Processing of personal data

The controller is Cosma Alessandro, Via D. Cantatore 1/3, 73100 Lecce (LE), Italy, VAT number 04522160755.

The data protection officer, where appointed, may be contacted at: da completare: nominativo e recapito del RPD, oppure dichiarazione che non ricorre l’obbligo di designazione.

This site processes only the data voluntarily provided through the contact form, together with the technical connection data recorded by the server for security and operational purposes.

• Data provided through the form: name of the organisation, name, email address, information about the need described. Purpose: replying to the enquiry. Legal basis: steps taken at the request of the data subject prior to entering into a contract, Article 6(1)(b).
• Technical connection data: IP address, date and time of the request, resource requested, outcome. Purpose: infrastructure security and diagnostics. Legal basis: the controller’s legitimate interest in protecting its systems, Article 6(1)(f).

Data provided through the form is retained for as long as needed to reply and, where a contract follows, for its duration and for the statutory periods thereafter.

Technical connection logs are retained for da completare: periodo di conservazione dei log.

Data is not disclosed to third parties or published. It may be processed by technical service providers appointed as processors under Article 28 of the Regulation; an up-to-date list is available on request.

The site is hosted by da completare: fornitore di hosting e ubicazione dei server. No personal data is transferred outside the European Economic Area.

Data subjects may at any time exercise the rights under Articles 15 to 22 of the Regulation by writing to the controller.

• Access to their personal data and to information about the processing
• Rectification of inaccurate data and completion of incomplete data
• Erasure, in the cases provided for
• Restriction of processing
• Objection to processing based on legitimate interest
• Portability of data processed by automated means
• Complaint to the Italian Data Protection Authority

This notice does not cover personal data contained in the archives entrusted to us by clients. For that data the client institution remains the controller, while this firm acts as processor under Article 28 of the Regulation, on the basis of a written appointment.