Privacy Policy

 

Contact Us form data policy
This data policy is provided pursuant to Art. 13 of EU Regulation 679/2016 by Luca Piombino, with registered office at Via Panisperna 104 - Roma Italy VAT No. 13505801004, represented by Luca Piombino, in his capacity as sole administrator, in his capacity as Data Controller for those who access the www.lucapiombino.com website of Luca Piombino himself and fill in the "contact us" form, authorising Luca Piombino to process their personal data.
The provision of personal data is optional. Refusal to provide the data makes it impossible to process and follow through with the requests received.

Purposes of processing
Personal data provided by users is used only to process and respond to their requests.

Legal basis
The personal data provided by users is legally processed to carry out pre-contractual measures or contractual obligations (Art. 6 (1)(b) of Regulation No. 679/2016), requested by the users themselves (request sent by completing the form).

Data recipients
Personal data provided by users will in no way be disclosed to third parties. It may be communicated to employees and collaborators of the Data Controller who will process it in accordance with the instructions given by the Data Controller itself.

Data processor
If need be, for activities related to the maintenance of the technological aspect of the website, the personal data provided may be processed by employees of the Luca Piombino company, also appointed as data processors pursuant to Art. 28 of EU Regulation 679/20016.

Data storage
Users' personal data will be processed for the time necessary to fulfil the indicated purposes.

Rights of Data Subjects
Pursuant to Articles 13(2) and 15 to 21 of the Regulation, we inform you that in relation to the processing of your personal data, you may exercise the following rights:
Right to obtain access to personal data and the following information:
confirmation that your personal data is being processed
the purposes of the processing
the categories of personal data
the Recipients or categories of Recipients to whom the Personal Data has been or will be communicated
if the personal data is not collected from the Data Subject, any available information regarding its source
the existence of an automated decision-making process, including profiling
a copy of the personal data being processed.
Right to rectify/modify any personal data
Right to erasure of data ("right to be forgotten") if one of the following reasons exists:
the personal data is no longer necessary in relation to the purposes for which it was collected or otherwise processed
data subjects withdraw their consent to data processing and there is no other legal basis for processing
data subjects oppose the processing and there are no overriding legitimate grounds for proceeding with the processing
the personal data has been unlawfully processed
personal data must be erased in order to fulfil a legal obligation under Union law or the law of the Member State to which the Data Controller is subject.
If the Data Controller has made personal data public and is obliged to delete it, the same must inform any other data controllers of the request to delete any link, copy or reproduction of such data.
Right to limitation of processing in the event that:
data subjects contest the accuracy of the personal data for as long as it is necessary for the Data Controller to verify the accuracy of such personal data
the processing is unlawful and data subjects oppose the erasure of the personal data and request the restriction of its use instead
although the controller no longer needs it for the purposes of processing, personal data is necessary for the data subject to establish, exercise or defend a right in court
the data subject objected to the processing, pending verification as to whether the legitimate reasons of the Data Controller override those of the data subject.
Right to lodge a complaint with the Data Protection Authority, following the procedures and indications published on the official website of the Authority, www.garanteprivacy.it.
Right to data portability of the data subject's data, or the right to receive in a structured, commonly used and readable format by an automatic device, any personal data relating to data subjects that was provided to a data controller for the possibility of transmitting it to another data controller, where the processing is based on consent or a contract and is carried out by automated means. Where technically possible, the data subject has the right to obtain direct transmission of the data from one data controller to another.
Right to object at any time to the processing of personal data, including profiling, in particular if:
the processing is carried out based on the legitimate interest of the Data Controller, subject to the grounds for opposition being stated
personal data is processed for direct marketing purposes.
Right not to be subject to a decision based solely on automated processing, including profiling, except where the decision: is necessary for the conclusion or performance of a contract between the data subject and a controller, is authorised by Union law or by the Member State to which the controller is subject, or is based on the explicit consent of the data subject.
Right to revoke consent at any time; such data, if not based on any other legal basis (including, compliance with a legal obligation or performance of a contract) must be deleted by the Controller.

The exercise of rights is not subject to any form of constraint and is free of charge.

Procedures for the exercise of rights
You can exercise your rights at any time by sending:
a registered letter with return receipt to Luca Piombino, Via Panisperna 104 - 00184 Roma Italy
an email to info@lucapiombino.com.

Data Controller
The data controller is Luca Piombino.