FOREWORD

Your privacy is important to Liana Carpenteria.

Liana Carpenteria, with registered office in Marcon Venezia (Italy), Via Pialoi 96, in the person of the legal representative Tiziano Liana, as the data controller, has drawn up this document, concerning the processing of your personal data, how and why we collect them and how we manage them.

Please note that the processing of personal data means any operation or set of operations, carried out with or without the help of electronic means, concerning the collection, recording, organisation, storage, consultation, processing, modification, selection, extraction, comparison, use, interconnection, blocking, communication, dissemination, erasure and destruction of data, even if not registered in a database.

This policy applies when you visit our website or our social media channels; when you request information; or when you are a supplier, partner, consultant or any other party that has a business relationship with Liana Carpenteria.

The information and data provided by you will be processed in accordance with the relevant rules and Regulations in force (including, without limitation, the General Data Protection Regulation – EU Regulation 2016/679 – General Data Protection Regulation or “GDPR”).

The processing of data carried out by Liana Carpenteria shall be based on the principles of correctness, lawfulness, transparency, accuracy, integrity, confidentiality, purpose limitation and storage and data minimisation.

THE LEGAL BASES
OF OUR PROCESSING OF YOUR PERSONAL DATA

Liana Carpenteria bases the processing of your personal data on several legal bases:

• your consent (only when necessary or permitted by law). In this case you will still have the right to revoke it;
• the need to establish a contractual relationship and fulfil the obligations arising from it;
• the need to comply with applicable laws and to institute, exercise or defend against legal action;
• the need to pursue your legitimate interests: to ensure that your information is secure, to prevent or investigate suspected or actual breaches of law, commercial contracts or instances of non-compliance with your business principles;
• the need to respond to your requests;
• any other legal basis permitted by applicable law.

WHAT KIND OF PERSONAL DATA WE PROCESS, FOR WHAT PURPOSES AND HOW LONG WE STORE THEM

a) Navigation data
For the correct functioning of the Liana Carpenteria website and the services provided, computer systems and software procedures are required that, during their normal operation, acquire certain personal data, the transmission of which is implicit in the use of Internet communication protocols. These data are not collected in order to be associated with identified subjects, but by their very nature could, through processing and association with data held by third parties, allow users to be identified (e.g. IP addresses). Such data are used only for anonymous statistical information on the use of the service and to check its correct operation and are stored for the period of time strictly necessary and in any case in compliance with the regulations in force.

b) Cookies
Access to the www.lianacarpenteria.it site may involve our servers sending so-called “cookies” to the user’s PC, i.e. files that enable us to obtain information on the pages visited in order to speed up the use of the various services. You may choose to deactivate cookies at any time by simply modifying the settings of your browser; we remind you, however, that deactivating cookies may slow down or prevent access to some sections of the site. You can find more information in the cookie policy on the site

c) Traffic data
Liana Carpenteria informs you of the existence of the logbook (LOG), in which the data relating to telematic traffic is stored, within the terms and according to the timeframe established by law. Once the storage period provided for by law has elapsed, and unless otherwise specified by the Authority with an administrative or judicial measure, the aforementioned data will be destroyed and the possibility of obtaining a copy will no longer be guaranteed.

HOW WE HANDLE YOUR DATA FOR PROMOTIONAL PURPOSES

Liana Carpenteria may send you marketing communications about its activities or events via e-mail, telephone and social networks of other parties.

Before engaging in any marketing activities and if required by applicable laws, we will ask you to provide us with your consent, which you may revoke by sending an e-mail request to amministrazione@lianacarpenteria.it. Even if you withdraw your consent to receive marketing communications, you may still receive other types of communications (e.g. important technical or administrative notices).

WHO IS THE DATA CONTROLLER

The Data Controller of the processing carried out through the site is Liana Carpenteria with head office in Marcon 30020 Venice (Italy), Via Pialoi 96.

The owner and person in charge of personal data can be contacted at amministrazione@lianacarpenteria.it for all information regarding the processing of personal data and to provide the list of all persons involved in the management.

WHO ARE THE RECIPIENTS OF THE PERSONAL DATA

The recipients of the personal data collected are:

• persons, companies, professional firms that provide accounting, administrative, tax or legal consultancy services to Liana Carpenteria;
• subjects with whom Liana Carpenteria interacts to provide services;
• subjects that provide services related to the collection of payments (e.g. bank transfer, credit card);
• any subjects that perform maintenance activities on network equipment and communication networks;
• other entities or authorities to which, for legal reasons or obligations, it is necessary to communicate your personal data;
• persons authorised by Liana carpenteria to carry out activities necessary for the provision of services (with a legal obligation of confidentiality).

Third parties may have access to your personal data through widgets (such as social buttons) or integrations (such as Facebook connect), the list is on the Cookie Policy page of our site.

The full list of data controllers can be requested by sending an email to amministrazione@lianacarpenteria.it.

WHICH RIGHTS YOU CAN EXERCISE

As a data subject, you may exercise your rights under Articles 16 to 22 of EU Regulation 679/16:

Art. 16 – Right of rectification
You have the right to obtain from the data controller the rectification of inaccurate personal data concerning you without undue delay. Taking into account the purposes of the processing, you have the right to obtain the integration of incomplete personal data, including by providing a supplementary declaration.

Art. 17 – Right to erasure
You have the right to obtain from the data controller the erasure of personal data concerning you without undue delay, and the data controller is obliged to erase the personal data without undue delay, if one of the following reasons exists:

• the personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed; 4.5.2016 EN Official Journal of the European Union L 119/43
• you withdraw the consent on which the processing is based in accordance with Article 6(1)(a) or Article 9(2)(a), and if there is no other legal basis for the processing;
• you object to the processing in accordance with Article 21(1) and there is no overriding legitimate ground for the processing,
• or processing, or you object to the processing pursuant to Article 21(2);
• personal data have been unlawfully processed;
• the personal data must be erased in order to comply with a legal obligation laid down by Union or Member State law to which the controller is subject;
• the personal data were collected in connection with the offering of information society services referred to in Article 8(1).

Where the controller has made personal data public and is obliged under paragraph 1 to erase them, the controller shall, taking into account available technology and the costs of implementation, take reasonable steps, including technical measures, to inform the controllers who are processing the personal data of your request to erase any link, copy or reproduction of your personal data.

Paragraphs 1 and 2 shall not apply to the extent that the processing is necessary:

• for the exercise of the right to freedom of expression and information;
• for the establishment, exercise or defence of legal claims.

Art. 18 – Right to restriction of processing
You have the right to obtain from the data controller the restriction of processing when you:

• you contest the accuracy of your personal data, for the period necessary for the controller to verify the accuracy of the data;
• the processing is unlawful and you object to the deletion of the personal data by requesting instead that their use be restricted;
• although the controller no longer needs it for the purposes of the processing, your personal data are necessary for
• the establishment, exercise or defence of legal claims;
• you object to the processing in accordance with Article 21(1), pending verification as to whether the legitimate grounds of the controller prevail over those of the data subject.

Where processing is restricted pursuant to paragraph 1, such personal data shall, except for storage, only be processed with your consent or for the establishment, exercise or defence of legal claims or the protection of the rights of another natural or legal person or for reasons of substantial public interest of the Union or of a Member State. L 119/44 EN Official Journal of the European Union 4.5.2016 3.

If you have obtained the restriction of processing pursuant to paragraph 1 you shall be informed by the controller before that restriction is lifted.

Art. 19 – Right to obtain notification from the controller in cases of rectification or erasure of personal data
The controller shall notify each of the recipients to whom the personal data have been transmitted of any rectification or erasure or restriction of processing carried out pursuant to Articles 16, 17(1) and 18, unless this proves impossible or involves a disproportionate effort. The controller shall inform you of such recipients if you so request

Art. 20 – Right to portability
You have the right to receive, in a structured, commonly used and machine-readable format, personal data concerning you that you have provided to a data controller and you have the right to have those data transmitted to another data controller without hindrance by the controller to whom you have provided them if:

• the processing is based on consent within the meaning of Article 6(1)(a) or Article 9(2)(a) or on a contract within the meaning of Article 6(1) (b);
• the processing is carried out by automated means.

When exercising your rights regarding data portability pursuant to paragraph 1, you have the right to obtain the direct transmission of personal data from one controller to another, if technically feasible.

The exercise of the right referred to in paragraph 1 of this Article shall be without prejudice to Article 17.

The right referred to in paragraph 1 must not infringe the rights and freedoms of others.

Art. 21 – Right to object
You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you in accordance with Article 6(1)(e) or (f), including profiling on the basis of these provisions. The controller shall refrain from further processing your personal data unless he can demonstrate compelling legitimate grounds for processing which override your interests, rights and freedoms or for the establishment, exercise or defence of legal claims. Where personal data are processed for direct marketing purposes, you have the right to object at any time to the processing of personal data concerning you carried out for such purposes, including profiling insofar as it is related to such direct marketing. If you object to processing for direct marketing purposes, your personal data will no longer be processed for such purposes. 4.5.2016 EN Official Journal of the European Union L 119/45 4. The right referred to in paragraphs 1 and 2 shall be explicitly brought to your attention and shall be presented clearly and separately from any other information at the latest at the time of the first communication with you. In the context of the use of information society services and without prejudice to Directive 2002/58/EC, you may exercise your right to object by automated means using specific techniques. Where personal data are processed for scientific or historical research purposes or for statistical purposes pursuant to Article 89(1), you have the right, on grounds relating to your particular situation, to object to the processing of personal data concerning you, except where the processing is necessary for the performance of a task carried out for reasons of public interest.

Art. 22 – Right to refuse automated processing
You have the right not to be subjected to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or significantly affects you in a similar way. Paragraph 1 shall not apply if the decision:

• is necessary for the conclusion or performance of a contract between you and a data controller;
• is authorised by Union law or by the law of the Member State to which the controller is subject, which also lays down appropriate measures to protect your rights, freedoms and legitimate interests;
• is based on your explicit consent.

In the cases referred to in points (a) and (c) of paragraph 2, the controller shall implement appropriate measures to protect your rights, freedoms and legitimate interests, at least the right to obtain human intervention by the controller, to express your opinion and to contest the decision.

The decisions referred to in paragraph 2 shall not be based on the special categories of personal data referred to in Article 9(1), unless Article 9(2)(a) or (g) applies and appropriate measures are in place to protect your rights, freedoms and legitimate interests.

In this regard, you may access your data in order to:

• Verify their veracity
• Modify them if they become inaccurate
• Supplement them also with a supplementary declaration
• Request their deletion
• Restrict processing
• Object to processing

The data controller is obliged to respond without undue cause.

Minors

The Owner’s services are not intended for minors under 14 years of age and the Owner does not intentionally collect personal information referring to minors. In the event that information on minors is unintentionally recorded, the Owner will delete it in a timely manner at the request of users. For any processing needs of minors, specific consent and authorisation will be requested from the person exercising parental authority and/or the holder of parental responsibility (as provided for in Article 8 of Regulation 679/16).

CANCELLATION OF DATA

Liana Carpenteria, in compliance with the corresponding right of access to the data subject, has put in place procedures whereby you can request the deletion without undue delay of your personal data or the restriction of the processing of your personal data for the following reasons:

• Because the data are no longer necessary for the purposes for which they were collected
• Because you have revoked your consent
• Because you object to the processing
• Because the data is being processed unlawfully.

You can exercise the above rights by writing to us at amministrazione@lianacarpenteria.it.

CHANGES TO THE PRIVACY POLICY

This Privacy Policy is subject to change. We therefore recommend that you check this Policy regularly and refer to the most up-to-date version.