Privacy notice
Introduction
This information on the processing of personal data (hereinafter, ‘Privacy Notice’) is provided pursuant to Article 13 of EU Regulation 679/2016 (General Data Protection Regulation – hereinafter, ‘GDPR’).
The Information Notice is provided to persons interacting with the official website of Cosimo and the Hot Coals, represented by Cosimo Pignataro, at the address in Via Moncalvo n. 4/10, 20146 Milano (MI), accessible at www.cosimoandthehotcoals.it/ (hereinafter, the ‘Website’) and describes in detail how and for what purposes the personal data of users/visitors will be processed while browsing the Website and using the various functions and services made available within it.
For the purposes of this Privacy Policy, the person who interacts with the Website and its functions/services, as the data subject to whom the personal data processed refer, is hereinafter referred to as the ‘User’.
1. Data Controller
The data controller is Cosimo Pignataro at the address in Via Moncalvo n. 4/10, 20146 Milano (MI) (hereinafter, ‘Data Controller’). It is possible to contact the Controller, for questions, requests or clarifications relating to this Policy or in general to the processing of personal data, at the following addresses
– e-mail address: info@cosimoandthehotcoals.it (indicating ‘Privacy’ in the subject line).
2. Types of Personal Data
The Data Controller processes the following types of personal data when browsing the Website and using its functions/services:
(a) website usage data, day and time of connection, time spent on the website, IP addresses, information on the devices;
b) information and data provided by filling in the form availables on the website (by way of example but not limited to: name and surname, email for any feedback, telephone number, as well as any additional data provided within the requests transmitted)
c) information and data communicated by the User by emails to the Controller’s addresses indicated on the website (by way of example but not limited to: name, surname, email address for any feedback, telephone number, in addition to any further data provided within the requests transmitted).
The Personal Data referred to in category a) are collected automatically by the Data Controller during website usage. These data are not collected and processed in order to be traced back to identified physical persons; however, by their very nature they could, through processing and integration with other data, make it possible to identify physical persons. Personal data belonging to categories b) and c) are provided directly and voluntarily by the User.
3. Consequences of not providing Personal Data
The processing of Personal Data referred to in category a) is necessary for the Data Controller in order to guarantee the User the best possible browsing experience, and to provide all the functions and services provided through the Website. However, it is possible to limit the processing of such personal data through the use of certain features made available by the Website or by the User’s device or browser/navigation application. In this case, navigation on the Website may be limited and some of its functions / services may be inaccessible
4. Purposes and Legal Bases of the processing of Personal Data
The User’s Personal Data will be processed for the following purposes, and on the following legal bases.
1.
Purposes
Allowing navigation on the Website, access to its pages and sections, use of its functions and services.
Legal Bases
Processing is necessary for the purpose of the legitimate interests pursued by the Controller (art. 6 point. 1 lett (f) GDPR).
2.
Purposes
Allow the Controller to respond to requests from administrative, judicial or public security authorities.
Legal Bases
Processing is necessary for compliance with a legal obligation to which the Controller is subject (art. 6, point. 1 lett (c) GDPR).
3.
Purposes
Fulfilling User’s requests for contact or transmission of information through interaction with the Website.
Legal Bases
Processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract (art. 6 point. 1, lett. (b) GDRP)
4.
Purposes
Transmission of commercial communications and information about news, promotions and offers related to the Service.
Legal Bases
The User’s consent to the processing of his or her personal data for one or more specific purpose, freely given and which can be withdrawn at any time.
5.
Purposes
To enable the Controller to establish, exercise or defend its rights in or out of court or in connection with any dispute or controversy.
Legal Bases
Processing is necessary for the establishment, exercise or defence of legal claims (art.17, point.3, lett. (e) GDPR).
6.
Purposes
Monitoring the proper functioning of the Website in order to carry out interventions and updates, and to provide a better browsing experience.
Legal Bases
Processing is necessary for the purpose of the legitimate interests pursued by the Controller (art. 6 point. 1 lett. (f) GDPR).
7.
Purposes
Carrying out statistical research/analysis on aggregated or anonymous data, aimed at measuring the functioning of the Website, data traffic, interactions.
Legal Bases
Processing is necessary for the purpose of the legitimate interests pursued by the Controller (art. 6, point. 1 lett. (f) GDPR
Purposes
Legal Bases
1. Allowing navigation on the Website, access to its pages and sections, use of its functions and services.
2. Allow the Controller to respond to requests from administrative, judicial or public security authorities.
3. Fulfilling User’s requests for contact or transmission of information through interaction with the Website.
4. Transmission of commercial communications and information about news, promotions and offers related to the Service.
5. To enable the Controller to establish, exercise or defend its rights in or out of court or in connection with any dispute or controversy.
6. Monitoring the proper functioning of the Website in order to carry out interventions and updates, and to provide a better browsing experience.
7. Carrying out statistical research/analysis on aggregated or anonymous data, aimed at measuring the functioning of the Website, data traffic, interactions.
Processing is necessary for the purpose of the legitimate interests pursued by the Controller (art. 6 point. 1 lett (f) GDPR).
Processing is necessary for compliance with a legal obligation to which the Controller is subject (art. 6, point. 1 lett (c) GDPR).
Processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract (art. 6 point. 1, lett. (b) GDRP)
The User’s consent to the processing of his or her personal data for one or more specific purpose, freely given and which can be withdrawn at any time.
Processing is necessary for the establishment, exercise or defence of legal claims (art.17, point.3, lett. (e) GDPR).
Processing is necessary for the purpose of the legitimate interests pursued by the Controller (art. 6 point. 1 lett. (f) GDPR).
Processing is necessary for the purpose of the legitimate interests pursued by the Controller (art. 6, point. 1 lett. (f) GDPR
5. Categories of recipients of the Personal Data
In order to fulfil the above-mentioned purposes, Users’ Personal Data will also be processed by third parties other than the Data Controller. These subjects will process the personal data of the Users both on behalf of the Data Controller (therefore, in their capacity as data processors), and as autonomous data controllers, upon specific communication by the Data Controller.
Specifically, the following categories of recipients will process Personal Data
a) suppliers of services necessary for the proper functioning of the Website and its functions/services (by way of example but not limited to, ICT service providers, hosting service providers, suppliers of IT platforms and applications);
b) jurisdictional, administrative and/or public safety authorities, in accordance with legal provisions;
c) consultants appointed by the Data Controller
d) communication and marketing service providers.
6. Transfer of personal data outside the European Union Area
There will be no transfer of personal data outside the European Union Area.
7. Data retention
Users’ Personal Data will be stored for a variable period depending on the type and purpose of processing:
a) Data relating to navigation on the Website and/or the devices used will be retained for a maximum of 7 (seven) days, except in cases where they are used to establish liability in the event of offences against the Website or third parties;
b) name, surname, e-mail addresses and any other data provided by the User to the Data Controller will be kept only for the time necessary to provide the services requested by the User and deleted at the latter’s request.
If, at the end of the above-mentioned period, Personal Data should be processed for specific purposes (e.g. to protect the rights of the Data Controller in the context of a dispute), they will be retained until said purposes have been exhausted (e.g. until the dispute has been settled). Following the conclusion of the specified retention periods, the Data Controller will proceed with the deletion or anonymisation of the User’s Personal Data.
8. Rights of the Data Subject
The User has the right to exercise the following rights regarding his or her Personal Data at any time by sending a communication to the address mentioned in Article 1. These rights are set out in the GDPR (Articles 15-22):
a) The right of access to the following data and information (art. 15):
– the purposes of the processing;
– the categories of personal data concerned;
– the recipients or categories of recipient to whom the personal data have been or will be disclosed;
– the envisaged period for which the personal data will be stored, or, if not possible, the criteria used to determine that period;
– the right to lodge a complaint with a supervisory authority;
– the existence of automated decision-making, including profiling, and information about the logic involved, as well as the significance and the envisaged consequences of such processing for the data subject.
b) The right to obtain from the controller without undue delay the rectification of inaccurate personal data concerning him or her or to have incomplete personal data completed (art. 16);
c) The right to obtain from the controller the erasure of personal data concerning him or her without undue delay (art. 17);
d) The right to obtain from the controller restriction of processing (art. 18);
e) The data subject shall have the right to receive the personal data concerning him or her, which he or she has provided to a controller, in a structured, commonly used and machine-readable format and have the right to transmit those data to another controller without hindrance from the controller to which the personal data have been provided, where: the processing is based on consent pursuant to point (a) of Article 6(1) or point (a) of Article 9(2) or on a contract pursuant to point (b) of Article 6(1); and the processing is carried out by automated means (art. 20);
f) right to object, on grounds relating to his or her particular situation, at any time to processing of personal data concerning him or her which is based on point (e) or (f) of Article 6(1), unless the controller demonstrates compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject or for the establishment, exercise or defence of legal claims (art. 21).
The Controller shall comply with requests without undue delay.
9. Amendments and updates to the Policy
The Data Controller will inform the Users of any amendments to this policy (e.g. by means of appropriate notices on the homepage of the Website).
Contact us
BOOKING
(WORLDWIDE)
CHC
info@cosimoandthehotcoals.it
+39 333 590 8410
ADV &
COLLABORATIONS
Fermento Studio
hello@fermentostudio.com
+39 349 385 4824
Contact us
BOOKING
(WORLDWIDe)
CHC
info@cosimoandthehotcoals.it
+39 333 590 8410
ADV &
COLLABORATIONS
Fermento Studio
hello@fermentostudio.com
+39 349 385 4824
