PRIVACY POLICY (simplified)

The purpose of this privacy policy is to provide maximum transparency regarding the information the site collects and how it is used.
In compliance with the obligations arising from national and European Union legislation (GDPR No. 679/2016), this site respects and protects the privacy of its visitors. Specifically, this site has been designed with a privacy-focused approach ( Privacy by Design ): it does not display advertisements, does not use profiling cookies or third-party tracking tools (e.g., Google Analytics), and hosts its own fonts locally to avoid transmitting data to external servers.

Full disclosure

Legal basis for processing

This site processes personal data lawfully, fairly, and transparently. The legal bases for processing are:

• For browsing data (server logs) and technical cookies: processing is based on legitimate interest (Art. 6, letter f, GDPR) aimed at ensuring site security, preventing fraud, and enabling the proper technical functioning of the web pages. Since only essential technical cookies are used, current legislation does not require prior consent via a banner.

• For data provided voluntarily (e.g., contact form): processing is based on the implementation of pre-contractual or contractual measures taken at the data subject's request (Art. 6, letter b, GDPR). The user enters their data to be contacted or receive information; providing it is optional, but failure to do so will make it impossible to provide the requested service.

Purpose of the processing

The processing of data collected by the site, in addition to the purposes related, instrumental, and necessary to providing the service, is aimed at the following purposes:

Security
: Data and information are collected to protect the security of the site (spam filters, firewalls, virus detection) and its users, and to prevent or detect fraud or abuse of the website. The data is recorded automatically and may also include personal data (IP address), which may be used, in accordance with applicable laws, to block attempts to damage the site or other users, or otherwise engage in harmful or criminal activities. This data is never used to identify or profile users and is deleted periodically. Consent is not required.

Ancillary activities:
Disclosing data to third parties who perform functions necessary or instrumental to the operation of the service (e.g., comment boxes), and to allow third parties to perform technical, logistical, and other activities on our behalf. Suppliers have access only to the personal data necessary to perform their tasks and undertake not to use the data for other purposes. They are required to process personal data in accordance with applicable regulations.

Data collected

This site collects user data in two ways.

Data collected automatically
During User navigation, the following information may be collected and stored in the site's server (hosting) log files:

• internet protocol (IP) address;

• browser type;

• parameters of the device used to connect to the site;

• name of the Internet service provider (ISP);

• date and time of visit;

• visitor's referral and exit web page;

• possibly the number of clicks.

This data is used for statistical and analytical purposes, in aggregate form only. The IP address is used exclusively for security purposes and is not cross-referenced with any other data.

Data provided voluntarily.
The site may collect other data in the event of voluntary use of services by users, such as commenting and communication services (contact forms, comment boxes), and will be used exclusively for the provision of the requested service:

• name and surname;

• agency;

• mobile number

• e-mail address.

Data controller

Place of treatment

The data collected by the site are processed at the Data Controller's headquarters and at the web hosting datacenter (Aruba Business Srl via Gulinelli, 21/A - 44122 Ferrara, Italy - PI/CF 01497070381), which is responsible for data processing, processing the data on behalf of the owner, is located in the European Economic Area and acts in compliance with European regulations.

Data retention period

The data collected by the site during its operation is retained for the time strictly necessary to carry out the specified activities. Upon expiration, the data will be deleted or anonymized, unless there are other purposes for its retention.
The data (IP address) used for site security purposes (blocking attempts to damage the site) is retained for 7 days.

Transfer of collected data to third parties and to non-EU countries

This site is hosted on servers located within the European Union at the Aruba Business data center . As a general rule, the personal data collected is not transferred outside the European Economic Area (EEA).
If you voluntarily decide to use external services connected via simple hyperlinks on the site (for example, by clicking on the WhatsApp icon or social media links), please note that these platforms are managed by independent providers. Switching to these platforms will result in you leaving this site, and your data will be processed in accordance with the respective privacy policies of the service providers, to which you are referred for further details.