This Privacy Policy is issued pursuant to Article 13 of European Regulation No. 679/2016 and applies exclusively to all Data collected through the website www.villardi.it. This Privacy Policy is subject to updates, which will be published promptly on the website. This Privacy Policy and the Cookie Policy establish the basis on which the Data Subject’s Personal Data will be processed.

Data Controller

The Controller of the Data collected by this website is Stefano Villardi, with registered office at Via Mirandola 21, 37042 Caldiero (VR), Italy – VAT No. IT04990790232, email: stefano@villardi.it.

Web platform

The website is built on the WordPress platform, which is intended to host and run key components of the site. Such platforms may provide analytical tools, tools for managing user registration, comment and database management, e-commerce, payment processing, etc. The use of such tools involves the collection and processing of Personal Data. Some of these services operate through servers located in different geographical locations, making it difficult to determine the exact place in which Personal Data is stored.

The Platform chosen by the Controller is:

WordPress

WordPress is a Web platform under an Open Source licence.

Personal Data processed

“Personal Data” means any information relating to an identified or identifiable natural person (the “Data Subject”). A natural person is considered identifiable if they can be identified, directly or indirectly, by reference in particular to an identifier such as a name, an identification number, location data, an online identifier, or one or more factors specific to their physical identity.

Category of Personal Data processed

Among the Personal Data processed by this website, either independently or through third parties, are Common Data such as:

• Contact details (email, address, telephone number)
• Internet browsing data collected through cookies installed on the computer or mobile device (for further information, please see the Cookie Policy)
• Data relating to your interactions with the Controller’s websites, including, by way of example but not limited to, data relating to participation in initiatives, contests, promotions and events (including via our social media channels)
• Where a request is sent through the “Contact” section of the Site, the provision of certain Personal Data is necessary in order for the Controller to be able to fulfil the request, and the relevant fields on the registration form are therefore marked as mandatory
• Personal preferences, including your wish list, as well as marketing and cookie preferences

Methods of processing Personal Data

The Personal Data provided or acquired will be Processed in accordance with the principles of fairness, lawfulness, transparency and confidentiality protection under current legislation. The Controller processes Users’ Personal Data by adopting appropriate security measures designed to prevent unauthorised access, disclosure, alteration or destruction of Personal Data. Processing is carried out using IT and/or telematic tools, with organisational methods and logic strictly related to the purposes indicated.

Purposes of processing Personal Data and legal basis

Personal Data may be collected independently by the Controller or through third parties. In this case, the IT systems and software procedures used to operate this website acquire certain technical Personal Data of Users (e.g. IP address, browser type used, operating system, domain name and addresses of websites from which access was made or exited, etc.), the transmission of which is inherent in the normal operation of the internet. Such Data may be processed solely for the purpose of obtaining anonymous statistical information on the use of the site and/or to check that it is functioning correctly, and will be deleted immediately after processing.

Data that the Data Subject chooses to provide voluntarily will be processed in compliance with the lawfulness conditions under Art. 6 GDPR and will be processed to enable the website to provide its services, as well as for the Purposes set out below, and will be retained for the time necessary to fulfil those Purposes. Specifically, the Purposes of processing are:

1) Responding to requests and providing Information

Data will be processed in order to be contacted again or to follow up on specific requests made to the Controller by the Data Subject, for communications relating to the Controller’s Services and/or Content, via email or other means of communication such as telephone or WhatsApp Business instant messaging.

Legal basis: this processing is optional and based on the Data Subject’s consent; however, the provision of Data is necessary in order to pursue the stated purpose.

Data retention period: until the Data Subject withdraws consent.

2) Marketing

Data will be processed for the direct sale of Products/Services, market research, and the sending of communications and promotional, commercial and advertising material, or material relating to initiatives and events, via email, SMS, WhatsApp, Chat, Direct Messaging via social media, social networks or by telephone calls, postal mail and other informational material.

Legal basis: this processing is based on consent freely given by the Data Subject pursuant to Art. 6(1)(a) GDPR.

Data retention period: until the Data Subject withdraws consent.

3) Statistics

Data will be processed in order to carry out statistical analyses on aggregated and anonymous data, to analyse the Data Subject’s behaviour in order to improve the products and services provided by the Controller and to meet the Data Subject’s expectations.

Legal basis: this processing is based on consent freely given by the Data Subject.

Data retention period: until the Data Subject withdraws consent.

4) Profiling

Data will be processed for the analysis and evaluation of interests, habits and consumption choices, including the creation of profiles, in order to send personalised informational and promotional material regarding the Services/Products offered by the Controller.

Legal basis: this processing is based on consent freely given by the Data Subject pursuant to Art. 6(1)(a) GDPR.

Data retention period: until the Data Subject withdraws consent.

Disclosure of Data

In addition to the Controller, the following may in certain cases have access to Data:

a) categories of specifically trained Authorised Persons involved in the organisation of the website (administrative, sales and marketing staff, legal advisers, system administrators);

b) external parties (such as third-party technical service providers, hosting providers, IT companies, communications agencies), also appointed as Data Processors by the Controller pursuant to Art. 28 GDPR. An up-to-date list of Processors, if appointed, may always be requested from the Controller;

c) public or private parties that may access the Data in compliance with legal obligations;

d) parties carrying out ancillary and instrumental tasks in relation to the Controller’s activities.

Processing periods

As expressly provided for in Art. 5(1)(e) GDPR, Data is retained for the time necessary for its Processing in connection with the performance of the service requested by the Data Subject, or as required by the Purposes described above in this document. At the end of the retention period, Personal Data will be deleted and, as a result, the rights of access, erasure, rectification and portability of the Data may no longer be exercised.

Cookies

This website uses cookies. Cookies are small text files that websites can use to make the Data Subject’s experience more efficient and to personalise content and adverts, provide social network functions and analyse traffic. Cookie Policy

Place of processing and transfer of Data abroad

Data is processed at the Controller’s operational premises. For further information, the Controller may be contacted. Data may be processed by natural persons and/or legal entities acting on behalf of the Controller under specific contractual arrangements, based in EU or non-EU countries. Should Data be transferred outside the EEA, the Controller will adopt all contractual measures suitable for ensuring adequate protection of the Data.

Exercising the rights of the data subject

The Data Subject has the right to exercise the rights provided for under Articles 7 and 15–22 of European Regulation 679/2016. In particular, they have the right to withdraw their consent at any time and, upon simple request to the Controller, may request access to their Personal Data, receive the Personal Data provided to the Controller and, where possible, transmit it to another Controller without hindrance (i.e. data portability), obtain updating, restriction of processing, rectification of the Data and erasure of Data processed in breach of current legislation. They have the right, for legitimate reasons, to object to the Processing of Personal Data concerning them and to Processing for the purposes of sending advertising material, direct sales and carrying out market research. They also have the right to lodge a complaint with the Data Protection Authority (Garante per la Protezione dei Dati Personali) as the supervisory authority for personal data protection, or to bring the matter before the competent courts. The Data Subject may exercise their rights by contacting the Controller by email at: stefano@villardi.it.

Tools used for processing Personal Data

CONTACT FORM

By filling in the Contact Form with their Data, the Data Subject consents to its use to respond to requests for information, or for any other purpose indicated in the heading of the form. Personal Data collected via the Contact Form: Email, First and last name, telephone number.

OTHER MEANS OF CONTACT

WhatsApp (WhatsApp Ireland Limited)

WhatsApp is an instant messaging service provided by WhatsApp Ireland Limited. Personal Data collected: telephone number, email, Usage Data, Cookies. Place of processing: Ireland – Privacy Policy

SPAM PROTECTION AND SECURITY MEASURES

To ensure the security of Personal Data at the point of entry, this website has an SSL certificate and uses the HTTPS protocol. With the use of this protocol, transactions and data transmitted on websites take place with maximum security and the content of the communication is not read or manipulated in any way by third parties.

This website also uses tools that analyse traffic, potentially in order to filter out portions of traffic, messages and content identified as SPAM.

reCAPTCHA

This website uses reCAPTCHA, a service subject to Google’s privacy policy and terms and conditions of use.

STATISTICS

Statistics services allow the Controller solely to monitor and analyse traffic data and serve to track the Data Subject’s behaviour. This website uses the following services:

Google Analytics 4

Google Analytics is an analytics service provided by Google LLC. Google uses the Personal Data collected for the purpose of tracking and examining the use of this website, compiling reports and sharing them with other services developed by Google. Google may use the Personal Data to contextualise and personalise the adverts of its own advertising network. Google may also transfer this information to third parties where required to do so by law, or where such third parties process the aforementioned information on Google’s behalf. In Google Analytics 4, IP addresses are used at the time of collection and are then deleted before the data is recorded in any data centre or server. For further information, please refer to Google’s official documentation. Google provides a browser add-on for disabling Google Analytics at the following link: https://tools.google.com/dlpage/gaoptout?hl=en. Personal Data collected: Cookies and Usage Data. Place of processing: USA – Ireland Privacy Policy

Google Search Console (Google Ireland Limited)

This is an analytics service provided by Google Ireland Limited. Google uses the Personal Data collected for the purpose of tracking and examining the use of this website, compiling reports and sharing them with other services developed by Google. Google may use the Personal Data to contextualise and personalise the adverts of its own advertising network. Google may also transfer this information to third parties where required to do so by law, or where such third parties process the aforementioned information on Google’s behalf. Personal Data collected: Cookies and Usage Data. Place of processing: Ireland – Privacy Policy

INTERACTION WITH SOCIAL NETWORKS

These services allow interaction with social networks directly from the pages of this website. Interactions and information acquired through this website are, in any event, subject to the Data Subject’s own privacy settings for each social network. Where a social network interaction service is installed, it is possible that, even if Users do not use the service, it may still collect traffic data relating to the pages on which it is installed.

Facebook (Meta Platforms, Inc.)

Facebook buttons are interaction services with the Facebook social network, provided by Meta Platforms, Inc. Personal Data collected: Cookies and Usage Data. Place of processing: Ireland – Privacy Policy

Instagram (Meta Platforms, Inc.)

Instagram buttons are interaction services with the Instagram social network, provided by Meta Platforms, Inc. Personal Data collected: Cookies and Usage Data. Place of processing: Ireland – Privacy Policy

REMARKETING AND RETARGETING

These services enable this website to communicate, optimise and serve advertisements based on the Data Subject’s past use of this website. This activity is carried out by tracking Usage Data and through the use of Cookies. This website uses the following services:

Facebook Remarketing (Meta Platforms, Inc.)

Facebook Remarketing is a Remarketing and Behavioural Targeting service provided by Facebook, which links the activity of this website with the Facebook advertising network. This website makes use of the Facebook Pixel tool in order to measure conversions. Thanks to the Facebook Pixel, it is possible to understand the actions that people take on the website. The Data collected can be used to:

• ensure that adverts are shown to the right people;
• create audience groups to target with adverts;
• make use of the further advertising tools provided by the platform on which advertising is carried out.

The information collected is anonymous to the operators of this Site and cannot be used to identify a specific Data Subject. However, the information is stored and analysed by Facebook, which could link the action to a specific profile and use this information for Facebook’s own internal advertising purposes, as set out in Facebook’s privacy policy. This will allow Facebook to display adverts both on Facebook and on third-party sites. The Controller of the Site has no control over how this data is used. For further information on how users can protect their privacy, please refer to Facebook’s Privacy Policy.

Instagram Remarketing (Meta Platforms, Inc.)

Instagram Remarketing is a Remarketing and Behavioural Targeting service provided by Meta Platforms, Inc., which links the activity of this website with the Instagram advertising network. This website makes use of the Pixel tool in order to measure conversions and understand the actions that people take on the website. The information collected is anonymous to the operators of this Site and cannot be used to identify a specific Data Subject. However, the information is stored and analysed by Facebook, which could link the action to a specific profile and use this information for Facebook’s own internal advertising purposes, as set out in Facebook’s privacy policy. For further information on how users can protect their privacy, please refer to Instagram’s Privacy Policy.

CONTENT FROM EXTERNAL PLATFORMS

These services allow content hosted on external platforms to be viewed directly from the pages of this website and interacted with. Where such a service is installed, it is possible that, even if Users do not use the service, it may still collect traffic Data relating to the pages on which it is installed.

This website uses:

Google Maps

Google Maps is a map display service managed by Google, which allows this website to embed such content within its pages. Personal Data collected: Cookies and Usage Data. Place of processing: Ireland – Privacy Policy

Google Fonts

Google Fonts is a font display service provided by Google Ireland Limited, which allows this website to embed such content within its pages. Personal Data collected: Usage Data; various types of Data as specified in the service’s privacy policy. Place of processing: Ireland – Privacy Policy

YouTube Video Widget (Google Ireland Limited)

YouTube is a video content display service managed by Google Ireland Limited, which allows this website to embed such content within its pages. Personal Data processed: Usage Data; Tracking Tools.

Place of processing: Ireland – Privacy Policy

Google My Business (Google Ireland Limited)

Google My Business is a business promotion service offered by Google Ireland Limited. Personal Data collected: Cookies and Usage Data. Place of processing: Ireland – Privacy Policy

Changes to this Privacy Policy

The Controller reserves the right to make changes to this Privacy Policy at any time, giving notice to Users on this page. Users are therefore encouraged to check this page frequently, referring to the date of last modification indicated at the bottom. In the event that the changes made to this Privacy Policy are not accepted, the Data Subject must cease using this website and may ask the Controller to remove their Personal Data. Unless otherwise specified, the previous Privacy Policy will continue to apply to Personal Data collected up to that point. The Controller is not responsible for updating all the links displayed in this Privacy Policy; therefore, whenever a link is not working and/or is out of date, Users acknowledge and accept that they must always refer to the document and/or section of the websites referred to by that link.

Privacy Policy updated as of January 2024