Policy provided according to the art. 13 and following of EU 679/2016 Regulation, below called “GDPR”, and to the articles 13 and 122 of the Personal Data Protection Code (Legislative Decree 196/03) to the users browsing the website danbergamondo.com, below called “website”.
Purpose of processing
The personal data provided by the users by means of the website will be processed in compliance with the regulation above mentioned and with the confidentiality obligations exclusively for the following purposes:
- sending the periodical newsletter including eventual updates of the websites;
- sending personal communications in reply and/or pertaining to requests submitted by means of the contact forms of the website (request of clarifications, errors reports, suggestions, etc.);
- eventual reply to the comment to the posts.
Liste of used Services:
- Google reCAPTCHA
reCaptcha, a service provided by Google, is used to verify that entries in the contact form or subscription to the newsletter are made by a person and not by a computer. Google checks whether the operation is carried out by a person or a computer based on the following data: IP address of the device used, website viewed which integrates Captcha, date and duration of the session, identification data of the browser and operating system used, account Google when the user is logged in, mouse movements across the reCaptcha interface and operations that require the identification of images. The legal basis of the data processing described above is art. 6 c. 1 lit. f GDPR. We have a legitimate interest in this data processing in order to ensure the security of the site and to protect it against automated data entry (attacks).
Privacy Policy - Google Fonts
When end users visit a website that embeds Google Fonts, their browsers send HTTP requests to the Google Fonts web API. The Google Fonts web API provides Google CSS (Cascading Style Sheets) and subsequently the font files specified in the CCS to users. Such HTTP requests include (1) the IP address used by the respective user to access the Internet, (2) the requested URL on the Google server, and (3) HTTP headers, including the user agent describing the Internet browser of the site visitors website and operating system versions, as well as the referer (i.e. the web page on which the Google font should be displayed).IP addresses are not logged or stored on Google’s servers and are not analyzed for specific purposes. The Google Fonts web API logs details of HTTP requests (requested URL, user agent and referrer). Access to this data is limited and strictly controlled. The requested URL identifies the set of font families for which the user wants to upload fonts. This data is recorded to allow us to determine how often certain font families are requested. The Google Fonts Web API requests the user agent to customize the generated font for the type of web browser being used. The user agent is primarily logged for debugging and is used to generate aggregate usage statistics to measure the popularity of font families. These aggregate usage statistics are published on the Google Fonts Analytics page. Finally, the referrer is logged so that the data can be used for production maintenance and to generate an aggregated report on top integrations based on the number of font requests.
For clarity, Google does not use the information collected by Google Fonts to build end-user profiles or for targeted advertising.
Privacy Policy - Font Awesome
Font Awesome is a font style visualization service managed by Fonticons, Inc. which allows this site to integrate such content within its pages.
Personal Data processed: Usage Data and Tracking Tool.
Place of processing: United States – Privacy Policy.
The processing of the information concerning the user is based on principles of correctness, lawfulness, transparency and of protection of confidentiality.
It is excluded, therefore, each and every utilization which may be different from, or which may conflict with, the interests of the user.
Data being processed
Particularly, the processed data can be categorized according to the activities carried out by the user while on the website.
- Browsing
It’s the activity of the user who browses the website to consult it or access the links it contains directing towards external websites. - Interaction by means of contact forms
It’s the activity of the user who sends messages, of unknown nature a priori, by means of the contact forms.
The contact forms are conceived in such a way so that they *do not* record on the server (owned by the hosting provider BlueHost, whose registered office is in the USA) the personal data of the user.
Upon receipt of the e-mail produced by the contact forms, the data saved are the name, the e-mail address, date and time of the message, the content of the message itself and, of course, his/her consent to the data processing according to the present policy. - Subscription to the newsletter
It’s the activity of the users who subscribe to the newsletter in order to be always updated about the news about the website and/or its Author.
In such case the only datum which gets exclusively recorded is the e-mail address entered by the user at the moment of the subscription, other than what’s described at point 2).
The cancellation from the newsletter and from the related archives can be directly carried out by the user by means of a special link put at the end of each newsletter. - Commenting the posts
It’s the activity of the users comment the posts in the website.
In accordance with GDPR, sending data for the purposes at the points 2), 3) and 4) requires the explicit acceptance by means of ticking off a special checkbox found in the sections where such operations can be carried out.Without such consent, it is not possible to carry out the requested online operation.If the website is browsed with a mobile phone, an external plugin could trace the geographical displacement of the user.
Processing and retention methods
The processing of the data will be carried out by means of suitable tools to grant the safety and the confidentiality and will be feasible to be carried out even by means of automatic tools suitable for storing, managing and transferring the data themselves.
The data are stored with informatic tools protected by safety systems (e.g.: firewall, tools to prevent attacks by hackers, tools for the automatic detection of malware and eventual vulnerabilities, etc…).
The website is developed by means of a proprietary CMS with tools and techniques implementing the best-practices in the field of security and robustness of the software.
The content of the web pages, as well as all the data entered on the website and sent to the server, are encrypted by means of the SSL protocol (safe browsing); the adoption of the protocol for the safe browsing is identifiable by the presence of Internet addresses starting with “https://” and by the writing “Safe” that the most modern browsers affix in the address bar where the address of the visited website is shown.
However, if all the safety systems adopted weren’t enough to avert a theft of information, as expected from the art. 33 of GDPR, the person responsible for the treatment of the data undertakes to denounce and promptly communicate to the national Guardantor of Privacy the eventual theft of information concerning the personal data of the users.
The data of the users are kept without any pre-established deadline and the user can request their cancellation (“right to be forgotten”) according to the art. 17 of GDPR any time by using the contact form.
In order to provide the pages to the user, Blue Host, provider of the hosting services (that is, which hosts the contents of the website), uses the Apache web-server which, like all the web servers, records in dedicated log files, protected and not accessible from the outside, the requests of the users to access the resources of the website (web pages, images and other files needed for the operation).
The purpose of such log files is that to identify eventual users carrying out malicious actions against the website (hacker attacks) and at once to counteract eventual abuses of the website resources.
Nature of the conferral, denial and revocationof the consent
The conferral of the personal data is not a legal obligation.
However, the lack of the same, the denial or the revocation of the consent to the processing according to the ways abovementioned, will imply the impossibility to carry out the online services of the website listed below:
- sending communications and messages to the webmaster by means of the website.
- receiving the newsletter.
- commenting the posts in the website.
Comunication / diffusion
The data won’t be communicated to other entities, nor will be circulated nor transferred to third parties in any capacity, both in Italy and worldwide.
The controller reserves the right to analyze in aggregated form the data collected to carry out internal statistics on the use of some services (e.g.: reads of the newsletter).
Controller
The Controller is Daniele Bergamini, Social Security Number BRGDNL72E22F240M.
Rights of the user
In relation to the processing of the personal data and pursuant to the art. 13 of the GDPR and to the art. 7 of the Legislative Decree 196/2003, the user shall have the rights:
- Access to the data (see art. 15 of the GDPR)
The user has the right to obtain the confirmation of whether or not personal data concerning him/her exist and their communication in an understandable format.
The request can be directly forwarded by e-mail, or by using this form, to the person responsible of the data processing. - Correction and cancellation (see articles 16 and 17 of the GDPR)
The user has the right to request the correction, the cancellation, or the limitation of the processing of the personal data. - Limitation to the processing (art. 18 GDPR)
The user has the right to object, in whole or in part, for legitimate reasons, to the processing of personal data concerning him/her, albeit relevant to the purpose of the collection.
Particularly:Newsletter sending:
The users can revoke any time the use of the e-mail address for the sending of the newsletter by clicking the dedicated link at the bottom of the newsletter itself. - Data portability (art. 20 GDPR)
The user has the right to receive the personal data concerning him/her in a structured format readable by an automatic device. The request must be forwarded to the Owner; the personal data will be provided in xml format. - Communication
The user has the right to obtain the identification details of the owner. - Complaint
The user has the right to lodge a complaint to the Italian supervisory authority (Guarantor of privacy) in case he/she discerned an usage of the data different from what is stipulated in the aforementioned Legislation;
The communications to the website concerning privacy matters can be forwarded by means of the dedicated form below or by sending an e-mail to the Owner of the processing.