Browsing on the website www.livialopresti.it (“website” hereinafter) entails sending cookies and other similar tools to the user’s terminal.
Hence, with this document, in compliance with the current Regulation (Article 13 of the General Regulation concerning the protection of personal data, hereinafter “GDPR”, and Art.122 of the Privacy Code) users browsing this website are informed as to the adopted cookies or the cookies for which the installation is allowed.
What are the so-called “cookies”?
A “cookie” is a small text file created by the user’s computer when he/she accesses a specific website, with the purpose of storing and conveying information. Cookies are sent by a web server (i.e. the computer on which the visited website is executed) to the user’s browser (Internet Explorer, Mozilla Firefox, Google Chrome, etc.) and stored on the computer of the latter. On occasion of later visits, the cookies are re-sent to the website.
During browsing, the user might receive on his/her terminal cookies from different websites as well (so called “third-party cookies”), sent directly from these websites’ managers and used for the purposes and according to the modality defined by those.
What cookies are used in this website?
The website uses technical cookies for which, according to the current legislation, no consent is required on behalf of the data subjects.
More precisely, the website is using:
-technical cookies allowing the normal browsing and fruition of the website on behalf of the user, indicated in detail below.
- PHPSESSID – EXPIRY: at the end of the navigation session
In the absence of such cookies, the website could not work correctly.
The website also uses Google Analytics simply for statistical purposes.
Storage time is set at 14 months.
As expressly indicated by the Privacy Authority in the “Clarifications regarding the implementations of norms regarding cookies” dated 5 June 2015, websites using, for mere statistical purposes, analytic cookies realized and made available by third parties, are not subject to the obligations and requirements set forth by the legislation (including consent) if appropriate tools to reduce the identification power of analytic cookies are adopted (e.g. via masking considerable portions of the IP address) and provided that the use of such cookies is subordinate to contractual bonds between websites and third parties which expressly remind the third party to use them exclusively to supply a service, to store them separately and not to “enrich” them or to “cross” them with other information available to them.
The controller of this website has decided to use the anonymization feature of users’ IP provided by Google (described here: https://support.google.com/analytics/answer/2763052?hl=it) and has accepted the Amendment on data elaboration with which Google undertakes to process data according to the requests of the Customer – controller of the website – and not to share them with other additional services unless the said Customers themselves require it via the service settings. The user is informed that the controller of this website has not connected Google Analytics to any other additional service, and no advertising or data sharing option with Google has been activated.
In the light of the adopted measures, the service provided by Google Analytics and used by this website simply for statistical purposes is activated at landing, and therefore no consent from the user is required in order to release the relative cookies.
At this link https://tools.google.com/dlpage/gaoptout?hl=it you can browse the additional browser components to disable Google Analytics.
What happens if the user denies the installation of cookies?
With the exception of technical cookies which are necessary to navigate the website, if the user disables the installation of further cookies, website browsing will still be available.
How to disable cookies
It is possible to deny consent to the use of technical cookies that are strictly necessary for browsing, choosing the modality included in this policy for some specific cookies or directly via appropriate settings on the browser.
Each browser has specific and different procedures to manage settings. The user can obtain specific instructions via the links below.
For those users who navigate via mobile devices, the system configurations to exclude cookie storage or to cancel them varies according to the brand and/or model of the device used. Hence, for this purpose please consult the instructions given by the manufacturer.
For further information on the cookies stored on your terminal and on how to disable them singularly, please visit the following link: http://www.youronlinechoices.com/it/le-tue-scelte.
The rights of data subjects
The Law acknowledges the right to ask the data controller for access to personal data, their rectification or cancellation, or the limitation to their processing or to oppose to their processing, in addition to the right to data portability.
The data subject may, at any time, assert his/her rights, with no formalities, by writing to the controller at the email address firstname.lastname@example.org.
Here follow the rights acknowledged by current legislation regarding the protection of personal data.
- Right of access: i.e. the right to obtain confirmation from the data controller whether or his/her personal data are being processed. If yes, he/she shall have access to those personal data as well as the following information: a) processing purposes; b) categories of personal data in question; c) the recipients or categories of recipients to whom the personal data have been or will be communicated, in particular if recipients of third countries or international organizations; (d) the retention period of personal data or, if this is not possible, the criteria used to determine such period; e) the existence of the right of the interested party to ask the data controller to correct or delete personal data or limit the processing of personal data or to be against their treatment; f) the right to file a complaint with a supervisory authority; g) all information regarding the origin of the data, if these are not collected from the interested party, h) the existence of an automated decision-making process, including profiling and, at least in such cases, significant information on the used logic as well as the importance and expected consequences for the interested party for the processing. Whenever personal data are transferred to a third country or an international organization, the interested party has the right to be informed of the existence of adequate guarantees relating to the transfer.
- Right of rectification: i.e. the right to ask the data controller to rectify incomplete or incorrect personal data without unnecessary delay. Considering the purposes of the processing, the interested party has the right ask his/her personal data to be integrated, also by providing an additional declaration.
- Right to cancellation: i.e. the right to ask the data controller to delete one’s personal data without unnecessary delay, if: a) personal data are no longer necessary with respect to the purposes for which they were collected or otherwise processed; b) the interested party revokes the consent on which the processing of his/her data is based on, and if there is no other legal basis for the processing; c) the interested party is against the processing because it is needed for the execution of a task of public interest or connected to the exercise of public authority for which the holder is appointed, or for the pursuit of legitimate interest and there is no legitimate reason to proceed the processing, or he/she is against processing for direct marketing purposes; d) personal data have been processed unlawfully; e) personal data must be deleted to fulfil a legal obligation under the EU or Member State law to which the data controller is subject to; f) personal data have been collected in relation to an offer by information society services of minors. However, the request for cancellation cannot be accepted if the processing is necessary: a) for the exercise of the right to freedom of expression and information; b) for the fulfilment of a legal obligation requiring processing under the EU or a Member State law to which the data controller is subject to or for the performance of a task carried out in the public interest or in the exercise of official authority; c) for reasons of public interest in the public health sector; d) for archiving purposes in the public interest, for scientific or historical research or for statistical purposes, insofar as the cancellation risks make it impossible or seriously prejudice the achievement of the objectives of such treatment; or e) for the assessment, exercise or defence of a right in court.
- Right of limitation, i.e. the right to be guaranteed that data are processed, except for retention, only with the consent of the interested party or for the assessment, exercise or defence of a right in court or to protect the rights of another personal or legal person, or for reasons of significant public interest of the EU or a Member State, if: a) the interested party questions the accuracy of personal data for the period needed by the data controller to verify the accuracy of such personal data; b) the processing is illegal and the interested party is against the cancellation of his/her personal data and asks that they are used in a limited way instead; c) although the data controller no longer needs the data for processing purposes, the interested party needs them, in order to verify, exercise or defend a right in court; d) the interested party has opposed the processing carried out because it is necessary for the execution of a task of public interest or connected to the exercise of public authority the owner was appointed with, or for the pursuit of the legitimate interests of the data controller or third parties, waiting for verification of a possible prevalence of legitimate reasons of the data controller as opposed to those of the interested party.
- Right to portability, i.e. the right to receive personal data (given to the holder) in a structured, commonly used and readable way from automatic devices, and the right to transfer such data to another holder without impediments by the holder they were given, as well as the right to obtain direct transfer of his/her personal data from one holder to another, if technically feasible, should the processing be based on consent or on a contract and the processing is done by automated means. This right does not affect the right to cancellation.
- Right of opposition, i.e. the right of the interested party to oppose at any time, for reasons connected to his/her particular situation, the processing of personal data, since it is necessary for the performance of a task of public interest or related to the exercise of public authority for which the holder was appointed with, or for the pursuit of the legitimate interest of the data controller or third parties. If personal data are processed for direct marketing purposes, the interested party has the right to oppose the processing of personal data at any time, including profiling in so far as it is related to such direct marketing.
The data subject is informed that, in case in case he/she believes that the processing of his/her personal data is violating what stated on the GDPR, he/she has the right to lodge a complaint to the Privacy Authority as per Art. 77 of the Regulation, or to bring the issue before the appropriate judicial offices (Art. 79 of the Regulation).
Data-processing controller and contacts
The data-processing controller is Livia Lo Presti, Via Giuseppe Bovini 35 – 48123 Ravenna – VAT Code 02303370395.
The data-processing controller can be contacted via the email address email@example.com.