WEBSITE PRIVACY POLICY

In compliance with Articles 13 and 14 of Regulation (EU) No. 2016/679 (GDPR), this site respects and protects the privacy of visitors and users, making every possible and proportionate effort not to infringe users’ rights. The following notice is intended for all individuals who visit and interact with this site of Spazio FormaMentis.

Furthermore, this Notice also includes the Cookie Policy in accordance with the Privacy Authority’s Guideline of 10.06.21.

Data Controller

The Data Controller, i.e., the legal entity that determines the purposes and means of processing personal data, is Spazio FormaMentis srl, with its registered office at Viale Abruzzi, 30 – 20131 Milan in the person of its Legal Representative Serena Barbieri.

Data collected

Data collected during browsing

During Users’ browsing, information may be collected and stored in the site’s server (hosting) log files:

• internet protocol (IP) address
• browser type
• device parameters used to connect to the site
• name of the internet service provider (ISP)
• date and time of visit
• web page of origin of the visitor (referral) and exit.

The data may be used to ascertain liability in case of hypothetical computer crimes against the site or third parties.

Data voluntarily provided

The site may collect data voluntarily provided by the user when using the contact form, for which the following are requested:

• name
• phone
• email.

Purpose of Data Processing and Legal Basis of Processing

The processing we intend to carry out has the following purposes:

• browsing the website
• sharing content present on the site
• processing a request sent via the form in the “Contacts” section
• complying with any legal, accounting, and tax obligations, including those arising from the same EU Regulation 2016/679, and for security purposes and prevention of fraudulent actions, also through the detection and analysis of user behavior on the site associated with data processing, including the IP address
• exercising the rights of the Controller, such as the right to exercise a right in court.

The legal basis for the processing of Personal Data for the above purposes is constituted by contractual obligations, as the processing is necessary to respond to requests from the data subject.

In any case, pursuant to Article 21 of the Regulation, you have the possibility to object to such processing at any time, initially or on the occasion of subsequent communications, easily and free of charge, also by writing to the Controller at the contacts indicated above, as well as to obtain an immediate response confirming the interruption of such processing (Article 15 of the Regulation).

Spazio FormaMentis does not proceed with the collection or processing of “special categories of personal data” referred to in Article 9 of the European Regulation (relating, for example, to health status). However, such data may subsequently be acquired during contact with the user who sends us a message via the form present in the contacts section.

Nature of Data Collection and Possible Consequences of Failure to Provide

Apart from what is specified for browsing data, the user is free to voluntarily provide personal data to request information. Failure to provide them may result in the inability to obtain what is requested.

Data Retention Period

The data subject to retention are only browsing data. The data (IP address) used for site security purposes (blocking attempts to damage the site) are retained for 30 days.

The data indicated in the form on the Contacts page are not managed by the site but are sent to a company email address managed with Aruba. Such data are retained as follows:

1. for six months from the last contact with the User if there is no continuation in the relationship with our company
2. for one year from the end of the relationship with the company.

Processing Methods

Personal data are processed electronically, for the time necessary to achieve the purposes for which they were collected. Specific security measures are observed to prevent data loss, unlawful or incorrect use, and unauthorized access.

Data Communication and Dissemination

The data collected by the site are generally not provided to third parties, except in specific cases: legitimate request by the judicial authority and only in cases provided by law; when necessary for the provision of a specific service requested by the User; for the execution of security checks or site optimization. The data are not subject to dissemination. The data recorded for information requests arrive at a mailbox managed by internal company staff who forward the requests to the professionals concerned by the User’s request.

Place of Processing and Transfer of Data to Third Countries

The data are processed at the Data Controller’s headquarters and at the datacenter of the web Hosting Aruba SpA. The web hosting is responsible for processing, processing the data on behalf of the controller. Aruba SpA has cloud servers located in Italy.

Minors

This Site and the Controller’s Services are not intended for minors under 18 years of age, and the Controller does not intentionally collect personal information related to minors. If information about minors is inadvertently recorded, the Controller will promptly delete it upon user request.

Rights of the Data Subject

At any time, you may exercise, pursuant to Articles 15-22 of GDPR No. 2016/679, the right to:

• access data;
• request confirmation of the existence or non-existence of your data;
• obtain rectification and deletion of data;
• object to processing;
• obtain restriction of processing;
• obtain data portability;
• lodge a complaint with the supervisory authority (Privacy Authority).

To assert the rights of the data subject and/or to request further information, you may contact the Data Controller by sending a registered letter to Spazio FormaMentis srl, with its registered office at Viale Abruzzi 30 – 20131 Milan or by sending a communication to info@spazioformamentis.it

Data Security

Specific security measures are observed to prevent data loss, unlawful or incorrect use, and unauthorized access.

Changes to the Document

The data controller reserves the right to make changes to this Privacy Policy at any time, giving publicity to Users on this page. Therefore, we ask Users to frequently consult this page, taking as reference the date of last modification indicated at the bottom.

COOKIES POLICY

Cookie

Cookies are small text files that the sites visited send to the User’s terminal, where they are stored on the user’s PC/tablet/smartphone, and then retransmitted to the same sites on the next visit. Cookies operate to analyze the site’s effectiveness and make it easier and more intuitive over time.

Types of cookies:

There are two fundamental macro-categories:

• Technical cookies
• Profiling cookies.

TECHNICAL COOKIES

They are used solely to carry out the transmission of a communication over an electronic communications network, or to the extent strictly necessary for the provider of an information society service explicitly requested by the subscriber or user to provide such service.

They can be distinguished into:

1. navigation cookies: they are necessary to allow you to navigate within the site and use its functions
2. functionality cookies: they allow the site to “remember” the choices you made (such as your username, language, any products selected for purchase) to improve the service rendered to the same.

PROFILING COOKIES

They are aimed at creating profiles related to the user and are generally used to send advertising messages in line with the preferences expressed by the user during web browsing.

WHAT COOKIES DOES OUR SITE USE

Our site uses only first and third-party technical cookies. Spazio FormaMentis uses the map display services offered by Google Maps (Google Inc, USA, Privacy Policy) to present map data to the user. The data subject to processing are usage data and cookies.

Update date 09.11.22