Privacy policy en

Privacy policy pursuant to Legislative Decree 196/03 and EU Regulation no. 679/2016 of

Pursuant to art. 13 of Legislative Decree 196/03 and following the entry into force of EU Regulation no. 679/2016 in accordance with the provisions of art. 13 of the aforementioned European Regulation, we wish to inform you of the following:

Purpose of data processing

Your personal data, freely communicated and acquired by us as a result of the activity carried out by:
Donata Ballatore
Via Cupa Orefici allo Scudillo, snc
80131 Naples
VAT number: IT0767665121

will be treated lawfully and fairly for the following purposes:
The data processed are up to date, relevant, complete and not excessive in relation to the purposes listed above for which they are collected and subsequently processed.

Methods of treatment

The data will be processed, in compliance with the necessary security and confidentiality, through the following methods: collection of data from the person concerned, collection and recording for specific, explicit and legitimate purposes, used in further processing operations in terms compatible with those purposes, processing carried out with the help of electronic and automated tools (collection of data electronically, directly from the person concerned).

Legal basis of the treatment

The legal basis for the processing of your personal data is based on the registration to the web portal
Legitimate interests pursued by the Data Controller:
The legitimate interests pursued by the Data Controller in the processing of data is given by having to comply and honor the contractual obligations entered into between the parties.
Pursuant to art. 6, the lawfulness of the processing is based on the manifestly expressed consent of the person concerned, documented in writing. Compulsory or optional nature of data provision and consequences of a refusal to respond: the nature of the provision of data by you is mandatory for the data controller to provide the services requested. In case of refusal, it will therefore be impossible to complete the registration process and the System Holder will not be able to fulfill his contractual obligations.

Disclosure of data to third parties

Your personal data will be processed by the data controller, by the data processors appointed by him and by the processors strictly authorized. Your personal data are not subject to disclosure.

Storage times

Your personal data will be kept for 5 years.
The data are processed and stored for the time required for the purposes for which they were collected, Therefore:

Personal Data collected for purposes related to the execution of a contract between the Owner and the User will be retained until the execution of such contract is completed.
Personal Data collected for purposes related to the legitimate interest of the Owner will be retained until such time as such interest is satisfied. The User may obtain further information regarding the legitimate interest pursued by the Holder in the relevant sections of this document or by contacting the Holder.
When processing is based on the User’s consent, the Holder may retain the Personal Data for longer until such consent is revoked. In addition, the Holder may be obliged to retain Personal Data for a longer period in accordance with a legal obligation or by order of an authority.

At the end of the retention period the Personal Data will be deleted. Therefore, upon expiry of this period, the right of access, deletion, rectification and portability of the Data may no longer be exercised.

Intention of the Holder of the personal data processing

The Data Controller will not transfer your personal data to a third country or an international organisation.

User Rights

Users may exercise certain rights with regard to the Data processed by the Owner.
In particular, the User has the right to:
revoke the consent at any time. The User may revoke his or her consent to the processing of his or her Personal Data as expressed above.
oppose the processing of their Data. The User may object to the processing of his/her Personal Data when it takes place on a legal basis other than consent. Further details on the right to object are given in the section below.
access your Data. The User has the right to obtain information on the Data processed by the Owner, on certain aspects of the processing and to receive a copy of the Data processed.
verify and request correction. The User may verify the correctness of his/her Data and request that it be updated or corrected.
obtain the limitation of the treatment. When certain conditions are met, the User may request that the processing of his/her Data be limited. In this case, the Data Controller will not process the Data for any other purpose than their storage.
obtain the cancellation or removal of their Personal Data. When certain conditions are met, the User may request the cancellation of his/her Data by the Owner.
receive their Data or have them transferred to another data controller. The User has the right to receive his Data in a structured format, commonly used and readable by automatic device and, where technically feasible, to obtain the transfer without hindrance to another owner. This provision is applicable when the Data is processed by automated means and the processing is based on the User’s consent, on a contract to which the User is a party or on contractual measures connected to it.
lodge a complaint. The User may lodge a complaint with the competent data protection supervisory authority or take legal action.
Details of the right to object

When Personal Data are processed in the public interest, in the exercise of public powers vested in the Data Controller or to pursue a legitimate interest of the Data Controller, Users have the right to object to the processing for reasons related to their particular situation.

Users are reminded that, if their Data is processed for direct marketing purposes, they may object to the processing without giving any reason. To find out if the Owner processes data for direct marketing purposes, Users can refer to the respective sections of this document.

How to exercise your rights

In order to exercise the User’s rights, Users may address a request to the Owner’s contact details indicated in this document. Requests are filed free of charge and processed by the Holder as soon as possible, in any case within one month.

Data Controller and Data Processor

The holder of the data treatment is Donata Ballatore.
Contact details of the data controller, email:
The interested party may at any time exercise the rights reserved to him, enshrined in art. 7 of which the full text: art. 7 Legislative Decree no. 196/2003 and art. 15 EU Regulation 679/2016 – Right of access to personal data and other rights – “The interested party has the right to obtain confirmation of the existence or otherwise of personal data concerning him, even if not yet recorded, and their communication in intelligible form. The interested party has the right to be informed: of the origin of the personal data; of the purposes and methods of processing; of the logic applied in the case of processing carried out with the help of electronic means; of the identification data concerning the data controller, the data processor and the representative appointed pursuant to art. 5, paragraph 2; of the subjects or categories of subjects to whom the personal data may be communicated or who may become aware of them in their capacity as designated representative in the State’s territory, data processors or persons in charge of the processing. The interested party has the right to obtain: the updating, rectification or, when interested, integration of data; the cancellation, transformation into anonymous form or blocking of data processed unlawfully, including data whose retention is unnecessary for the purposes for which the data were collected or subsequently processed; certification that the operations referred to in letter a. and b. have been brought to the attention, also as regards their content, of those to whom the data were communicated or disseminated, unless this requirement proves impossible or involves a manifestly disproportionate to the protected right. The interested party has the right to oppose, in whole or in part: for legitimate reasons, the processing of personal data concerning him/her, even if pertinent to the purpose of the collection; the processing of personal data concerning him/her for the purpose of sending advertising materials or direct selling or for carrying out market or commercial communication surveys”. In particular, the interested party may at any time ask the Data Controller for access to personal data and the rectification or cancellation of the same or the limitation of the processing that concerns him or to oppose their processing, in addition to the right to data portability. The data subject has the right to withdraw consent at any time without prejudice to the lawfulness of processing based on consent given prior to withdrawal and has the right to lodge a complaint with a supervisory authority. The exercise of the rights can be exercised by writing to the e-mail address