Privacy information pursuant to EU Reg. 2016/679 (European Regulation on the protection of personal data) and Legislative Decree 30 June 2003 n. 196 (Personal data protection code)
Data Controller
The Data Controller is Andrea Lughi.
Type of data processed
Visiting and consulting the Site do not generally involve the collection and processing of the user’s personal data except for navigation data and cookies as specified below.
The computer systems and software procedures used to operate this website acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols.
This data (such as for example domain names, IP addresses, operating system used, type of browser device used for the connection) is not accompanied by any additional personal information and is used to obtain anonymous statistical information on the use of the site, manage needs to control the methods of use of the same or ascertain responsibility in case of hypothetical computer crimes.
This is information that is not collected to be associated with identified interested parties, but which by its very nature could, through processing and association with data held by third parties, allow users to be identified. These data are used for the sole purpose of obtaining anonymous statistical information on the use of the site and to check its correct functioning and are deleted immediately after processing.
Legal basis of processing
The processing carried out is based on a legitimate interest of the Data Controller, such as ensuring the correct functioning of the web pages and their contents.
Contact Form
The user who wishes to request information can send a communication using the appropriate online form on the contact page. The data provided is only name, telephone and email address. The purpose is to be able to provide you with the requested information. In this case the legal basis of the processing is your consent.
Data recipients
Within the limits pertinent to the indicated processing purposes, your data may be communicated to partners, consultancy firms, private companies, appointed as Managers by the Data Controller. Your data will not be disclosed in any way.
Transfer of data abroad
This site may share some of the data collected with services located outside the European Union area. In particular with Google, Facebook through social plugins and the Google Analytics service. The transfer is authorized on the basis of specific decisions of the European Union and of the Guarantor for the protection of personal data for which no further consent is required. The companies mentioned above guarantee their adherence to the Privacy Shield.
Shelf life
The data collected will be kept for a period of time not exceeding the achievement of the purposes for which they are processed and/or until the end of the legal obligation if applicable.
Whether or not the provision of data is obligatory
The provision of personal data following navigation on the site is mandatory for the correct functioning of the site itself. Consent for sending the contact form is optional, but essential to be able to send you the requested information.
Rights of the interested party
At any time you may request, by writing to the address of the owner of this site, access to your personal data, rectification or cancellation of the same or simply the limitation of their processing (anonymisation) or lodge a complaint with the Guarantor Authority for Data Protection, if you believe your rights have been violated.
As an interested party, you have the right to obtain confirmation from the data controller as to whether or not personal data concerning you is being processed and, in this case, to obtain access to the personal data and the following information:
a) the purposes of the processing;
b) the categories of personal data in question;
c) the recipients or categories of recipients to whom the personal data have been or will be communicated, in particular if recipients are from third countries or international organisations;
d) the expected retention period of personal data or the criteria used to determine this period;
e) the right to ask the data controller to rectify or delete personal data or limit the processing of personal data concerning you or to oppose their processing;
f) the right to lodge a complaint with a supervisory authority;
h) the existence of an automated decision-making process, including profiling and, at least in such cases, significant information on the logic used, as well as the importance and expected consequences of such processing for the interested party.
Right referred to in art. 17 of EU Reg. 2016/679 – right to cancellation (“right to be forgotten”)
The interested party has the right to obtain from the data controller the deletion of personal data concerning him without unjustified delay and the data controller has the obligation to delete the personal data without unjustified delay, except for legal obligations, if one of the following reasons:
a) the personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed;
b) the interested party revokes the consent on which the processing is based and if there is no other legal basis for the processing;
c) the interested party opposes the processing and there is no overriding legitimate reason to proceed with the processing, or opposes the processing;
d) the personal data have been processed unlawfully;
e) the personal data must be erased to comply with a legal obligation under Union or Member State law to which the data controller is subject;
f) the personal data were collected in relation to the offer of information society services.
Right referred to in art. 18 Right to restriction of processing
The interested party has the right to obtain from the data controller the limitation of processing when one of the following hypotheses occurs:
a) the interested party disputes the accuracy of the personal data, for the period necessary for the data controller to verify the accuracy of such personal data;
b) the processing is unlawful and the interested party opposes the deletion of the personal data and instead requests that their use be limited;
c) although the data controller no longer needs them for the purposes of the processing, the personal data are necessary for the interested party to ascertain, exercise or defend a right in court;
d) the interested party has objected to the processing pursuant to Article 21, paragraph 1, EU Regulation 2016/679 pending verification of the possible prevalence of the legitimate reasons of the data controller with respect to those of the interested party.
Right referred to in art.20 Right to data portability
The interested party has the right to receive the personal data concerning him/her provided to a data controller in a structured, commonly used and machine-readable format and has the right to transmit such data to another data controller without impediments from part of the data controller. This activity could be costly for the interested party.
If you wish to have more information on the processing of your personal data, you can write to allcards@all-cards.net. Before we can provide you with, or change any information, we may need to verify your identity and answer some questions. An answer will be provided as soon as possible.
