on servers located within the European Union of the Data Controller and/or third-party companies appointed and duly appointed as Data Processors. In any case, it is understood that the Data Controller, if necessary, will have the right to move the location of the servers to Italy and/or the European Union and/or non-EU countries. In this case, the Data Controller hereby ensures that the transfer of non-EU data will take place in compliance with the applicable legal provisions by stipulating, if necessary, agreements that guarantee an adequate level of protection and/or adopting the standard contractual clauses provided for by the European Commission.

7. Rights of the interested party 

The EU Privacy Regulation grants you the exercise of specific rights, including those to ask the data controller:

– confirmation of whether or not your personal data is being processed and, if so, to obtain access (right of access).

– the rectification of inaccurate personal data, or the integration of incomplete personal data (right of rectification).

– the deletion of the data itself, if one of the reasons provided for by the Regulation exists (right to be forgotten).

– the limitation of processing when one of the hypotheses provided for by the Regulation occurs (right of limitation).

– to receive the personal data you have provided to the owner in a structured, commonly used and machine-readable format and to transmit such data to another data controller (right to portability).

Furthermore, you have the right to withdraw consent to the processing of your data, at any time, without prejudice to the lawfulness of the processing based on the consent given before the revocation and to object at any time to the processing for marketing purposes (right to object ). Finally, if you believe that the processing concerning you violates the GDPR, you have the right to lodge a complaint with a supervisory authority in the Member State in which you habitually reside, work or the place where the alleged violation occurred (art. 77 GDPR ).

8. Method of exercising rights

You may exercise your rights at any time by sending a communication: – via registered mail to Michele Gritti. in Via Cornappo,56 – 33010 Reana del rojale (UD); - via e-mail to the address: grittimichele@pec.it

9. Changes to this Policy

This information may be subject to change. We therefore recommend that you regularly check this Policy and refer to the most updated version.

Last update 07/30/22

bottom of page