Privacy Policy

  1. INTRODUCTION
    Pursuant to Article 13 of Regulation (EU) 2016/679, concerning the protection of natural persons with regard to the processing of personal data (“GDPR”), we provide you with information regarding the processing of your personal data (“Data”), collected during navigation of the website, carried out by Michele Ruo.

  2. DATA CONTROLLER AND DATA PROTECTION OFFICER
    Data Controller
    Michele Ruo
    Email: michele.ruo@libero.it
    (hereinafter referred to as the “Controller”)
    Piccolo Uliveto Gargano – Via Valle delle Noci, 103 – San Menaio, Municipality of Vico del Gargano (FG)

    This privacy notice, prepared in accordance with Regulation (EU) 2016/679 (“General Data Protection Regulation”), provides specific information regarding the following areas:

  1. Browsing Data

    Purpose and Legal Basis of Processing
    Browsing data is automatically collected in an exclusively aggregated form to verify the proper functioning of the website, obtain anonymous statistical information, and for security purposes. This information is not collected to be associated with identified users; however, it could, by its nature, allow user identification through processing and association with data held by third parties.

    For security purposes (e.g., spam filters, firewalls, virus detection), automatically recorded data may include personal data such as the IP address, which could be used, in accordance with applicable laws, to block attempts to damage the website or harm other users, or in connection with harmful or criminal activities. These data may also be shared with the relevant authorities to establish responsibility.

    Such data are never used for profiling purposes and are stored for a maximum period of 6 months.

  2. Cookies

    For specific information, please consult the cookies policy.

  3. Data Voluntarily Provided Through Website Forms

    Purpose and Legal Basis of Processing
    Identifying and contact data, along with any details of the request, are processed to manage inquiries submitted through the form. Submission of the request is subject to explicit, informed, and voluntary consent, documented through a specific checkbox.

    Provision of Data
    Providing data is voluntary; however, failure to submit personal data may prevent access to requested services and/or information.

    Communication Scope
    Data is processed by authorized and trained personnel and by third parties designated as Data Processors, ensuring maximum confidentiality and in full compliance with Regulation (EU) 2016/679. Personal data will not be disseminated or transferred to non-EU countries.

    Data Retention Period
    Data is retained for a period consistent with the purpose of collection.

  4. DATA PROCESSING METHODS

    Data processing is carried out following principles of fairness, lawfulness, transparency, and data minimization (privacy by design). Processing may be conducted manually or via automated means, ensuring appropriate technical and organizational measures are in place. These measures guarantee data security, confidentiality, integrity, availability, and resilience, minimizing risks of unauthorized access, loss, or unlawful use. Reasonable steps are taken to promptly rectify or delete inaccurate data in relation to the processing purpose.

  5. DATA SUBJECT RIGHTS (ARTICLES 15–22 OF THE GDPR)

    Data subjects are entitled to the rights specified in Articles 15–22 of the GDPR, where applicable.

    In particular, data subjects may:

    • Request access to their data.
    • Request rectification of inaccurate or incomplete data.
    • Request deletion of data.
    • Request restriction of processing in cases provided under Article 18 of the GDPR.
    • Object, in whole or in part, to processing necessary for the legitimate interests of the Controller.

    Under Article 20 of the GDPR, data subjects also have the right to data portability, receiving their data in a structured, commonly used, and machine-readable format, and transmitting it to another controller where technically feasible.

    Data subjects may withdraw consent for marketing and/or profiling purposes at any time and object to data processing for marketing purposes, including profiling associated with direct marketing. Data subjects preferring traditional communication methods may object solely to automated communication.

    Data subjects also have the right to lodge complaints with the competent supervisory authority, particularly in the Member State of residence, workplace, or where the alleged violation occurred.

    These rights can be exercised by registered mail or certified email (PEC) to the addresses provided in section 2.

  6. POLICY UPDATES

    This privacy notice may be periodically revised in light of changes in laws and case law. In the event of significant updates, appropriate notice will be provided on the website homepage for a reasonable period. We encourage users to review this policy regularly.