Privacy policy

This policy aims to inform users of this website about how it is managed with regard to the processing of their personal data, as required by Articles 13 and 14 of European Regulation No. 679/2016 – General Data Protection Regulation (GDPR).
This policy fully complies with Recommendation No. 2/2001 adopted on May 17, 2001, by the European authorities for the protection of personal data, gathered in the Working Party established under Article 29 of Directive 95/46/EC. It outlines certain minimum requirements for the online collection of personal data, particularly regarding the methods, timing, and nature of the information data controllers must provide to users when they access web pages, regardless of the purpose of the connection.
By browsing this site, data relating to identified or identifiable individuals may be processed.

Consent mechanisms are clearly visible, concise, and easy to understand. Should the original purpose for which consent was obtained change (e.g., the purpose of data processing), further consent will be requested in accordance with GDPR. All collected consents are documented and kept separately from other business documents.
Data Controller

Your personal data will not be disclosed and you are entitled to exercise the rights provided by Articles 11–20 of Regulation EU 679/2016 by writing to:

Arredamenti La Castellana
di Scolaro Roberto & C. snc
Via Pradis, 65
33010 Colloredo Di Monte Albano (UD)
Email: roberto@lacastellanasnc.it

Data processing related to this site’s web services takes place at the above address and at the web service provider’s location, and is handled only by company personnel or third-party staff appointed for occasional maintenance tasks.
Types of Data Collected

This website collects personal data independently or through third parties, including: cookies, usage data, first and last name, and email address.

Full details of the data collected are provided in the specific sections of this policy or through brief information notices displayed prior to collection.

Personal data may be freely provided by the user, or, in the case of usage data, collected automatically during use.

Unless stated otherwise, all requested data are mandatory. Refusal to provide such data may make it impossible to use certain services. When data are indicated as optional, users are free not to provide them without affecting the availability or functioning of the service.

Users with doubts about which data are mandatory are encouraged to contact the Data Controller.

The use of cookies or other tracking tools (unless otherwise specified) is intended to provide the requested service and for other purposes as described in this policy and the site’s Cookie Policy.

Users are responsible for third-party personal data shared through this website and declare that they have the right to disclose or share such data, holding the Data Controller harmless.
Data Processing Methods and Location

Processing Methods
The Data Controller takes appropriate security measures to prevent unauthorized access, disclosure, alteration, or destruction of personal data.

Processing is carried out using computers and/or IT tools, following organizational procedures and strictly related purposes. In some cases, third parties (e.g., technical service providers, hosting providers, IT companies, communication agencies) may access the data and act as Data Processors. An updated list of such parties may be requested from the Data Controller at any time.

Legal Basis for Processing
The Data Controller processes personal data if one of the following applies:

The user has given explicit consent for one or more specific purposes;

Processing is necessary for the performance of a contract or pre-contractual measures;

Processing is required to comply with a legal obligation;

Processing is necessary for a task carried out in the public interest;

Processing is necessary for the legitimate interests pursued by the Data Controller or a third party.

You may request clarification about the legal basis of each processing operation at any time.

Place of Processing
Data are processed at the operational offices of the Data Controller and any other place where parties involved in the processing are located. Data may be transferred to countries outside the EU.
For more details, refer to the relevant sections of this document or contact the Data Controller.
Data Retention Period

Data are retained for the time required for their purpose:

Data collected for a contract will be retained until the contract is fulfilled.

Data collected for legitimate interest will be retained as long as the interest remains.

Data based on user consent may be retained until consent is withdrawn.

Data may also be retained to meet legal obligations or under court order.

Once the retention period has expired, data will be deleted, and rights to access, erase, rectify, or transfer data can no longer be exercised.
Purpose of Data Collection

User data are collected to provide services, including:

Contacting the user (via contact forms)

Newsletter/mailing list subscriptions

Analytics and statistics (e.g., Google Analytics)

Managing contacts and sending communications (e.g., Mailchimp)

User Rights

Users have the right to:

Withdraw consent at any time

Object to processing

Access their personal data

Verify and request correction

Request restriction of processing

Request erasure of data

Request data portability

File a complaint with the competent data protection authority

To exercise these rights, users can contact the Data Controller. Requests are free and processed as quickly as possible, always within one month.
Additional Information

Legal Defense: User data may be used in legal proceedings or in the preparatory stages of a defense.

Specific Information Notices: Additional info may be provided for specific services upon request.

System Logs and Maintenance: This site may collect system logs that include personal data (like IP addresses).

Do Not Track Requests: This website does not support “Do Not Track” requests.

Changes to This Privacy Policy

The Data Controller reserves the right to modify this privacy policy at any time. Changes will be communicated on this page and, where feasible, via direct notification. Users are encouraged to check this page frequently.

If changes affect processing based on consent, new consent will be requested where required.

Last updated: May 25, 2018
Definitions and Legal References

Personal Data: Any information that directly or indirectly identifies a natural person.

Usage Data: Data collected automatically during use (e.g., IP address, browser info, access times).

User: The individual using the application.

Data Subject: The natural person to whom the personal data refers.

Data Processor: A third party that processes data on behalf of the Controller.

Data Controller: The party responsible for data processing purposes and means.

This Application: The website or platform through which data is collected.

Service: The services provided by this application.

European Union (EU): Includes all EU and EEA member states unless stated otherwise.

Cookies: Small data files stored on the user’s device.