Privacy policy

Information pursuant to Articles13 and 14 of Regulation (EU) 2016/679

1) Introduction

Corsogallo93 by BURANI ANDREA takes user privacy seriously and undertakes to respect it.
This privacy policy (“Privacy Policy”) describes the processing activities  of personal data carried out by Rebecca Mameli through the website www.yesidowedding.it and the related commitments made to this effect by the Company. Rebecca Mameli may process your personal data when you visit the Site and use the services and features on the Site. In the sections of the Site where the personal data of the user are collected, a specific information is normally published pursuant to art. 13/15 of Reg. EU 2016/679

Where required by Reg. EU 2016/679, the user’s consent will be required before processing your personal data. If the user provides personal data of third parties, must ensure that the communication of data to Rebecca Mameli and the subsequent processing for the purposes specified in the applicable privacy policy is in accordance with Reg. EU 2016/679 and applicable legislation.

2) Identification details of the owner, manager and Privacy Officer

The Data Controller Rebecca Mameli VAT Number: 01941330498 CF: MMLRCC96A48E625N with headquarters in Viale Don Bosco 47,57124,Livorno Italy.
The person responsible for the datais the legal representative is Rebecca Mameli VAT Number: 01941330498 CF: MMLRCC96A48E625N with headquarters in Viale Don Bosco 47,57124,Livorno Italy…

The Holder did not appoint DPO.
The Owner, also through the designated facilities, will take charge of your request and provide it, without undue delay and in any case, at the latest, within one month of receipt of the same, information on the action taken in relation to its request.
We inform you that if the Data Controller has doubts about the identity of the natural person submitting the request, may request additional information necessary to confirm the identity of the person concerned.

3) Type of data processed

The visit and consultation of the Site do not usually involve the collection and processing of personal data of the user except for navigation data and cookies as specified below. In addition to the so-called “navigation data” (see below), personal data may be processed voluntarily provided by the user when he interacts with the features of the Site or asks to use the services offered on the Site. In compliance with the Privacy Code, Rebecca Mameli based in Viale Don Bosco 47, 57124, Livorno, Italy, may also collect your personal data from third parties in the course of its activities.

Rebecca Mameli has signed service contracts with the following company, which operates as data controller for which Rebecca Mameli is the owner. Below is the list of companies and indication of the type of service signed with Rebecca Mameli:

ARUBA: service provider that hosts the cloud server infrastructure that Rebecca Mameli uses to deliver the pages of its sites and store the associated data. Aruba is also the service provider that manages the e-mail boxes of the domain www.yesidowedding.it, to which users write to get in touch with editorial and administration.

ARUBA SPA
Via San Clemente 53
24026 Ponte S. Pietro (BG)
Italy
www.aruba.it

4) Cookies and navigation data

The Site uses “cookies”. By using the Site, the user consents to the use of cookies in accordance with this Privacy Policy. Cookies are small files stored on the hard disk of the user’s computer. There are two macro-categories of cookies: technical cookies and profiling cookies.
Technical cookies are necessary for the proper functioning of a website and to allow navigation of the user; without them the user may not be able to view the pages properly or use some services.
Profiling cookies have the task of creating user profiles in order to send advertising messages in line with the preferences expressed by the same during navigation.

Cookies can also be classified as:
1.”session” cookies, which are deleted immediately when the browser is closed;
2. “persistent” cookies, which remain within the browser for a certain period of time. They are used, for example, to recognize the device that connects to a site by facilitating authentication operations for the user;
3. “own” cookies, generated and managed directly by the operator of the website on which the user is browsing;
4.”third party” cookies, generated and managed by subjects other than the operator of the website on which the user is browsing.

5) Cookies used on the website

The Website uses the following types of cookies:
1) own, session and persistent cookies, necessary to allow navigation on the Site, for internal security and system administration purposes;
2) third-party cookies, session and persistent, necessary to allow the user to use multimedia elements on the Site, such as images and videos;

3) persistent third-party cookies used by the Site to send statistical information to the Google Analytics system, through which Rebecca Mameli can perform statistical analysis of access / visits to the Site. The cookies used exclusively serve statistical purposes and collect information in aggregate form. Through a pair of cookies, one persistent and the other session (expiring when the browser is closed), Google Analytics also saves a log with the opening times of the visit to the site and exit from it. You can prevent Google from collecting data via cookies and further processing your data by downloading and installing the browser plug-in from the following address: http://tools.google.com/dlpage/gaoptout?hl=it

The following table shows a detail of the cookies on the Website

The Site may contain links to other sites (c.d. third-party sites). Rebecca Mameli does not access or control cookies, web beacons and other user tracking technologies that may be used by third-party sites that the user can access from the Site; Rebecca Mameli does not carry out any control over the content and materials published by or obtained through third-party sites, nor on the relative methods of processing of personal data of the user, and expressly declines any relative liability for such eventualities. The user is required to verify the privacy policy of third-party sites accessed through the Site and to inquire about the conditions applicable to the processing of their personal data. This Privacy Policy applies only to the Site as defined above.

6) How to disable cookies in browsers

Without prejudice to the above mentioned in relation to cookies strictly necessary for navigation, The user can delete other cookies through the functionality for this purpose made available by the Owner through this statement or directly through your browser. Each browser has different procedures for managing settings. The user can obtain specific instructions through the links below.

Microsoft Windows Explorer

Google Chrome

Mozilla Firefox

Apple Safari

Opera

The deactivation of third-party cookies is also possible through the methods made available directly by the third-party data controller, as indicated in the links in the paragraph “third-party cookies”. For information on cookies stored on your terminal and to disable them individually, please refer to the following links:http://www.youronlinechoices.com/it/le-tue-scelte and http://www.allaboutcookies.org/.

7) Retention of personal data

Personal data are stored and processed through computer systems owned by Rebecca Mameli and managed by Rebecca Mameli or third-party technical service providers; for more details please refer to the section “Scope of accessibility of personal data” following. The data are processed exclusively by specifically authorized personnel, including personnel in charge of carrying out extraordinary maintenance operations.

8) Purposes and methods of data processing

Rebecca Mameli may process your common and sensitive personal data for the following purposes: use by users of services and features on the Site, management of requests and reports by its users, sending newsletters, managing applications received through the Website, etc. In addition, with the additional and specific optional consent of the user, Rebecca Mameli may process personal data for marketing purposes, that is to send the user promotional material and/ or commercial communications related to the services of the Company, at the contact details indicated, either through traditional contact methods and/or means (such as paper mail, telephone calls with operator, etc.) or automated (such as, internet communications, faxes, e-mails, text messages, mobile applications such as smartphones and tablets -cd. APPS-, social network accounts -e.g. via Facebook or Twitter-, calls with automatic operator, etc.). Personal data are processed both in paper and electronic form and entere into the company information system in full compliance with EU Reg 2016/679, including security and confidentiality profiles and inspired by the principles of fairness and lawfulness of process.In accordance with EU Reg 2016/679the data are stored and stored for 10 years.

9) Security and quality of personal data

Rebecca Mameli undertakes to protect the security of your personal data and complies with the security provisions of the applicable legislation in order to avoid loss of data, unlawful or illicit use of data and unauthorised access to them, with particular reference to the Technical Regulations concerning minimum safety measures. In addition, the information systems and computer programs used by Rebecca Mameli are configured to minimize the use of personal and identifying data; such data are processed only for the achievement of the specific purposes pursued from time to time. Rebecca Mameli uses multiple advanced security technologies and procedures to facilitate the protection of users’ personal data; for example, personal data is stored on secure servers located in places with secure and controlled access. The user can help Rebecca Mameli to update and maintain correct their personal data by communicating any changes related to their address, their status, contact information, etc.

10) Scope of communication and data access

The personal data of the user may be communicated to:

all persons to whom the right of access to such data is recognized by regulatory measures;
to our employees, as part of their duties;

To all those natural and/or legal people, public and/or private when the communication is necessary or functional to the performance of our activity and in the ways and for the purposes described above;

11) Nature of personal data provision

The provision of certain personal data by the user is mandatory to allow the Company to manage communications, requests received by the user or to contact the user to respond to his request. This type of data is marked by the asterisk symbol [*] and in this case the provision is mandatory to allow the Company to comply with the request that, in default, cannot be processed. On the contrary, the collection of other data not marked by the asterisk is optional: failure to provide it will not result in any consequence for the user. The provision of personal data by the user for marketing purposes, as specified in the section “Purposes and methods of processing” is optional and the refusal to grant them will not have any consequence. The consent given for marketing purposes is intended to be extended to the sending of communications made through methods and/ or means of contact both automated and traditional, as exemplified above.

12) Rights of the data subject

12.1 Art. 15 (right of access) 16 (right of rectification) of Reg. EU 2016/679
The data subject shall have the right to obtain from the controller confirmation as to whether or not personal data concerning him or her are being processed and, if so, to obtain access to personal data and to the following information:

-the purposes of the processing;
-the categories of personal data concerned;
-the recipients or categories of recipients to whom the personal data have been or will be disclosed, in particular recipients from third countries or international organisations;
-the expected retention period of personal data or, if that is not possible, the criteria used to determine that period;
-the existence of the right of the data subject to ask the controller to rectify or delete personal data or to restrict the processing of personal data concerning him or her or to oppose their processing;
-the right to lodge a complaint with a supervisory authority;
– the existence of an automated decision-making process, including profiling and, at least in such cases, significant information on the logic used, as well as the importance and expected consequences of such processing for the data subject.

12.2 Right referred to in art. 17 of Reg. EU 2016/679 – right to cancellation («right to be forgotten»)
The data subject shall have the right to obtain from the controller the erasure of personal data concerning him or her without undue delay and the controller shall be obliged to delete the personal data without undue delay, if one of the following reasons exists:
a) personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed;

1. the data subject shall withdraw the consent on which the processing is based in accordance with Article 6, paragraph 1, point a) or Article 9, paragraph 2, point a), and if there is no other legal basis for the processing;
2. the data subject objects to the processing in accordance with Article 21, paragraph 1, and there is no overriding legitimate ground for processing, or to the processing in accordance with Article 21, paragraph 2;
3. personal data have been processed unlawfully;
   4. the personal data must be deleted in order to fulfil a legal obligation under Union or Member State law to which the controller is subject;
   5. personal data have been collected in relation to the provision of information society services referred to in Article 8, paragraph 1 of Reg. EU 2016/679

12.3 Right referred to in art. 18 Right to restriction of processing
The data subject has the right to obtain from the controller the restriction of processing when one of the following situations occurs:

1. the data subject disputes the accuracy of the personal data, for the period necessary for the controller to verify the accuracy of such personal data;
2. the processing is unlawful and the data subject opposes the deletion of personal data and asks instead that its use be limited;
3. although the controller no longer needs it for the purposes of processing, personal data are necessary for the data subject to ascertain, exercise or defend a right in court;
4. the data subject has opposed the processing pursuant to Article 21, paragraph 1, EU Reg 2016/679 pending the verification of the possible prevalence of the legitimate grounds of the data controller compared to those of the data subject.

12.4 Right under art.20 Right to data portability
The data subject has the right to receive in a structured format, of common use and machine-readable personal data concerning him or her provided to a controller and has the right to transmit such data to another controller without hindrance by the controller

13) Withdrawal of consent to processing

The interested party may withdraw consent to the processing of your personal data by sending a registered letter A/R to the following address: Rebecca Mameli with registered office in Viale Don Bosco 47, 57124, Livorno, Italy accompanied by a photocopy of your ID, with the following text: withdrawal of consent to the processing of all my personal data>. At the end of this operation your personal data will be removed from the archives as soon as possible.

If you wish to have more information on the processing of your personal data, or exercise the rights referred to in paragraph 7 above, you can send a registered A/R to the following address Rebecca Mameli based in Viale Don Bosco 47, 57124, Livorno, Italy. Before you can provide it, or change any information, you may need to verify your identity and answer some questions. An answer will be given as soon as possible.