PRIVACY POLICY - PRIVACY INFORMATION

INFORMATION ON THE PROCESSING OF PERSONAL DATA PURSUANT TO ART. 13 OF REGULATION (EU) 2016/679

RELATING TO THE WEBSITEit-ad “www.olioinstillo.it“

Eligio Palmieri, (hereinafter also “Owner”) with this information describes the management methods of the website www.olioinstillo.it (hereinafter also “Site”) in reference to the processing of personal data of users who interact with web services, accessible electronically, starting from the address of the site. “Personal Data” means any information concerning an identified or identifiable natural person (hereinafter “interested party”). An identifiable natural person is one who can be identified, directly or indirectly, with particular reference to data such as a name, an identification number, location data, an online identifier or to one or more elements characteristic of his or her physical, physiological, genetic, mental, economic, cultural or social identity. Therefore, the personal data provided will be processed in compliance with the provisions of the European Regulation for the protection of personal data n. 679/2016 GDPR and the national legislation Legislative Decree 30 June 2003 n. 196, updated to Legislative Decree 101/2018 and subsequent amendments. According to this regulatory framework, the processing carried out by the Data Controller will be based on the principles of lawfulness, correctness, transparency, limitation of purposes and conservation, data minimization, accuracy, integrity and confidentiality.

The purpose of this information is to make known the purposes for which the data are processed, the methods of processing, sharing and storage times, as well as to inform the interested parties who browse the site, about their rights and their exercise. The information is provided exclusively for the site in question and does not concern other web pages that may be consulted via connected links.

DATA CONTROLLER

Eligio Palmieri is the Data Controller of personal data in relation to its activities (hereinafter “Data Controller”). You may contact the Data Controller at any time to exercise the rights as specified in this document by referring to the following contact details:

Address: Via Arenella, Faicchio (Bn)

mail: olioinstillo@gmail.com

While browsing our site, the following categories of personal data are collected and processed:

NAVIGATION DATA

The computer systems and software procedures used to consult this website acquire, during their normal operation, some identifying data whose transmission is implicit in the use of Internet communication protocols. This information is not collected to be associated with identified interested parties, but by its very nature could, through processing and association with data held by third parties, allow users to be identified. This category of data includes the IP addresses or domain names of the computers used by users who connect to the site, the URI (Uniform Resource Identifier) ​​addresses of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters relating to the operating system and the user's IT environment. The data thus collected could be used to ascertain responsibility in the event of any computer crimes against the Site or third parties: except for this eventuality, at present the data on web contacts do not persist for more than seven days.

DATA PROVIDED VOLUNTARILY

Through specific sections of the Site, such as the “contacts” section, you have the possibility to voluntarily provide personal data, such as personal details and contact information (email address and telephone number), as well as additional personal data provided directly from the interested party’s CV in the “work with us” section. This information could also be provided by sending emails to the addresses indicated on this site. In any case, the data provided will be processed in compliance with current legislation, assuming that they refer to the user or to third parties who have expressly authorized them to be provided on the basis of an appropriate legal basis that legitimises the processing of the data in question. Any special data pursuant to art. 9.1 Reg. 2016/679/EU should not be processed without the explicit consent of the interested party. If personal data of third parties are communicated to Eligio Palmieri, it will be mandatory to guarantee – assuming all responsibility – that this particular hypothesis of processing is based on an appropriate legal basis pursuant to art. 6 of the Regulation, which legitimises the communication to Eligio Palmieri and the related processing of the information in question.

DATA OF MINOR AGE USERS

The site is not intended for minors and does not intentionally collect personal data from them. Without prejudice to the above, processing is lawful only if and to the extent that consent, if required, is given or authorized by the holder of parental responsibility for whom the identification data and a copy of identification documents must be acquired.

COOKIES

With regard to cookies, please refer to the extended policy on the site and available here: cookie policy.

PURPOSE AND LEGAL BASIS OF THE PROCESSING.

Personal data, for the purposes strictly necessary for consulting the site, will be processed using IT/telematic tools, will be processed in an automated form and collected in an exclusively aggregated form in order to verify the correct functioning of the site, as well as for security reasons. The data will be processed using tools and methods aimed at ensuring the confidentiality and security of the data, and in compliance with the national and European legislation in force on the matter. Specific security measures are observed to prevent the loss of data, illicit or incorrect use and unauthorized access. With the exception of navigation data, necessary to implement IT and telematic protocols, we will process personal data mainly to allow the provision of the requested service, such as for example:

• Registration on the site;

• provide assistance and respond to requests received;

• collection and analysis of CVs for collaboration purposes;

• registration for events, conferences and initiatives organised by Eligio Palmieri;

• perform a contract to which the user is a party or to carry out pre-contractual measures;

• send commercial communications to the email address provided, if you are already our customer, relating to services and/or products of the Data Controller similar to those already purchased by the user;

• comply with legal obligations, regulations and orders of the Authorities (prescriptions dictated by national and community regulations as well as provisions issued by Supervisory and Control Bodies, also for the purpose of ascertaining responsibility in the event of computer crimes against the site);

• assert or defend rights in court, in the event of abuse in the use of the Site and/or our Services or for disputes of a contractual or extra-contractual nature;

The legal basis for the processing of personal data for the purposes envisaged for the provision of services or for the response to requests from the interested party is art. 6.1.b) of the Regulation as the processing is necessary. The provision of personal data for these purposes is optional but any failure to provide it would make it impossible to activate the services provided by the Site. In the event that the user is already a customer of Eligio Palmieri, the data provided could be processed for the purpose of directly sending commercial communications in relation to Eligio Palmieri services similar to those already purchased, without the need for consent (so-called “soft spam”) as the legal basis for this processing purpose is the legitimate interest referred to in art. 6.1.f) of the Regulation and in art. 130 paragraph 4 of Legislative Decree 196/2003.

In any case, pursuant to art. 21 of the Regulation, the interested party has the possibility to oppose such processing at any time, initially or on the occasion of subsequent communications, easily and free of charge also by writing to the Data Controller at the addresses indicated above, as well as to obtain immediate feedback confirming the interruption of such processing (art. 15 of the Regulation). If an informative newsletter service is activated, the data will be processed exclusively after obtaining explicit consent. Furthermore, each email sent will allow, by clicking on the appropriate link, to refuse further sendings.

RECIPIENTS OF PERSONAL DATA.

Personal data are processed by the Data Controller's collaborators and consultants who are given suitable instructions regarding measures, precautions, modus operandi, all aimed at the concrete protection of personal data. Exclusively for the purposes related to the execution of the requested service, personal data may be communicated only to other subjects, service providers. These subjects will process the data as Data Processors pursuant to art. 28 of the GDPR, if they carry out the processing on behalf of Eligio Palmieri, or as Data Controllers, where the processing is carried out by them independently. Other subjects may access the data exclusively by virtue of provisions of law, regulations and standards. The data may also be communicated to agents or intermediaries of the Data Controller to satisfy the requests received and offer a better and faster service.

TRANSFER OF PERSONAL DATA OUTSIDE THE EU.

The data is located in Italy and is not transferred to companies located outside the European Union.

RETENTION PERIOD.

Personal data will be retained for the time necessary to achieve the purposes for which they were collected.

Upon expiration of the indicated terms, the data may be anonymized and may be processed for statistical purposes, if necessary.

Browsing data: the computer systems and software procedures used to operate this website acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols. These data are used for the sole purpose of obtaining statistical information on the use of the site and to check its correct functioning and are deleted after processing or in any case at the end of the session;

Data provided voluntarily by the user: the optional, explicit and voluntary sending of electronic mail to the addresses indicated and the completion of the contact form on this site entails the subsequent acquisition of the sender's email address, necessary to respond to requests, as well as any other personal data included in the message. Such data is retained for the time necessary to process the requests received. After these terms, the data will be deleted, unless it is necessary to retain it for other and different purposes provided for by express provision of law (e.g. obligation to retain). The data retention time is set for a maximum period of 24 months from the last contact had;

Data provided for newsletter subscription: except in cases of early withdrawal of consent, the data will be retained for a period of 24 months;

Cookies: please refer to the specific policy on the website.

RIGHTS OF THE INTERESTED PARTY.

The rights of the interested party are provided for by articles 15-22 of the GDPR. In particular they are:

• Right of access: request at any time that information be provided on your personal data. This information refers to the categories of data processed by the Data Controller, the purposes of the processing, the source of the data in the event that they are not obtained directly from the interested party, as well as the recipients to whom the Data Controller may have transferred the data;

• Right to rectification: request a rectification of personal data. The Data Controller will adopt adequate and targeted measures to ensure that the data stored and processed continuously are kept correct, complete, updated and relevant, based on the most recent information received;

• Right to erasure: request the erasure of data, provided that the relevant conditions provided for by the Law exist. For example, this could occur if the data are no longer necessary in relation to the purposes for which they were collected or otherwise processed; in the event of revocation of the consent on which the data processing is based, and there is no other legal basis for the processing; in the event of opposition to the processing of data and there are no prevailing legitimate reasons to proceed with the processing, or in opposition to the processing of data for direct marketing purposes;

• Right to restriction of processing: request a restriction of the processing of your data if it is not accurate or no longer necessary;

• Right to object: possibility to object at any time to the processing of data, where it does not conflict with current legislation and if there are no legitimate interests of the Data Controller necessary, for example, to ascertain, exercise or defend a right in court;

• Right to data portability: possibility of receiving a copy of the data, previously provided, expressly requested by the Data Controller who will undertake to transfer them, where this is technically possible, to another Data Controller indicated.

Furthermore, the user is informed of the right to:

• Revoke your consent at any time: if the processing is based on consent, without prejudice to the lawfulness of the processing based on the consent given before the revocation.

• To lodge a complaint: in the event that the user believes that his/her personal data is not being processed in compliance with current legislation, he/she may lodge a complaint with the Guarantor for the protection of Personal Data or, alternatively, appeal to the competent Judicial Authority.

To exercise the rights, the interested party may address a request to the contact details of the Data Controller indicated in this policy. The Data Controller undertakes to manage all requests in a reasonable period and, indicatively, within 30 days, unless an extension is motivatedly indicated and communicated;

To facilitate the exercise of rights by the interested party, it is possible to use the template prepared and downloadable here.

DECISION MAKING PROCESS

The Data Controller has not activated any decision-making process based solely on automated processing, including profiling.

SECURITY OF TREATMENT

The Data Controller will process personal data based on the security obligations relating to data processing pursuant to the GDPR. In order to guarantee an adequate level of data protection aimed at limiting the risk of their improper or illicit use, technical and organizational measures have been implemented that comply with internationally recognized IT standards. These measures are constantly subject to verification.

CHANGES

This information is visible via a link at the bottom of the website page pursuant to art. 122 of Legislative Decree 196/2003, as amended by Legislative Decree 101/2018 and in compliance with EU Regulation 679/2016. The content will be constantly updated by the Data Controller, therefore it is advisable to regularly check this page before providing personal data.

Policy generated on: January 2025