Reg. UE 2016/679
(GDPR)

1. Introduction

This privacy policy (“Privacy Policy”) describes the personal data processing activities carried out by Ilaria Ceccanti (the “Controller”) through the “Contacts” section.

2. Data Controller

The Data Controller is Ilaria Ceccanti, Fiscal code  CCCLRI93A50G702U, VAT number 07396320488, with registered office at Piaggione 13, 50124 Firenze (FI) Italy, certified email address: ilaria.ceccanti@pec.it

3. Type of data processed

Personal data provided by the user when sending a request through the “Contacts” section by sending an email to contact.ceccantidesign@gmail.com. These personal data might be name and surname, address, contact information (email address, telephone number), and any other personal data entered by the user.

4. Legal basis, purposes, and methods of data processing

The Data Controller shall process personal data in order to respond to the requests submitted by the user. The legal basis for processing is the implementation of pre-contractual measures and contractual obligations.

Personal data may be processed electronically and on paper format. The processing is not carried out using automated decision-making processes.

5. Retention of Personal Data

Personal data is stored and processed using IT systems owned by the Data Controller, including through applications owned and/or managed by third-party providers.

In accordance with EU Regulation 2016/679, data is retained for the period strictly necessary to respond to the user’s request and to fulfill any contractual obligations arising from the request received.

6. Scope of Communication and Access to Data

The user’s personal data may be disclosed to: i) all parties who may have access to such data pursuant to regulatory provisions; ii) partners or employees of the data controller, within the scope of their respective duties; iii) third parties who need to access the personal data for the purposes of carrying out the activities for which they have been appointed by the Data Controller.

The processed data shall not be transferred by the Controller outside the European Union. Should the transfer to third countries be necessary, it will be carried out in accordance with the provisions of EU Regulation 2016/679. 

7. Nature of collection of personal data

The collection of certain personal data is needed in order to allow the Controller to process the user’s request (e.g., first and last name or company name; contact information). Failure to provide such personal data will prevent the request from being processed. Conversely, the collection of other data is optional; failure to provide it will not have any consequences for the user and the request shall be processed.

8. Rights of the Data Subject

Pursuant to Articles 15 et seq. of the GDPR, the data subject has the right to obtain from the data controller, with reference to each specific processing operation, confirmation as to whether or not personal data concerning him or her are being processed, and, if so, access to the personal data and information relating to the processing, as well as rectification of that information.

Furthermore, the data subject has the right to obtain from the data controller: i) the erasure of personal data concerning him or her; ii) restriction of processing where one of the conditions set forth in the aforementioned legislation applies; iii) the personal data undergoing processing in a structured, commonly used, and machine-readable format (portability).

These rights may be exercised by sending an email to ilaria.ceccanti@pec.it, attaching a copy of your ID.  Before proceeding with the processing of your request, it may be necessary to verify your identity and answer some questions.