INFORMATION ON THE PROCESSING OF PERSONAL DATA
(Pursuant to Art. 13 of EU Regulation 2016/679 - GDPR)
This page describes how the website is managed with regard to the processing of personal data of users who consult it and interact with our web services. This information is provided only for this website and not for other websites that may be consulted by the user via links.
Data Controller
The Data Controller is the Consorzio di Progettazione - Associazione Professionale, with its registered and operational office in Dorsoduro Santa Marta, Fabbricato 16, 30123 Venice. The VAT number is 00887360279. It is possible to contact the Data Controller for privacy-related matters by writing to the email address info@consorziodiprogettazione.it or via Certified Electronic Mail (PEC) at cdp@pec.consorziodiprogettazione.it.
Types of Data Processed
During navigation and use of our site, we may collect various types of data. The computer systems designated for the operation of this website acquire, during their normal operation, some personal navigation data whose transmission is implicit in the use of Internet communication protocols, such as IP addresses, domain names of the computers used, and the time of the request. This data is used for the sole purpose of obtaining anonymous statistical information on the use of the site and to check its correct functioning. In addition, we collect data voluntarily provided by the user by filling out the contact form on the site. In this case, the user explicitly provides their name, surname, email address, and the content of the message. These data are marked as mandatory in order to forward the request and allow the Data Controller to provide an appropriate response.
Purposes of Processing and Legal Basis
The personal data provided will be processed primarily to allow the correct navigation of the website, an operation based on the legitimate interest of the Data Controller. The data sent via the contact form or direct contact details will be used to respond to the user's requests for information or quotes, having as a legal basis the execution of pre-contractual or contractual measures adopted at the request of the data subject. Finally, the processing may take place to fulfill specific obligations under the law, a regulation, or EU legislation.
Methods of Processing and Retention
The processing of personal data is carried out by means of the operations indicated in Art. 4, No. 2 of the GDPR. Data is processed using IT and paper tools, with logic strictly related to the stated purposes and in such a way as to guarantee the security and confidentiality of the data itself. The collected data will be retained for the time strictly necessary to achieve the purposes for which they were requested. Specifically, the information provided for contact purposes will be retained for the time necessary to process the request, without prejudice to any longer retention obligations provided by law, such as in the case of tax or accounting purposes following the subsequent establishment of a professional relationship.
Third-Party Services and Data Transfer
For the proper functioning of the site and to guarantee its security, we use third-party services that may collect and process data such as the IP address. Our site is hosted on the Wix.com platform, therefore the data entered through the forms are stored through Wix's data storage, databases, and general applications on secure servers protected by firewalls; the complete privacy policy of the provider can be consulted on their official website. We also use the reCAPTCHA service provided by Google Ireland Limited to protect the site's forms from spam and abuse by bots. This system analyzes traffic and collects hardware and software data, sending it to Google, an operation based on our legitimate interest in ensuring the security of the website. Finally, we use the Google Maps widget to show the location of our studio on the contact page. This service may collect the user's IP address and usage data, which is why we request express prior consent via the appropriate cookie banner upon first access.
Recipients of the Data
The personal data collected will in no case be subject to dissemination. However, for the purposes indicated above, the information may be made accessible to employees and collaborators of the Data Controller, operating in their capacity as persons authorized to process personal data. The data may also be communicated to third parties performing outsourced activities on behalf of the Data Controller, such as, for example, the IT and web hosting service providers mentioned in the previous point, who regularly act as Data Processors.
Rights of the Data Subject
Under Articles 15 to 22 of the GDPR, the user has the right, at any time, to obtain confirmation of the existence or otherwise of personal data concerning them and to request access to it, as well as rectification, updating, or integration in the event of inaccuracies. The data subject may request the deletion of data, exercising the so-called right to be forgotten, if the information is no longer necessary for the purposes for which it was collected. It is also possible to request the restriction of processing, object to the processing itself for legitimate reasons, or exercise the right to data portability. Requests to exercise one's rights can be addressed to the Data Controller by sending a written communication to the email address info@consorziodiprogettazione.it. In any case, the data subject has the right to lodge a complaint with the competent Supervisory Authority, namely the Garante per la Protezione dei Dati Personali (Italian Data Protection Authority), if they believe that the processing of their data is contrary to current legislation on the matter.
Updates
This Privacy Policy may undergo changes or updates over time, also in conjunction with the entry into force of new sector regulations or the implementation of new functionalities on the website. We therefore invite users to periodically consult this page to remain constantly informed about our methods of data processing.