Information on the processing of personal data
Why this information
I'll briefly tell you how I manage the personal data I process in my daily work.
The criteria with which I manage data are based on the regulations governing the matter (Legislative Decree 196/2003 "Privacy Code" and EU Regulation 679/2016 "GDPR") and, more generally, on the principles of transparency, confidentiality, and fairness.
Data controller
The data controller is Guglielmo Pepe, via Laviano 168 IT-81100 Caserta CE Italia, who can be contacted by sending an email to the email address info@guglielmopepe.com.
Purposes and legal bases of the processing
Browsing data
The processing of browsing data is necessary to pursue the data controller's legitimate interest in the proper functioning of the services on the guglielmopepe.github.io domain.
The processing of browsing data is necessary to pursue the data controller's legitimate interest in the judicial protection of its rights and interests in the event of any computer crimes against the services on the guglielmopepe.github.io domain or the IT infrastructure, or in the event of disputes.
Contact details
Processing contact data is necessary to pursue the owner's legitimate interest in responding to communications sent to him.
The processing of contact data is necessary for the performance of a contract to which the data subject is party or for the implementation of pre-contractual measures taken at the data subject's request.
The processing of contact data is necessary to pursue the legitimate interest of the data controller to, where appropriate, seek judicial protection of his or her rights and interests.
Data for the execution of pre-contractual measures or contracts
The processing of data for the execution of pre-contractual or contractual measures is necessary for the pursuit of the legitimate interest of the data controller in the execution of a contract to which the data subject is a party or in the execution of pre-contractual measures adopted at the request of the data subject.
Description of the categories of personal data
Browsing data
Browsing data includes data whose transmission is implicit in the use of electronic communication protocols. This category includes, by way of example and not limited to, the IP addresses or domain names of computers and terminals used by users, the URI/URL (Uniform Resource Identifier/Locator) addresses of requested resources, the time of the request, the HTTP method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response from the server (successful, error, etc.), and other parameters relating to the user's operating system and IT environment.
Contact details
Contact data includes the sender's name and all personal data included in communications and related attachments. This category includes, but is not limited to, the sender's email address, nickname, first and last name, and any carbon copy recipients, as well as any personal data included in or attached to the message.
Data for the execution of pre-contractual measures or contracts
The category of data required for the execution of pre-contractual or contractual measures includes personal data necessary for the execution of pre-contractual or contractual measures. By way of example and not limited to, this category includes name, surname, company name, tax code, VAT number, REA registration number (if applicable), certified or non-certified email address, registered office address, residence, or domicile address, and any other personal data included in communications.
Data source
Browsing data
Browsing data originates from the use of electronic communication protocols by computer systems and software procedures used to operate the services on the guglielmopepe.github.io domain, which implicitly transmit some personal data during their normal operation. Therefore, when browsing the guglielmopepe.github.io domain, data relating to identified or identifiable natural persons may be processed.
Contact details
Contact data originates from the sending of communications that implicitly transmit some personal data. Therefore, receiving such communications may process data relating to identified or identifiable natural persons.
Data for the execution of pre-contractual measures or contracts
The data for the execution of pre-contractual or contractual measures originate from pre-contractual and contractual relationships.
Recipients and categories of recipients of personal data
Recipients of personal data may be service providers, judicial and/or administrative authorities.
Transfer of personal data to third countries or international organisations
The data controller does not intend to transfer personal data to a third country or to an international organization.
Retention period
Browsing data
Browsing data is retained for a maximum of 12 months, except in the event of criminal investigations by judicial authorities or disputes, in which case it is deleted ten years after the end of the same or as required by civil and tax legislation.
Contact details
Contact details and all personal data included in communications will be deleted ten years after the sender's last communication, or as required by civil and tax law. In the event of any disputes, the data will be deleted ten years after the end of the dispute.
Data for the execution of pre-contractual measures or contracts
Data used for the execution of pre-contractual measures or contracts will be deleted ten years after the sender's last communication or as required by civil and tax legislation, except in the event of any disputes, in which case the data will be deleted ten years after the termination of the same.
Rights of the interested party
Right of access, rectification, erasure, limitation, opposition and portability
The interested party has the right to request, where applicable, from the data controller access to personal data and the rectification or erasure of the same, or the restriction of the processing of personal data concerning him or her, or to object to their processing, in addition to the right to data portability.
The interested party can exercise these rights by contacting the data controller by sending an email to the email address info@guglielmopepe.com.
Right to withdraw consent
If the interested party has given consent to the processing of personal data for one or more specific purposes, he or she has the right to withdraw the consent given at any time.
The interested party can exercise these rights by contacting the data controller by sending an email to the email address info@guglielmopepe.com.
Right to complain to a supervisory authority
If the interested party believes that the processing is being carried out in violation of the law, he or she has the right to lodge a complaint with the Data Protection Authority or to take legal action.
Optionality and consequences of failure to communicate personal data
Browsing data
Providing browsing data is not a legal or contractual obligation nor a necessary requirement for entering into a contract.
The interested party is not required to provide browsing data, but failure to provide such data will make it impossible and/or difficult to use the services on the guglielmopepe.github.io domain.
Contact details
Providing contact details is not a legal or contractual obligation, nor a requirement necessary to enter into a contract, if the data subject is not a party to pre-contractual negotiations or is not a party to a contract with the data controller.
The data subject is not required to provide contact information, and failure to provide such information will not have any consequences for the sender, unless the data subject is involved in pre-contractual negotiations or is not party to a contract with the data controller.
Providing contact details is a legal or contractual obligation or a requirement necessary to enter into a contract, if the data subject is involved in pre-contractual negotiations or is party to a contract with the data controller.
The data subject is required to provide contact information, and failure to provide such information will make it impossible to follow up on pre-contractual or contractual measures, if the data subject is involved in pre-contractual negotiations or is a party to a contract with the data controller.
Data for the execution of pre-contractual measures or contracts
The provision of data for the execution of pre-contractual or contractual measures is a necessary requirement for the execution of pre-contractual measures or contracts.
The interested party is not obliged to provide data for the execution of pre-contractual or contractual measures, but failure to provide such data will make it impossible to follow up on the execution of pre-contractual measures or contracts.
Existence of an automated decision-making process
The data subject shall not be subject to an automated decision-making process based solely on automated processing, including profiling, which produces legal effects concerning him or her or similarly significantly affects him or her.