This Privacy Policy is provided pursuant to:

• Regulation (EU) 2016/679 (“GDPR”)
• Legislative Decree No. 196/2003, as amended by Legislative Decree No. 101/2018
• California Consumer Privacy Act (“CCPA”), as amended by the California Privacy Rights Act (“CPRA”)

It also follows the principles set out in Recommendation No. 2/2001 of the Article 29 Working Party.

This policy describes how personal data of users who browse or interact with this website are collected, processed, and protected.

• Identity of the Data Controller
• Contact methods
• Categories of personal data collected
• Purposes and legal bases of processing
• User rights under GDPR and CCPA

Data Controller
Sara Barni
Via della Casciaia, 14
59021 Vaiano (PO) – Italy
Tel. +39 3477923702
VAT No. (IT) 02308060975
Tax Code: BRNSRA81E47G999O
Email: [email protected]
PEC: [email protected]

Contact Details

Users may contact the Data Controller through the contact form available on the website, by email, telephone, or using the contact details published on the site.

Categories of Personal Data Collected

• Identification and contact data (name, email address, PEC email, postal address, telephone number)
• Information voluntarily provided via contact forms or direct communications
• Any additional data freely provided by the user, which may include special categories of data under Art. 9 GDPR

Navigation Data

Computer systems and software procedures used to operate this website acquire certain personal data during normal operation.
These data are processed in anonymous and aggregated form for statistical purposes and to ensure proper functioning of the website.

Optional Nature of Data Provision

The provision of personal data is optional; however, failure to provide required data may result in the inability to deliver requested services.

Legal Basis for Processing (GDPR)

• Performance of a contract or pre-contractual measures
• User consent
• Compliance with legal obligations
• Legitimate interests of the Data Controller, where applicable

Processing Methods

Personal data are processed using electronic and manual tools, in compliance with security measures required by applicable laws.
Appropriate technical and organizational measures are implemented to protect personal data against unauthorized access, loss, alteration, or disclosure.

Personal data may be stored on servers located within the European Union and, where necessary, outside the EU, in compliance with GDPR provisions on international data transfers (e.g., adequacy decisions, Standard Contractual Clauses).

Purposes of Data Processing

• Responding to user inquiries
• Providing quotes, projects, and services
• Requesting additional information when necessary
• Sending newsletters, promotional communications, events, and updates (subject to user consent)

Users may withdraw consent to marketing communications at any time by contacting: [email protected]

Data Retention

Personal data will be retained only for the time strictly necessary to fulfill the purposes for which they were collected, unless a longer retention period is required or permitted by law.

Disclosure of Data to Third Parties

Personal data will not be disclosed to third parties without explicit consent, except in the following cases:

• Service providers acting as Data Processors (e.g., hosting, accounting, IT services)
• Legal obligations or requests by public authorities
• Business transfers or corporate restructuring

Despite security measures adopted, no system can guarantee absolute security of data transmitted via the Internet.

Cookies and Tracking Technologies

This website uses technical cookies and third-party cookies.
For more information, please consult the Cookies Policy.

Third-Party Plugins and External Links

This website may include plugins or links to third-party websites.
The Data Controller is not responsible for the privacy practices of such third parties. Users are encouraged to review their privacy policies.

Your Rights under GDPR

• Right of access
• Right to rectification
• Right to erasure (“right to be forgotten”)
• Right to restriction of processing
• Right to data portability
• Right to object to processing
• Right to withdraw consent at any time
• Right to lodge a complaint with a supervisory authority

California Residents’ Rights (CCPA/CPRA)

If you are a California resident, you have the right to:

• Know what personal information is collected, used, shared, or sold
• Request deletion of your personal information
• Request correction of inaccurate personal information
• Opt out of the sale or sharing of personal information
• Limit the use of sensitive personal information
• Not be discriminated against for exercising your rights

This website does not sell personal information as defined under the CCPA.

Requests may be submitted by contacting: [email protected]

Minors

This website is not intended for individuals under 18 years of age.
We do not knowingly collect personal data from minors.

Changes to This Privacy Policy

The Data Controller reserves the right to modify this Privacy Policy at any time to comply with legal or regulatory requirements.
Users are encouraged to review this page periodically. Continued use of the website constitutes acceptance of the updated policy.