Privacy and Cookies Policy

HOW WE PROTECT YOUR DATA

PRIVACY POLICY PURSUANT TO ART.13, RECITAL 60-62, (EU) REGULATION N. 679/2016 (“GDPR”)

DATA CONTROLLER: MARILIA MELATO

MISSION

Our Privacy Policy aims to describe in a clear and transparent manner the management of the website www.danieleandmarilia.com and the processing of personal data of the users who consult it and make use of the services offered.

The mission of www.danieleandmarilia.com, property of Daniele and Marilia, is to provide its users with detailed and specific information for any necessity regarding our products and services of various kinds.

The users has the possibility to:

·Request free information and/or quotations about specific products, by using appropriate contact forms;

·Be constantly updated about offered services and products and regarding any news or contents directly accessible through www.rossiniphotography.it

·Interact with the website via social buttons

You can also contact the organization through the phone numbers and email address listed on the website.

PRINCIPLES

One of our key objectives is personal data protection. Data are processed in a lawful, fair and transparent manner. The processed data are adequate, relevant and limited to what is necessary, exact and, if needed, updated, collected for specified, explicit and legitimate purposes, pursuant to Arts. 5 and 6 of the (EU) General Data Protection Regulation 2016/679 and following the granting of consent where applicable.

The data are processed in a manner that ensures an appropriate level of security to personal data, including protection from unauthorized or unlawful processing and accidental loss, destruction or damage of the data through appropriate technical and organizational measures (integrity and confidentiality).

In case of substantial changes to this Privacy Policy and the related data processing, as well as any different functions and technical characteristics, we inform you that it is up to you to keep using our services.

SOURCES FROM WHICH PERSONAL DATA ORIGINATE

Collected from the data subject:

·Contact Area/Request for Information of the data controller’s website through the Data Collection Form, specific e-mail address and/or telephone number

CATEGORIES OF DATA SUBJECTS

·Users (potentially interested subjects) following consultation, data provision, access and use of the website www.danieleandmarilia.com

PROCESSED PERSONAL DATA

PERSONAL DATA: data referring to legal persons (name, company name, telephone number/email)

PERSONAL DATA: data referring to natural persons (name/surname, telephone number/email)

CATEGORIES OF PERSONAL DATA

COMMON: personal and contact data and identification data.

PURPOSES OF THE PROCESSING | DESCRIPTION OF THE PURPOSE AND LEGAL BASIS FOR THE PROCESSING DURATION OF DATA PROCESSING AND DATA RETENTION PERIOD*

  • Execution of pre-contractual measures: information, consultancy, feasibility, quotation, assistance, monitoring of quotation status and detection of the degree of satisfaction and any communication to the parties involved in such management, also through their own sales network.
  • LEGAL BASIS

    Processing is necessary for the execution of pre-contractual measures taken by request of the data subject. Consent not required.

    ·Storage|Duration: the data will be kept for a period strictly necessary to the correct and complete management of the request.

  • Activity related to a pre-contractual and/or contractual phase which is functional to a user’s request or required by a specific legal provision, it is mandatory and, otherwise, it will not be possible to receive the information and access the potentially requested services.
  • Ancillary activities related to the management of User/Customer requests and transmission of response that may include the transmission of promotional material/product catalogue; for the finalization of the purchase order of the products and services offered.

    LEGAL BASIS

    Processing is necessary for the execution of pre-contractual measures taken by request of the data subject. . Consent not required.

    Storage|Duration: the data will be kept for a period strictly necessary to the correct and complete management of the request.

  • Legal obligations. Fulfillment of specific obligations under regulations and by the applicable European and national legislation. Legal Basis For The Processing: Fulfillment of legal obligations. Consent not required. Duration and storage as imposed by legal requirements.
  • Defensive privacy.Assessment, exercise or defense of the rights of the Data Controller, where necessary, including out-of-court and judicial proceedings. Legal Basis For The Processing: Legitimate interest of the data controller; Consent not required. Duration of out-of-court and judicial litigation up to the exhaustion of the terms of availability of the appeal actions; storage as imposed by legal requirements.
  • *Expired the above-mentioned terms of duration of data processing and storage, data will be, where possible, destroyed, deleted or anonymized, and compatibly with the technical procedures of cancellation and backup, unless national or Union law requires the retention of the Data.

    COOKIE

    Cookies are text files that are automatically generated into the user’s computer following a visit to some pages of the website. We use only technical cookies, in order to offer the user an easy navigation and for internal security and system administration purposes.

    Technical cookies are those used exclusively with a view to “carrying out the transmission of a communication on an electronic communications network, or insofar as this is strictly necessary to the provider of an information society service that has been explicitly requested by the contracting party or user to provide the said service.”

    The technical cookies used by our website are divided into various types:

    ·Session cookies allow the website to link user’s actions during a browser session, such as switching from one page to another, allowing faster navigation. An example are the cookies we use to:

    ▪Collect and store the information selected by the user to transmit the quotation request in the specific reserved area.

    ·Functional cookies are used to store the preferences set by the user during navigation and to facilitate the use of certain services, such as setting the language. For example in our website they are used to:

    ▪save the quotation by accessing the reserved area after registration;

    ▪In order to validate the submission and authentication and collect the given consents to the processing, including the one related to Cookies;

    ▪identify the type of navigation tool, whether fixed or mobile, to direct the customer to its compatible version (web responsive);

    Analytics cookies collect anonymous information for internal purposes in order to provide a better browsing experience to users’. The data collected by analytics cookies help us understand how our users use the website, the number of accesses, the most visited pages, the visits average duration, etc., allowing us to improve the content on the website and how it is presented. The analytics cookies used do not collect information that allow to identify the user personally: all the collected data is aggregated and therefore anonymous.

    Analytics cookies (Google Analytics): it is a web analysis service provided by a third-party, Google Inc. (“Google”), which uses a cookie that is placed on the user’s computer and allows to understand, on an anonymous and aggregated basis, how visitors interact with us.

    Google uses proprietary cookies to monitor visitor interactions. This cookie is used to store information, for example the time of the current visit, any previous visits to the website by the same visitor and the website that reported the web page to the visitor.

    We use the function of anonymizing the IP addresses of users who visit the website, in order to make them not identifiable by Google.

    The implementation of this setting in Google Analytics allows to anonymize the IP address, by setting the value 0 to replace the end of the IP (last octet in case of IPv4 address and last 80 bits of IPv6 addresses).

    Such process of anonymization takes place during the transmission of data to Google systems, whereby the data are stored and processed without the full IP address ever being written by Google.

    If this procedure is not implemented, Google reserves the right to collect user identification data and process it for its own and different purposes, such as the provision of targeted promotional content. In addition, it has been implemented the block of information sharing with Google and its Partners.

    Therefore, considering that the processing of data is totally anonymous by both us and the third-party, it is not necessary to request specific users’ consent, nor notify such treatment to the Data Protection Supervisory Authority. For further information, please check the following link: Https://support.google.com/analytics/answer/2763052?hl=it.

    DATA RECIPIENTS

    The data may also be processed, on behalf of the Company, by external parties designated as data processors who receive adequate operating instructions. Such parties are essentially included in the following categories:

    Italy:

    a.Supervisory and control authorities and bodies;

    b.Police and Judicial Authorities;

    c.Subjects that provide professional consulting services also in associated form;

    d.Subjects performing ICT services (Hosting/Data Center);

    e.Subjects that provide ongoing compliance support services;

    f.Subjects that offer IT, ICT, Cloud, Web and Digital Marketing services;

    g.Subjects that offer papery and digital archiving services and substitute storage;

    h.Subjects that offer traditional and automated mailing services;

    i.Companies or consultants of other various services;

    MANDATORY DATA PROVISION

    The provision of data, including special data, is mandatory as it is a necessary requirement for the conclusion of the contract. Therefore, the missing, partial or incorrect provision of such data, makes it impossible to manage the request and the conclusion of the contract.

    TRANSFER OF PERSONAL DATA OUTSIDE THE EU

    The data is not transferred outside the european union

    DATA SUBJECT RIGHTS – COMPLAINT TO THE SUPERVISORY AUTHORITY

    By contacting  info@danieleandmarilia.com the data subjects can ask the data controller the access to their personal data and their deletion (unless the National or European Law impose the storage of such data), the correction of inaccurate data, the integration of incomplete data, the limitation of data processing in the cases listed under Art. 18 of GDPR, as well as the opposition to data processing in the hypotheses of legitimate interest of the data controller.

    The data controller shall provide the data subject with the information related to the request for the exercise of the rights of the data subject (pursuant to Arts.15 to 22, GDPR) without undue delay and, in any case, at the latest within one month of receipt of the request, as provided under Art. 12 of GDPR.

    Moreover, the data subjects, where the data processing is based on consent or on the contract and it is performed with automated tools, have the right to receive their data in a structured, commonly used and machine readable format and, if technically feasible, to have it transmitted (Right to data portability) to another controller without any hindrance. If chosen, the data subjects may simultaneously or subsequently request the definitive erasure of the data (Right to be forgotten).

    The data subjects have the right to revoke at any time the consent given for marketing and/or profiling related to direct marketing purposes by opposing to such data processing. This does not affect the possibility for the data subject, who prefers to be contacted for the above purposes exclusively by automated means, to express his opposition only to the reception of communication via traditional means or vice versa, including the possibility, in case of automated means, of objecting to one or more contact methods (e.g. SMS) preferring other forms of contact among those provided for (e.g. only Email).

    When the processing is based on consent for one or more purposes (Art. 6 (1)(a), GDPA) and for the processing of special categories of personal data (Art. 9 (2)(a) GDPR), the withdrawal of consent at any time shall not affect the lawfulness of processing based on consent before its withdrawal.

    The data subjects have the right to lodge a complaint with a supervisory authority in the Member State of their habitual residence, place of work or State of the alleged infringement.

    CONSUMER CODE

    Prior consent, for the collection of data necessary for the performance of pre-contractual and contractual measures, therefore with negotiated content finalized to the conclusion of the contract, Tales of a dreamer srl may use remote communication techniques (telephone with operator, e-mail, internet, etc.). Means of distance communication are techniques distinct from advertisements, used by the offeror to contact customers. Such techniques do not involve the physical and simultaneous presence of the customer (qualifiable consumer) and the offeror or his appointee. By Consumer is meant the natural person acting for purposes unrelated to the business or professional activity performed. This authorization may be revoked at any time.

    The use of the Website, including the one intended for tablets and/or smartphones, by the Customer and/or User implies full knowledge and acceptance of the content and any instructions included in this version of the information published by Tales of a dreamer at the time the site is accessed. Tales of a dreamer informs that this information note may be modified and therefore recommends a periodic reading.

    COOKIES POLICY

    COOKIES: WHAT ARE THE BENEFITS FOR OUR USERS

    Our website uses cookies, as most websites do, to help us provide the best possible browsing experience to our users. Cookies are small text files set on your computer or smartphone during browsing. Our Cookie policy is intended to describe in a clear and transparent manner the types of cookies used, with regard to the processing of personal data of the users who consult it and who make use of the services offered pursuant to Arts. 13 and 14 of the (EU) General Data Protection Regulation 2016/679 and pursuant to the Provision of the Data Protection Supervisory Authority “simplified arrangements to provide information and obtain consent regarding cookies” of 08 May 2014, as well as the subsequent “Clarifications regarding the implementation of the legislation on cookies” of 05 June 2015 and the “Guidelines on the processing of personal data for online profiling” of 19 March 2015.

    In addition to the technological tool made available and related Consent Banner, it’s also possible to deny permission to install profiling cookies by changing the settings of the browser in use, as better illustrated in the paragraph below: “How to disable cookies”.

    We use third-party cookies, technical and not, to allow users to navigate more efficiently and enhance their browsing experience. Third-party cookies are set by a different domain than the website visited by the user.

    In our domain, for our website and landing pages (belonging to the same domain), we use several cookies. The cookies are solely and exclusively those mentioned in the specific “COOKIES WE USE” section listed below Cookies help us to:

  • Make the website work properly;
  • Improve speed/security of the website;
  • Improve continuously our website for you;
  • You can learn more about all the cookies we use here below.

    TECHNICAL COOKIES

    Technical cookies are those used exclusively with a view to “carrying out the transmission of a communication on an electronic communications network, or insofar as this is strictly necessary to the provider of an information society service that has been explicitly requested by the contracting party or user to provide the said service.”

    Technical cookies are grouped into different types:

    Session cookies allow the website to link user’s actions during a browser session, such as switching from one page to another, allowing faster navigation or to inhibit return to the homepage when you have already sent a request or when browsing the reserved area. Functional cookies are used to store the preferences set by the user during navigation and to facilitate the use of certain services, such as setting the language or viewing a video.  Analytics cookies: it is a web analysis service provided by a third-party which uses a cookie that is placed on users’ computer and allows to understand, on an anonymous and aggregated basis, how visitors interact with us. For example, in case of Google Analytics, we use the function of anonymizing the IP addresses of users who visit the website, in order to make them not  identifiable by Google. The implementation of this setting in Google Analytics allows to anonymize the IP address, by setting the value 0 to replace the end of the IP (last octet in case of IPv4 address and last 80 bits of IPv6 addresses).

    User IP address Anonymized IP address

    125.31.214.144 125.31.214.0

    Such process of anonymization takes place during the transmission of data to Google systems, whereby the data are stored and processed without the full IP address ever being written by Google. If this procedure is not implemented, Google reserves the right to collect user identification data and process it for its own and different purposes, such as the provision of targeted promotional content. In addition, it has been implemented the block of information sharing with Google and its Partners. Therefore, considering that the processing of data is totally anonymous by both us and the third-party, it is not necessary to request specific users’ consent, nor notify such treatment to the Data Protection Supervisory Authority. For further information, please check the following link: https://support.google.com/analytics/answer/2763052?hl=it.

    THIRD-PARTY COOKIES

    We use third-party cookies to provide a better browsing experience, including:

    Cookies for graphical enhancement of the website from a point of view of design and functionality  Social Cookies to provide you a more personal browsing experience, allow you to interact with social networks and/or other platforms, share contents or show your interest through the “like” button. The above-mentioned buttons, boxes and news can be found on our website, but the contents come directly from the related social networks and the publication of users’ preferences or comments is subject to access to the profile and its authorization. The interactions and information we collect are subject to the privacy settings of the user’s profile for each social network. Thanks to these cookies you can easily “Like” and/or share our content on social networks such as Facebook and Twitter;

    Social Connect to allow you to fill information forms through your Social profile and access your private account;

    Browsing tracking cookies to generate contacts of potential customers;

    The privacy implications vary between social networks and depend on the chosen privacy settings. The management of information collected by third-party is regulated by the related policies to which please refer. To ensure greater transparency and convenience you may find below the most widespread and used, the links to the various policies and how they manage cookies:

  • Facebook cookie policy: https://www.facebook.com/help/cookies/;
  • Facebook (settings): log in your account. Privacy section;
  • Twitter cookie policy: https://support.twitter.com/articles/20170514;
  • Twitter (settings): https://twitter.com/settings/security;
  • Google+ cookie policy: http://www.google.it/intl/it/policies/technologies/cookies/;
  • Google+ (settings): http://www.google.it/intl/it/policies/technologies/managing/.
  • Linkedin cookie policy: https://www.linkedin.com/legal/cookie-policy;
  • Linkedin (settings): log in your account. Privacy&Settings section;
  • YouTube cookie policy http://www.google.com/intl/it_it/policies/technologies/cookies/;
  • YouTube (settings): log in your account. Personal Settings & Privacy.
  • Pinterest cookie policy: https://about.pinterest.com/it/privacy-policy;
  • Pinterest (settings): log in your account. Personal Settings & Privacy section
  • One of our key objectives is personal data protection.

    Data are processed in a lawful, fair and transparent manner. The processed data are adequate, relevant and limited to what is necessary, exact and, if needed, updated, collected for specified, explicit and legitimate purposes, pursuant to Arts. 5 and 6 of the (EU) General Data Protection Regulation 2016/679 and following the granting of consent where applicable.

    The data are processed in a manner that ensures an appropriate level of security to personal data, including protection from unauthorized or unlawful processing and accidental loss, destruction or damage of the data through appropriate technical and organizational measures (integrity and confidentiality).

    In case of substantial changes to this Privacy Policy and the related data processing, as well as any different functions and technical characteristics, we inform you that it is up to you to keep using our services.

    SOURCES FROM WHICH PERSONAL DATA ARE ORIGINATED

    Collected from the data subject: Contact Area/Request for information/Request for a demo/Registration to Webinar of the data controller’s website through the Data Collection Form, specific email address and/or telephone number.

    CATEGORIES OF DATA SUBJECTS

    Users (customers and potential customers) Legal persons

    PROCESSED PERSONAL DATA

    Browsing data related to information, whether related to a registered user (authenticated user) or a non logged-in visitor through a profile (non authenticated user), such as for example:    Collect and store the information entered/selected by the user to transmit the contact/registration/application request in the specific page of the    collect and store the IP address of the user during the forwarding of the request for contact/quotation/saving quotation by accessing the Reserved Area after registration;In order to validate the submission and authentication and collect the given consents to the processing, including the one related to Cookies;  identify the type of navigation tool, whether fixed or mobile, to direct the customer to its

    compatible version (web responsive);

    CATEGORIES OF PERSONAL DATA

    Navigation data, related preferences and interests expressed.

    PURPOSE OF PROCESSING TYPES OF COOKIES USED AND LEGAL | BASIS FOR THE PROCESSING |DATA RETENTION PERIOD

    1. Anonymous and aggregated statistics. Analytics cookies (Third-Party Technical Cookies)

    Monitoring of visitor interactions and storage of statistical information related to user navigation on anonymous and aggregated database, for example the time of the current visit, any previous visits to the website by the same visitor, the website that reported the web page to the visitor, the pages visited and their time, etc.

    We use: “Google Analytics” by Google Inc. (“Google”):

    https://support.google.com/analytics/answer/2763052?hl=it

    “Google Tag Manager” by Google Inc. (“Google”): allows you to create and update tags, fragments of code inserted in the web pages of your website, in order to simplify the management of a possible marketing campaign and to store additional statistical information on browsing, etc..

    Legal Basis For The Processing:

    Legitimate interest of the Data Controller.  Consent not required.    12 months.

    2. Website improvement. Website Improvement Cookies (Third-Party Cookies):

    We regularly test new designs or features of our website. We do this by showing different versions of our website for different network users and, anonymously, we monitor how our visitors respond to these different versions of graphics and positioning, for example regarding content, images, buttons,

    etc. Ultimately this helps us to offer a better and more communicative website.

    Legal Basis For The Processing:  Consent (optional and revocable at any time) through Consent

    Banner.  12 months.

    3. Expression of interest and sharing of our content.

    Social Cookies (Third-Party Cookies):

    Expression of interest and/or sharing of our content and/or viewing a video:

    “AddThis”: allows us to easily offer you sharing and Like buttons in one package “AddThis”: http://www.addthis.com/privacy/privacy-policy#publishervisitors;

    To deactivate: http://www.addthis.com/privacy/opt-out

    Link to the Social in use: see in the above section “Third-Party Cookies”.

    Legal Basis For The Processing:

    Consent (optional and revocable at any time) through Consent Banner

    Some cookies remain active only until the browser is closed or the log-out command is executed. Other cookies “survive” the closing of the browser and are also available on future visits of the user. These cookies are known as persistent and their duration is set by the server at the time of their creation. In some cases there is a fixed deadline, in other cases the duration is unlimited.

    In particular, we make use of persistent cookies with the exception of certain information that we store solely for technical purposes.

    It should also be noted that, in accordance with the Data Protection Supervisory Authority’s instructions regarding the storage of personal data for profiling purposes, profiling cookies should be stored on the user’s device for a period not exceeding 12 months.

    In cases where we do not have the power to change the duration settings of the cookie, as it is entirely managed by third parties, we will proceed to request a new consent to the use of these cookies at the end of the 12 months.

    The technological tool in use stores the consents lent by the user for a period of 12 months, at the end of this period, the user will be shown the banner through which it will be necessary to express again the consent to the use of cookies.

    If you delete your browsing history and related cookies, the next time you access it, you will be presented with the banner through which you will need to express your cookie consent again. It remains possible to modify the choices made at any time, following the instructions given in the CONSENT OF THE DATA SUBJECT.

    DATA RECIPIENTS

    The data may be processed by the third parties that own the cookies we use. Personally identifiable information, related expressions of interest and preferences are only available to the Third Parties. The possible profiling processes, also through cross-reference of other information in their possession and the enrichment of the same, based on the analysis and processing of information relating to uses, customs, tastes, preferences, interests, etc., also through automated processes, aimed at the reconstruction of specific profiles is performed only by the Third Parties. These are identifiable through the cookies we use and specified in detail in the section above called “Purposes of the Processing” in this Cookie Policy.

    MANDATORY DATA PROVISION

    The provision of data through third-party cookies is not mandatory but discretionary as it is not necessary for navigation, which will still be available in all its features.

    AUTHORIZED PARTIES TO DATA PROCESSING

    The data may be processed by the employees and collaborators of the company functions, including the sales network, responsible for pursuing the above-mentioned purposes, which have been expressly authorized to the processing, which have received appropriate operating instructions and which have been adequately sensitized and trained.

    TRANSFER OF PERSONAL DATA OUTSIDE THE EU

    We do not directly transfer data abroad, the data may be transferred abroad to non-European countries trough the Third-Party Cookies we use. For further information you can check the links by us provided in the section above called “Purposes of the Processing” in this Cookie Policy.

    A copy of the data can be obtained in the manner described in the following section “DATA SUBJECT

    RIGHTS – COMPLAINT TO THE SUPERVISORY AUTHORITY”.

    DATA SUBJECT RIGHTS – COMPLAINT TO THE SUPERVISORY AUTHORITY

    By contacting Daniele and Marilia by email the data subjects can ask the data controller the access to their personal data and their deletion (unless the National or European Law impose the storage of such data), the correction of inaccurate data, theintegration of incomplete data, the limitation of data processing in the cases listed under Art. 18 of GDPR, as well as the opposition to data processing in the hypotheses of legitimate interest of the data controller.

    The data controller shall provide the data subject with the information related to the request for the exercise of the rights of the data subject (pursuant to Arts.15 to 22, GDPR) without undue delay and, in any case, at the latest within one month of receipt of the request, as provided under Art. 12 of GDPR.

    Moreover, the data subjects, where the data processing is based on consent or on the contract and it is performed with automated tools, have the right to receive their data in a structured, commonly used and machine readable format and, if technically feasible, to have it transmitted (right to data portability) to another controller without any hindrance. If chosen, the data subjects may simultaneously or subsequently request the definitive erasure of the data (Right to Be Forgotten). The data subjects have the right to revoke at any time the consent given for marketing and/or profiling related to direct marketing purposes by opposing to such data processing.

    This does not affect the possibility for the data subject, who prefers to be contacted for the above purposes exclusively by automated means, to express his opposition only to the reception of communication via traditional means or vice versa, including the possibility, in case of automated means, of objecting to one or more contact methods (e.g. SMS) preferring other forms of contact among those provided for (e.g. only Email)*.

    When the processing is based on consent for one or more purposes (Art. 6 (1)(a), GDPA) and for the processing of special categories of personal data (Art. 9 (2)(a) GDPR), the withdrawal of consent at any time shall not affect the lawfulness of processing based on consent before its withdrawal.

    The data subjects have the right to lodge a complaint with a Supervisory Authority in the Member State of their habitual residence, place of work or State of the alleged infringement.

    CONSENT OF THE DATA SUBJECT

    Having read the Cookie Policy above, I understand that my consent is purely optional and may be revoked at any time. The first time you visit/access the reserved area, you will automatically see a banner containing both the link to this complete policy and the request for consent to the use of cookies; this banner is managed bythe technological solutions  in use and made available to you.

    For further information: www.cookiebot.com/it/features.

    Consent can be given by clicking the OK button on the banner, scrolling the page and/or accessing the external area of the banner with a simple click and/or other sections by clicking on the links under the banner (consequent action).

    If you wish to give consent only for certain types of cookies, simply click on the “Show Details” link. The banner expands and shows a detailed list of all cookies used, divided by category in accordance with the different purposes. To deny consent to any category of cookies you must uncheck the flag next to its name and confirm your choice. We do not install any cookies until your consent is given.

    Modification of consent:

    You can modify the consent, previously expressed through banners, by clicking on the “Cookies Settings” link in the footer of each page. A detailed list of all active cookies, divided by category, appears. To modify the consent to one or more cookies you must uncheck the flag next to it and confirm your choice. To disable cookies:

    The technological tool in use allows you to deny consent to the use of different third-party cookies in whole or in part. It is also possible to block cookies directly thorough the appropriate settings on your browser: navigation will still be available in all its features. Below you can find links explaining how to disable cookies for the most popular browsers (for other browsers that may be used, we suggest searching for this option in the software help)

    DATA RIGHTS

    How to protect your RightsPRIVACY POLICY PURSUANT TO ART.13 OF (EU) REGULATION N. 679/2016 (“GDPR”)PRINCIPLESOne of our key objectives is personal data protection. Data are processed in a lawful, fair and transparent manner. The processed data are adequate, relevant and limited to what is necessary, exact and, if needed, updated, collected for specified, explicit and legitimate purposes, pursuant to Arts. 5 and 6 of the (EU) General Data Protection Regulation 2016/679 and following the granting of consent where applicable.The data are processed in a manner that ensures an appropriate level of security to personal data, including protection from unauthorized or unlawful processing and accidental loss, destruction or damage of the data through appropriate technical and organizational measures (integrity and confidentiality).In case of substantial changes to this Privacy Policy and the related data processing, as well as any different functions and technical characteristics, we inform you that it is up to you to keep using our services.DATA SUBJECT RIGHTS – COMPLAINT TO THE SUPERVISORY AUTHORITYBy contacting Tales of a dreamer S.R.L.S. via email at privacy@talesofadreamer.com the data subjects can ask the data controller the access to their personal data and their deletion (unless the National or European Law impose the storage of such data), the correction of inaccurate data, the integration of incomplete data, the limitation of data processing in the cases listed under Art. 18 of GDPR, as well as the opposition to data processing in the hypotheses of the legitimate interest of the data controller.The data controller shall provide the data subject with the information related to the request for the exercise of the rights of the data subject (pursuant to Arts.15 to 22, GDPR) without undue delay and, in any case, at the latest within one month of receipt of the request, as provided under Art. 12 of GDPR.Moreover, the data subjects, where the data processing is based on consent or on the contract and it is performed with automated tools, have the right to receive their data in a structured, commonly used and machine readable format and, if technically feasible, to have it transmitted (Right to data portability) to another controller without any hindrance. If chosen, the data subjects may simultaneously or subsequently request the definitive erasure of the data (Right to be forgotten).The data subjects have the right to revoke at any time the consent given for marketing and/or profiling related to direct marketing purposes by opposing to such data processing. This does not affect the possibility for the data subject, who prefers to be contacted for the above purposes exclusively by automated means, to express his opposition only to the reception of communication via traditional means or vice versa, including the possibility, in case of automated means, of objecting to one or more contact methods (e.g. SMS) preferring other forms of contact among those provided for (e.g. only Email)*.When the processing is based on consent for one or more purposes (Art. 6 (1)(a), GDPA) and for the processing of special categories of personal data (Art. 9 (2)(a) GDPR), the withdrawal of consent at any time shall not affect the lawfulness of processing based on consent before its withdrawal.The data subjects have the right to lodge a complaint with a supervisory authority in the Member State of their habitual residence, place of work or State of the alleged infringement.