Privacy

Privacy Policy

Last Updated: January 8, 2025

We are committed to protecting your personal data and respecting your privacy, in accordance with the General Data Protection Regulation (EU) 2016/679 (“GDPR”). This Privacy Policy explains how we collect, use, share, and protect the personal data of users (“you” or “user”) who visit or use our website (“Site”).

1. Types of Personal Data Collected

We may collect and process different categories of personal data depending on how you interact with the Site:

Contact Data: e.g., name, email address, phone number, or other information provided when filling out forms or registering.
Usage Data: e.g., IP addresses, browser type, operating system, referrer URL, pages visited, and access times, collected automatically when interacting with the Site.
Cookies and Similar Technologies: we use cookies and similar technologies to provide essential functions and improve your browsing experience. For more details, see Section 8 or our dedicated Cookie Policy.

2. Legal Bases for Processing

We process your personal data only when we have a valid legal basis, in accordance with Article 6 of the GDPR, including:

Consent (Art. 6(1)(a) GDPR): you have given explicit consent for a specific purpose (e.g., subscribing to a newsletter).
Performance of a Contract (Art. 6(1)(b) GDPR): processing is necessary to fulfill a contract or respond to pre-contractual requests.
Legal Obligation (Art. 6(1)(c) GDPR): processing is necessary to comply with a legal obligation.
Legitimate Interest (Art. 6(1)(f) GDPR): processing is necessary for our legitimate interests (e.g., site security, statistical analysis), provided your rights and interests do not override them.

3. How Personal Data is Used

Collected personal data is used for purposes including:

Site Operation and Management: to provide services, manage user accounts, and improve your experience.
Communications: to respond to your inquiries or provide updates about the Site or this Policy.
Marketing and Promotional Activities (if applicable): to send newsletters or commercial communications, where legally required, only with your consent.
Compliance and Protection: to fulfill legal obligations, prevent fraud, protect our rights, and ensure Site security.

4. Data Retention

We retain personal data only as long as necessary to fulfill the purposes for which it was collected, unless a longer retention period is required or permitted by law. Criteria include:

Duration necessary to provide Site services or features.
Compliance with legal obligations (e.g., tax or accounting).
Managing disputes or legal investigations that require data retention.

5. Sharing Personal Data

Personal data may be shared with:

Service Providers: third parties processing data on our behalf (e.g., hosting, analytics, payment providers) who act as Data Processors under contractually required security measures.
Competent Authorities: when required by law or legal proceedings (e.g., in response to a court order).
Business Transfers: in case of mergers, acquisitions, or asset sales, personal data may be transferred to the successor entity, in compliance with GDPR.

We do not sell or rent your personal data to third parties.

6. International Data Transfers

If we transfer your personal data outside the European Economic Area (EEA), we will ensure that such transfers are lawful and include adequate safeguards in accordance with GDPR, such as:

European Commission adequacy decisions.
Standard contractual clauses.
Binding corporate rules.
Other legally permitted mechanisms, where applicable.

7. Your Rights

Under Articles 15–22 of the GDPR, you have certain rights regarding your personal data:

Right of Access: request confirmation and a copy of your personal data being processed.
Right to Rectification: request correction of inaccurate or incomplete data.
Right to Erasure (Right to be Forgotten): request deletion of personal data if no longer necessary or if processing is unlawful.
Right to Restrict Processing: request restriction of processing in certain circumstances.
Right to Data Portability: receive your personal data in a structured, commonly used, machine-readable format and transmit it to another controller if technically feasible.
Right to Object: object to processing based on legitimate interests or direct marketing.
Right to Withdraw Consent: if processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

To exercise these rights, contact us using the details in the “Contacts” section below.

8. Cookies and Similar Technologies

We use cookies and tracking technologies to collect Usage Data, improve your browsing experience, and analyze how the Site is used. You can manage or disable cookies through your browser settings, though some features may not function correctly if cookies are disabled. For details, see our [Cookie Policy] or the Site’s cookie section.

9. Security Measures

We implement appropriate technical and organizational measures to protect your personal data from unauthorized or unlawful processing, accidental loss, destruction, or disclosure. However, no transmission or storage system can be guaranteed 100% secure.

10. Minors’ Privacy

Our Site is not intended for individuals under [13/16 years – adjust per country]. We do not knowingly collect personal data from minors without verifiable parental consent. If you believe a minor has provided us with personal data, please contact us immediately so we can delete it.

11. Changes to This Privacy Policy

We may update this Policy occasionally to reflect changes in practices or legal, operational, or regulatory requirements. The “Last Updated” date will indicate the latest revision. Please check this page periodically.

12. Contacts

For questions or concerns about this Policy or our data practices, contact us at:

Email: info@gabrieleindice.com

If you believe our processing of your personal data violates the GDPR, you have the right to lodge a complaint with a supervisory authority, particularly in the EU Member State where you reside, work, or where the alleged violation occurred.