Privacy Policy
Last updated: 15.01.2025
Data Controller
Khrystyna Semenova
39100 Bolzano BZ
info@khrystyna-smn.com
Types of Data Collected
The following personal data may be collected through the website:
- Identifying Data: First Name, Last Name.
- Contact Data: Email, phone number.
- Other data provided voluntarily through contact forms.
- Browsing Data: IP address, browser type, data collected through cookies (see Cookie Policy).
Purposes and Methods of Data Processing
The personal data collected are processed for the following purposes:
- Responding to requests for information or quotes submitted through contact forms.
- Providing customer support and assistance.
- Complying with legal or regulatory obligations.
- Improving website navigation and user experience.
Personal data processing is carried out in compliance with current regulations, adopting adequate security measures to protect data from unauthorized access, disclosure, or destruction.
Legal Basis for Data Processing
The processing of personal data is based on the following legal grounds:
- Performance of a contract: Processing is necessary for the execution of a contract to which the user is a party or for the execution of pre-contractual measures taken at the user’s request.
- Consent of the data subject: The user has given consent for the processing of their personal data for one or more specific purposes.
- Compliance with a legal obligation: Processing is necessary to comply with a legal obligation to which the data controller is subject.
- Legitimate interest: Processing is necessary for the pursuit of the legitimate interests of the data controller or third parties, provided that the interests or fundamental rights and freedoms of the data subject do not prevail.
Disclosure and Dissemination of Data
Personal data of users may be disclosed to third parties solely for the purposes indicated above, specifically:
- Technical Service Providers: Companies or professionals providing hosting, website maintenance, or other IT services necessary for the website’s operation.
- Professional Consultants: Accountants, lawyers, or other professionals providing consulting services required to comply with legal or contractual obligations.
- Competent Authorities: Entities or authorities to whom personal data must be disclosed in accordance with legal provisions or orders from authorities.
Personal data will never be sold or distributed to third parties for commercial purposes without the explicit consent of the user.
Data Retention Period
The collected data will be stored for the period strictly necessary to fulfill the purposes for which they were collected, unless different legal obligations apply. Specifically:
- Data collected through contact forms: Stored for a maximum period of 24 months from the last interaction, unless further retention is required by legal obligations or to protect the rights of the data controller.
- Browsing data: Stored for the period specified by applicable regulations.
User Rights
Users may exercise the following rights at any time:
- Right of access: Obtain confirmation of the existence or non-existence of personal data concerning them and receive such data in an intelligible form.
- Right of rectification: Request the updating, correction, or integration of their data.
- Right to erasure: Request the deletion, anonymization, or blocking of data processed in violation of the law.
- Right to restriction of processing: Obtain the restriction of processing in cases provided for by Article 18 of the GDPR.
- Right to object: Object, in whole or in part, to the processing of personal data for legitimate reasons.
To exercise these rights, users can contact the Data Controller at the email address provided.
Changes to this Privacy Policy
The Data Controller reserves the right to modify this Privacy Policy at any time. Changes will be published on this page with the updated date indicated.