Privacy and Personal Data Protection Policy

This notice is provided in compliance with Articles 13 and 14 of EU Regulation 679/2016 (hereinafter referred to as the “Regulation”) to users (hereinafter: “Users” or “User”) of the website andreabonzini.it (hereinafter: the “Site”), owned by Andrea Bonzini, who acts as the Data Controller of personal data (hereinafter: the “Data Controller”). This policy describes how personal data is managed and processed on the Site and informs Users about the purposes and methods of data processing when they provide their information.

The services offered by the Data Controller are intended for individuals over 18 years of age. If the Data Controller becomes aware of any data processing involving minors under 18 without valid parental or legal guardian consent, they reserve the right to unilaterally terminate the service and delete the acquired data.

Principles Governing Personal Data Processing

In accordance with the Regulation, the Data Controller declares that the processing of collected data will adhere to the principles of fairness, lawfulness, transparency, confidentiality, and the protection of fundamental rights.

Types of Users

Based on how they use the Site, Users are categorized as follows:

• Basic Users – Some services can be accessed anonymously, while others, such as requesting free trial lessons, require Users to provide their name.

Purpose, Legal Basis, and Optionality of Data Provision

Personal data provided by Users through the Site will be processed with their consent for the purposes outlined below:

A) Service Provision for Basic Users:

To access certain services, such as contacting the site administrators for lesson participation, Users must provide personal data, including:

• First Name
• Last Name
• Email Address
• Phone Number

Providing this data constitutes explicit consent to the processing of personal information. The legal basis for data processing under section A is found in Article 6(a) of the Regulation, which states that “the data subject has given consent to the processing of their personal data for one or more specific purposes.”

Methods of Data Processing and Retention

The Data Controller ensures that personal data is processed in full compliance with the Regulation using manual, computerized, or electronic methods. Automated tools may also be employed to store, manage, and transmit data.

Collected and processed data will be protected to minimize risks related to unauthorized access, dissemination, loss, or destruction, in accordance with Articles 25 and 32 of the Regulation.

Personal data will only be retained for as long as necessary to provide the requested services. In compliance with Article 7(3) of the Regulation, Users have the right to withdraw their consent at any time.

Unless a deletion request is received, personal data will be retained for a maximum period of ten (10) years from the last date of service provision.

Recipients of Personal Data

Personal data may be processed by individuals or entities acting as Data Processors under Article 28 of the Regulation or by those authorized to process data under Article 29 of the Regulation.

For certain services, data may be shared with companies that collaborate with or use the Data Controller’s services, solely for the purpose of providing the requested services. In such cases, these companies act as independent data controllers, and the Data Controller is not responsible for their processing activities. Additionally, the Data Controller is not liable for the content or compliance of third-party websites regarding personal data protection regulations.

Outside of these cases, personal data will not be disclosed unless required by law or regulatory obligations.

Transfer of Data Outside the EU

Personal data collected through the Site may be transferred outside the national territory solely for the execution of requested services and in compliance with the Regulation.

Some data may be shared with recipients located outside the European Economic Area (EEA). The Data Controller ensures that these recipients process personal data in compliance with the Regulation.

Collection of Navigation Data

The Site’s computer systems and software procedures automatically collect certain personal data as part of standard operations. This includes:

• IP addresses
• Domain names of Users’ computers
• User browser requests
• Date and time of requests
• Server response codes
• Operating system and IT environment details

This data is used exclusively for statistical and anonymous purposes, to improve User experience and ensure proper site functionality. However, data may be used to determine responsibility in cases of suspected cybercrimes.

Cookies, Search Engines, and Location Data

Cookies help facilitate User access to services offered by the Site and improve browsing efficiency. No personal data is transmitted or collected via cookies, nor are tracking systems used.

Users can disable cookies by adjusting browser settings.

If the Site is accessed with location detection enabled, it may collect and process information about the User’s location. This data is processed anonymously and used solely to enhance location-based features. Users can enable or disable location services in their device settings at any time.

For more details, refer to the Cookie Policy page.

User Rights

Users have the right to:

• Confirm whether personal data concerning them is being processed.
• Obtain information about:
  • The origin, purposes, and legal basis of data processing.
  • Legitimate interests pursued by the Data Controller or third parties.
  • Recipients or categories of recipients of personal data.
  • The Data Controller’s intention to transfer data to a third country or international organization.
  • The retention period for personal data.
  • The logic, significance, and consequences of automated processing, including profiling.
  • The identity of the Data Controller, Data Processors, and the Data Protection Officer (DPO), if applicable.
  • Entities or categories of entities to whom personal data may be disclosed.

Users also have the right to:

• File a complaint with a Supervisory Authority.
• Request updates, corrections, or additions to their data.
• Request deletion, anonymization, or blocking of unlawfully processed data.
• Restrict data processing.
• Request data portability to another Data Controller.
• Withdraw consent at any time.
• Object, in whole or in part, to the processing of their personal data.

Data Controller and Contact Information

To exercise their rights or request further information regarding personal data processing, Users may contact the Data Controller:

Andrea Bonzini
Email: andrea.bonzini@fastwebnet.it

Changes to This Policy

This Privacy Policy may be updated over time. Any significant changes regarding how andreabonzini.it processes User data will be prominently communicated on the Site.