INFORMATION ON THE PROCESSING OF PERSONAL DATA
pursuant to Articles 13 and 14 of Regulation (EU) 2016/679
Studio Giusti di Valeria Giusti (hereinafter also the “Data Controller”), in its capacity as Data Controller of personal data, informs users who consult this website about the methods of processing personal data carried out through the services and features available therein.
The processing of personal data is carried out in compliance with the principles of lawfulness, fairness, transparency, minimization, accuracy, storage limitation, integrity, and confidentiality provided for by Regulation (EU) 2016/679 (“GDPR”) and current national legislation.
- Data Controller
The Data Controller is Studio Giusti di Valeria Giusti, with registered office in Via XXV Aprile n. 1, 56028 Ponte a Egola (PI), VAT number 02150320501.
For any information relating to the processing of personal data or to exercise the rights recognized by the GDPR, you can contact the Data Controller at the e-mail address: info@valeriagiusti.it.
- Types of data processed
The simple consultation of the site involves the processing of certain personal data whose transmission is implicit in the use of Internet communication protocols.
This category includes, by way of example, IP addresses, identifiers of the devices used, the browser and operating system employed, the date and time of the request, the pages visited, the identifiers of the requested resources, as well as further technical data necessary for the correct functioning of the site.
If the user uses the contact form on the site, the personal data voluntarily provided, such as name, surname, e-mail address, telephone number, and the content of the communication sent, will also be processed.
In the case of access to the reserved area, the data necessary for the creation and management of the account, authentication credentials, logins made, and documentation made available within the personal area will be processed.
The site is not intended for the intentional collection of special categories of personal data pursuant to Art. 9 of the GDPR. Should such information be spontaneously communicated by the user, it will be processed exclusively to the extent strictly necessary for the management of the request made.
- Purposes of the processing
Personal data are processed to allow navigation on the website and ensure its correct technical functioning, manage requests made by users through the contact form, allow registration and access to the reserved area, permit the consultation and download of documentation reserved for authorized users, ensure the security of the IT infrastructure and prevent illicit or fraudulent use of the site, fulfill the obligations provided for by current legislation, and protect the rights of the Data Controller in administrative, judicial, or extrajudicial settings.
Subject to the user’s consent expressed through the cookie banner, the site also uses Google Analytics 4 exclusively for statistical purposes and analysis of site usage.
- Legal basis for processing
The processing of personal data is based, depending on the purposes pursued, on the execution of pre-contractual measures adopted at the request of the data subject, on the execution of a contract or services requested by the user, on the fulfillment of legal obligations to which the Data Controller is subject, on the pursuit of the legitimate interest of the Data Controller in the security of the site and IT systems, as well as, limited to the use of cookies and non-technical analysis tools, on the consent freely expressed by the data subject.
- Processing methods
The processing of personal data is carried out using IT, telematic and, where necessary, paper tools, adopting technical and organizational measures adequate to guarantee a level of security appropriate to the risk, pursuant to Art. 32 of Regulation (EU) 2016/679.
The data are processed exclusively by authorized persons or by service providers specifically appointed as Data Processors pursuant to Art. 28 of the GDPR, where applicable.
- Reserved area
The site provides authorized users with a reserved area intended for the consultation and download of personal documentation.
Access is via individual authentication credentials, which must be kept with the utmost diligence by the user and cannot be communicated to third parties.
The reserved area is managed using the WP Customer Area plugin.
The WooCommerce plugin is used exclusively as a technical component necessary for assigning roles to registered users and is not used for e-commerce activities, order management, or payments.
- Site security
To ensure site security and prevent improper or automated use of contact forms, the WP Armour Honeypot system is used, which allows for countering spam without resorting to external verification services based on user profiling.
The site also adopts suitable technical and organizational measures aimed at preventing unauthorized access, loss, alteration, or disclosure of the personal data processed.
- Google Analytics 4
Subject to the consent expressed by the user via the cookie banner, the site uses Google Analytics 4, configured through the Google Site Kit plugin, for the sole purpose of collecting aggregated statistical data relating to the use of the website.
The service is activated only after consent is given and is not used by the Data Controller for user profiling activities or for the adoption of automated decisions.
The user can revoke consent at any time through the cookie preference management panel.
- Recipients of the data
Personal data may be processed by personnel authorized by the Data Controller and by entities providing services functional to the management of the website, the IT infrastructure, hosting, application maintenance, and technical assistance, appointed, where applicable, as Data Processors pursuant to Art. 28 of the GDPR.
If the user has given consent to the use of Google Analytics 4, some data may be processed by Google LLC as the service provider.
Personal data will not be disseminated.
- Data transfer to third countries
The use of the Google Analytics 4 service may involve the processing of personal data by Google LLC, a company based in the United States.
Such processing takes place in compliance with the provisions contained in Chapter V of Regulation (EU) 2016/679 and the guarantees adopted by the service provider, including, where applicable, the Standard Contractual Clauses approved by the European Commission or other guarantee instruments provided for by current legislation.
- Retention period
Navigation data are kept for the time strictly necessary for the operation of the site and the management of IT system security.
Data transmitted through the contact form are kept for the time necessary to manage the request made by the data subject and, subsequently, within the limits provided for by current legislation.
Data relating to users registered in the reserved area are kept for the entire duration of the relationship and, subsequently, for the period necessary for the fulfillment of legal obligations or the protection of the Data Controller’s rights.
Data collected through Google Analytics 4 are kept for the retention period configured by the Data Controller within the platform, in compliance with the principle of storage limitation.
- Nature of data provision
The provision of data necessary for browsing the site is implicit in the use of Internet protocols.
The provision of data requested through the contact form or for registration in the reserved area is optional; however, failure to provide the requested data may make it impossible to provide the requested feedback or allow access to reserved services.
- Rights of the data subject
The data subject may exercise at any time the rights recognized by Articles 15 to 22 of Regulation (EU) 2016/679, obtaining access to their personal data, rectification of inaccurate data, erasure in cases provided for by law, restriction of processing, data portability, objection to processing based on the legitimate interest of the Data Controller, and revocation of any consent given, without prejudice to the lawfulness of the processing carried out before the revocation.
To exercise your rights, you can contact the Data Controller at the e-mail address info@valeriagiusti.it.
The data subject also has the right to lodge a complaint with the Data Protection Authority pursuant to Art. 77 of the GDPR or to appeal to the competent judicial authorities in the cases provided for by law.
- Updates
This information notice may be modified or updated over time, also as a result of regulatory changes, technological developments, or variations in the processing carried out. Users are therefore invited to consult it periodically.