top of page

PRIVACY

In carrying out its activities, CARLO TUZZI processes personal data, in compliance with all applicable laws and contractual provisions, using methods based on principles of correctness, lawfulness and transparency, protecting the privacy of the data subject and his / her rights.

​

1. JOINT DATA CONTROLLER

With this document, CARLO TUZZI – as Joint Data Controller processing personal data – pursuant to art. 13 and EU Regulation 679/2016, intends to provide all information related to its use of personal data of the users of the website (hereinafter, “User/Users“) https://www.carlotuzzi.com (hereafter, “Website“).

​

Joint Data Controllers

Carlo Tuzzi., vat number 01880110307, with registered office in Via P.Zorutti 62 Corno di Rosazzo 33040 (UD)
All belonging to  Carlo Tuzzi (hereinafter jointly the “Joint Data Controllers”) and singularly “Joint Data Controller”).
 

2. TYPES OF DATA COLLECTED

a) Navigation data: the personal data that the computer systems and software procedures, used to operate this Website, acquire during their ordinary operations and whose transmission is implied in the use of Internet communication protocols. This information is not collected to be associated with identified data users but rather to be used through processing and association with data held by third parties to identify the related users. This category of data includes: IP addresses or domain names of the computers used by users who connect to the Website, the addresses in the Uniform Resource Identifier (URI) notation of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (success, error, etc.) and other parameters relating to the operating system and the user’s IT environment. This data is used for the sole purpose of obtaining anonymous statistical information on the use of the Website and to check its correct functioning and they is deleted immediately after processing. The data could be used to ascertain responsibility in case of a hypothetical IT crime which may result in a damage of the Website; apart from this eventuality, this data is not stored for more than seven days.

b) Data provided voluntarily by the User by sending an email to carlotuzzi@gmail.com  or to any other email addresses listed in the section “CONTACTS” of the Website: when sending an email the User data will be processed for the sole purpose of replying to the request and fulfilling the related administrative obligations. The data that will be processed is: name, e-mail and any other personal data voluntarily shared by the User.

​

3. PURPOSES AND LEGAL BASIS OF THE DATA PROCESSING

User’s data collected are processed by the Joint Data Controller to:

  • ENSURE THE CORRECT FUNCTIONING OF THE WEBSITE, which is the legitimate interest of the Joint Data Controller to ensure the safety of the Website and the information exchanged therein, which means also the capacity of such Website to resist – at a given level of security – to unforeseen events or illicit or malicious acts that may compromise the availability, authenticity, integrity and confidentiality of the personal data stored or transmitted and the security of the related services offered or made accessible. The related legal basis is art. 6, par. 1 lett. f) of GDPR.

  • MANAGE THE CONTACT REQUEST, which means to reply to the requests submitted by the data subject. The related legal basis is art. 6, par. 1, lett. b) of GDPR, being the processing of her/his personal data necessary for the execution of the contract of which the data subject is a party;

  • SEND COMMUNICATIONS, INVITATIONS TO EVENTS/WORKSHOP OF THE JOINT DATA CONTROLLER, only if the data subject has expressed explicit consent to receive invitations to events organized by the Joint Data Controller or to send communications related to the activities of the Joint Data Controller. The related legal basis is art. 6, lett. A) of GDPR (consent of the data subject);

  • EVALUATE PROFESSIONAL PROFILES received through spontaneous candidature of a data subject with the intent to offer possible professional collaboration. The related legal basis is art. 6, par. 1, lett. b) of GDPR.

  • ​

4. MANDATORY/OPTIONAL NATURE OF THE PROVISION OF DATA

The provision of the data described in point 2, lett. b) is optional. In case of no provision, however, the User will not be able to use the contact service.

The provision of the data described in point 2, lett. c) is optional. The User can withdraw his consent at any time and without indicating the reasons. The easiest way to do this is to click on the “Unsubscribe” link, which is available in every communication received.
The provision of the data described in point 1, lett. d) is optional. Refusal to processing, however, would make any follow up for the evaluation of the User’s possible collaboration impossible.

​

5. MODE OF PROCESSING THE DATA

Data processing will be carried out both on paper and electronically with the help of modern computer systems by persons expressly appointed for this purpose. The processing will take place with logic and through forms of organization of data strictly related to the obligations, tasks or purposes mentioned above. The Joint Data Controller uses technical and organizational measures to protect the data in his possession from manipulation, loss, destruction and against access by unauthorized persons. Security measures are constantly improved on the basis of technological development.

​

7. RETENTION TIME

Personal Data shall be processed and stored as long as required for the purpose they have been collected for.
For the purposes referred to in art. 2) a) and b) herein, personal data will be processed for the period strictly necessary to the pursuit of the aforementioned objectives and, subsequently, to the fulfillment of legal obligations and/or for defensive purposes.
The data provided for commercial communications activities, opinion polls and market researches will be stored until the request by the data subject to interrupt such activity or up to a maximum of 2 years.
Therefore:
Once the retention period expires, Personal Data will be deleted. Therefore, the right to access, the right to delete, the right to rectification and the right to data portability cannot be enforced after expiration of the retention period.

 

8. USER’S RIGHTS

Users are entitled to know their rights, essentially consisting in the right to receive from other contractual parties’ information about the existence of the processing of their personal data, as well as access to their data, to obtain rectification, integration, update, erasure or block of their data. Furthermore, the User will also have the right to obtain a copy of his data, to limit or deny the process of the personal data, as well as the right to data portability and to submit complaints to the competent control Authorities at the conditions and within the limits indicated in art. 13 of the GDPR.
Pursuant to articles 15 and following of the GDPR, each data subject has the right to the following rights:

  • Right to be informed

  • Right of access to the data

  • Right to rectification

  • Right to erasure (‘right to be forgotten’)

  • Right to restriction of processing

  • Right to data portability

  • Right to object

The data subject can therefore know what personal data is held by the Joint Data Controller, its origin and how it is are used, can request its updating, correction or integration and, in the cases provided by the provisions in force, can also request the cancellation, the limitation of treatment or oppose to their treatment. Each data subject may, if he wishes, request to receive a copy of the personal data held by the Joint Data Controller in a format readable by electronic devices and, where technically possible, the Joint Data Controller may transfer the data directly to a third party indicated by the data subject.

If the user believes that the processing of his/her personal data has been carried out illegitimately, he/she can file a complaint with one of the competent control Authorities in charge of compliance of the rules on the protection of personal data. In Italy, any related complaint can be filed to the Garante per la Protezione dei Dati Personali (http://www.garanteprivacy.it/).

 

9. EXERCISE OF RIGHTS

To exercise the aforementioned rights, Users can send a communication to the following email address –carlotuzzi@gmail.com, indicating the subject “Privacy – exercise of rights”.

This Privacy Policy was published on June 2019. Any updates will always be published on this page.

bottom of page