Privacy Policy for the Processing of Personal Data
In accordance with EU Regulation No. 2016/679 (GDPR).
This page describes the management methods of the website with reference to the processing of the personal data of users who consult it. This information is provided pursuant to Articles 13 and 14 of EU Regulation No. 2016/679 on data protection (GDPR) to those who interact with the website. This policy is not to be considered valid for other websites that may be consulted via links present on internet sites under the owner’s domain; the owner is not to be considered responsible in any way for third-party websites.
Dr. Marco Capece, Via Fonseca, 11 – 80023 Caivano (NA) Email: info@marcocapece.com (hereinafter, “Data Controller“), in his capacity as Data Controller, hereby informs you—pursuant to Art. 13 of Legislative Decree 30.06.2003 n. 196 (hereinafter, “Privacy Code“) and Art. 13 of EU Regulation n. 2016/679 (hereinafter, “GDPR“)—that your data will be processed in compliance with the principles of lawfulness, fairness, and transparency toward the data subject, using the methods and for the purposes described on this page.
1. Subject of the Processing
The Data Controller processes personal, identifying, and non-sensitive data (including but not limited to: name, surname, company name, address, telephone number, e-mail – hereinafter, “personal data” or simply “data“) communicated by you when filling out electronic forms through the Site or via online requests.
2. Categories of Data Processed and Purposes
2.1 Navigation Data
The computer systems and software procedures used to operate this website acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols. This information is not collected to be associated with identified data subjects, but by its very nature, through processing and association with data held by third parties, it could allow users to be identified. This category includes IP addresses or domain names of the computers used by users, URI (Uniform Resource Identifier) addresses, the time of the request, the method used to submit the request to the server, and other parameters related to the user’s operating system. This data is used solely to obtain anonymous statistical information on the use of the site and is deleted immediately after processing. The data could be used to ascertain responsibility in the event of hypothetical computer crimes against the site; except for this possibility, web contact data does not persist for more than seven days.
2.2 Data Provided Voluntarily by the User and Purposes
The optional, explicit, and voluntary sending of e-mails to the addresses indicated on this site or the completion of contact forms involves the subsequent acquisition of the sender’s address, necessary to respond to requests, as well as any other personal data included in the message. Data is collected and stored for the following explicit and legitimate purposes:
-
To respond to requests for information and contact sent via the electronic form;
-
To offer assistance and consultancy;
-
To fulfill obligations established by law, regulations, community legislation, or an order from the Authority;
-
To exercise the rights of the Controller, such as the right to legal defense.
Providing data and consenting to processing are optional but necessary to fulfill the purposes described above. Consent is given by selecting the appropriate boxes on the electronic forms.
3. Processing Methods and Data Retention Period
The processing of your personal data is carried out through the operations indicated in Art. 4 of the Privacy Code and Art. 4 no. 2) of the GDPR. Your data is processed both on paper and electronically. The Controller will process personal data for the time necessary to fulfill the aforementioned purposes and, in any case, for no longer than 10 years from the termination of the relationship for service purposes and no longer than 2 years from collection for other purposes.
4. Security
The Controller has adopted a wide variety of security measures (pursuant to Articles 32-34 of the Privacy Code and Art. 32 of the GDPR) to protect your data against loss, misuse, or alteration, including AES (BCrypt) encryption technology and HL7/HTTPS secure transmission protocols where necessary.
5. Access to Data
Your data may be made accessible for the purposes described to:
-
Employees and collaborators of the Controller in their capacity as authorized processors and/or system administrators.
-
Third-party companies or other entities (web domain providers, hosting providers, web agencies, etc.) performing outsourced activities on behalf of the Controller.
6. Communication of Data
Without your express consent (pursuant to Art. 24 of the Privacy Code and Art. 6 of the GDPR), the Controller may communicate your data to supervisory bodies and judicial authorities where mandatory by law. Your personal data will never be made public on the Controller’s website.
7. Data Transfer
Personal data management and storage will take place in Europe. Personal data may be transferred abroad, within or outside the European Union, only within the limits and conditions set forth in Art. 44 et seq. of EU Regulation 2016/679.
8. Nature of Data Provision and Consequences of Refusal
Providing data for the purposes in Art. 2 is necessary to ensure the Services. If you refuse to provide this data, the Controller will be unable to process your requests.
9. Rights of the Data Subject
As a data subject, you have the rights provided by Art. 7 of the Privacy Code and Art. 15 of the GDPR, specifically:
-
I) To obtain confirmation of the existence of your personal data.
-
II) To be informed of the origin, purpose, and methods of processing.
-
III) To obtain updates, rectification, integration, or deletion of data processed unlawfully.
-
IV) To object, in whole or in part, to the processing of your data for legitimate reasons or for direct marketing purposes (automated or traditional).
-
Other rights: Where applicable, you have the rights referred to in Articles 16-21 of the GDPR (Right to rectification, right to be forgotten, right to restriction of processing, right to data portability, right to object), as well as the right to lodge a complaint with the Data Protection Authority.
10. Withdrawal of Consent and Data Deletion
To exercise your rights or withdraw consent, you may send a registered letter with return receipt to the address listed above or an e-mail to: info@marcocapece.com
11. Minors
This Site and the Controller’s Services are not intended for minors under 18. If information on minors is involuntarily recorded, the Controller will delete it promptly upon request.
12. Data Controller and Processors
The Data Controller is Dr. Marco Capece. The External Data Processor (Web Agency) is E26 Snc, based in Naples, Italy, Piazza Municipio 84, email: info@e26.it. An updated list of processors is kept at the Controller’s office.
13. Data Protection Officer (DPO)
A Data Protection Officer has not been appointed as it is not mandatory for this activity; the processing is not carried out by a public authority, nor does it involve “regular and systematic monitoring” or “large-scale” processing of sensitive or judicial data.
14. Changes to this Policy
This Policy may undergo changes. It is recommended to check this Policy regularly for the most updated version.
For further information on online behavioral advertising and opting out of cookies, please visit: www.youronlinechoices.eu