Home » Privacy Policy
Privacy information for the website www.lamorenita.it
Respecting the privacy of our visitors is of the utmost importance to us, therefore the number and nature of the data collected during navigation has been reduced to the bare minimum and all the necessary precautions have been taken to ensure its security.
It is specified that the information is provided only for the website www.lamorenita.it and not for other websites that may be consulted by the user via links on the aforementioned website.
In compliance with the provisions of Legislative Decree 196/2003, Code regarding the protection of personal data and the General Data Protection Regulation - EU Regulation 2016/679, La Morenita di Becker Arriola Daniel, represented for this purpose by the President in office , as Data Controller, wishes to inform you of the following.
Personal data processed and purposes of processing
Data acquired automatically
The computer systems responsible for the functioning of this site acquire, during normal navigation, some personal data whose transmission is connected to the use of Internet communication protocols (IP addresses, domain names of the computers used by users who connect to the site, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server, etc.) and other parameters relating to the operating system and the user's computing environment.
This data is used for the sole purpose of obtaining anonymous statistical information on the use of the site and to check its correct functioning. The data collected could be used to ascertain responsibility in the event of hypothetical computer crimes against the site.
Data provided voluntarily by users
The personal data voluntarily provided by users by filling in contact forms or through other forms of communication that may be provided on our site are used in order to respond to requests made. For example, entering an email address in the contact form involves its acquisition, which is necessary to respond to the requests made, as well as the acquisition of any other personal data included in the message. Other activities will be carried out only with your consent. Your personal data may be communicated for the purposes indicated to our specifically authorized collaborators within the scope of their respective duties.
For the same purposes, if necessary, the data collected may be transferred outside the national territory where the conditions required by law exist.
Processing methods and storage times
The processing will be carried out via paper and computer media by the owner and authorized parties with observance of every precautionary measure that guarantees its security and confidentiality. Your personal data communicated via forms and contact forms will be kept for the period of time necessary to follow up on your requests. For the purposes that require your consent they will be kept for a period not exceeding 5 years.
The personal data collected relating to navigation will be stored in order to ensure checks relating to the management of the site and its security for the necessary period of time which is, except in particular cases, 6 months.
Optional provision of personal data
Apart from what is specified for the necessary navigation data which is automatically recorded, the user is free to provide personal data (for example name, surname, address, email, ...) requested in the forms on the site. Failure to provide them may make it impossible to obtain what is requested.
Communication of collected data
For the pursuit of the purposes described above, your personal data will be known to the employees, similar personnel and collaborators of the Data Controller, who will operate as subjects authorized to process personal data.
Furthermore, your personal data will be communicated and processed by third parties belonging to the following categories:
- a) subjects that the Owner uses for the management of the Site;
- b) companies that manage the Data Controller's IT system;
- c) companies and consultants that provide legal and/or tax consultancy activities;
- d) supervisory and control authorities and bodies, and in general public or private entities with public-related functions.
The subjects belonging to the above categories operate, in some cases, in total autonomy as distinct Data Controllers, in other cases, as Data Processors specifically appointed by the Data Controller in compliance with Article 28 GDPR.
The complete and updated list of subjects to whom your personal data may be communicated can be requested at the registered office of the Data Controller lamorenitatortillas@gmail.com
Rights of interested parties
In relation to the processing described in this Policy, as an interested party you may, under the conditions set out in the GDPR, exercise the rights established by Articles 15 to 21 of the GDPR and, in particular, the following rights:
- Right of access – Article 15 GDPR: the right to obtain confirmation as to whether or not personal data concerning you are being processed, and, where that is the case, access to your personal data – including a copy of the same – and communication of, among other things, the following information:
- a) purpose of the processing
- b) categories of personal data processed
- c) recipients to whom these have been or will be communicated
- d) data retention period or the criteria used
- e) rights of the interested party (rectification, erasure of personal data, limitation of processing and right to object to processing
- f) right to lodge a complaint
- g) right to receive information on the origin of my personal data if they were not collected from the interested party
- h) the existence of an automated decision-making process, including profiling;
Right to rectification – Article 16 GDPR: right to obtain, without undue delay, the rectification of inaccurate personal data concerning you and/or the integration of incomplete personal data;
- Right to rectification – Article 16 GDPR: right to obtain, without undue delay, the rectification of inaccurate personal data concerning you and/or the integration of incomplete personal data;
- a) the data are no longer necessary in relation to the purposes for which they were collected or otherwise processed;
- b) You have withdrawn your consent and there is no other legal basis for the processing;
- c) You have successfully objected to the processing of your personal data;
- d) the data has been processed unlawfully,
- e) the data must be deleted to comply with a legal obligation;
- f) the personal data have been collected in relation to the offer of information society services referred to in Article 8, paragraph 1, GDPR.
The right to erasure does not apply to the extent that processing is necessary for compliance with a legal obligation or for the performance of a task carried out in the public interest or for the establishment, exercise or defense of legal claims.
Right to restriction of processing – Article 18 GDPR: right to obtain restriction of processing, when:
- a) the data subject contests the accuracy of the personal data;
- b) the processing is unlawful and the data subject opposes the erasure of the personal data and requests instead that their use be restricted
- c) although the data controller no longer needs them for the purposes of the processing, the personal data are necessary for the data subject to ascertain, exercise or defend a right in court;
- d) the interested party has objected to the processing, as indicated below, pending verification of the possible prevalence of the legitimate reasons of the data controller with respect to those of the interested party;
Right to data portability – Article 20 GDPR: right to receive, in a structured, commonly used and machine-readable format, the personal data concerning you provided to the Data Controller and the right to transmit them to another controller without hindrance, if the processing is based on consent and is carried out by automated means. Furthermore, the right to obtain that your personal data are transmitted directly from the Data Controller to another controller if this is technically feasible;
Right to object – Article 21 GDPR: right to object, at any time, to the processing of personal data concerning you based on the condition of legitimacy of legitimate interest, including profiling, unless there are legitimate reasons for the Data Controller to continue the processing that prevail over the interests, rights and freedoms of the interested party or for the establishment, exercise or defense of a right in court.
Submit a complaint to the Data Protection Authority, Piazza di Montecitorio n. 121, 00186, Rome (RM).
The above rights may be exercised, with respect to the Owner, by contacting the references in the paragraph “Owner and Responsibles”. The Owner will take charge of your request and provide you, without unjustified delay and, in any case, no later than one month from receipt of the same, the information relating to the action taken regarding your request.
The exercise of your rights as a data subject is free of charge pursuant to Article 12 of the GDPR. However, in the case of manifestly unfounded or excessive requests, also due to their repetitiveness, the Data Controller may charge you a reasonable fee, in light of the administrative costs incurred to manage your request, or deny the satisfaction of your request.
Finally, we inform you that the Data Controller may request further information necessary to confirm the identity of the interested party.
Owner and Responsibles
The owner and controller of the processing is La Morenita di Becker Arriola Daniel in the person of its legal representative pro tempore.
For any information regarding the processing of your personal data carried out through this site, you can contact the Owner at the email address lamorenitatortillas@gmail.com
Cookie Policy
This site uses so-called “cookies”, small portions of text files that are stored on the user’s computer and that serve to make our website easier to use, effective and safe. The cookies used are of the “session cookies” type that have the characteristic of not being stored persistently on the user’s computer and disappear when the browser is closed.