Extended Privacy Policy of duecomuni.com

INFORMATION ON THE PROCESSING OF PERSONAL DATA
for users visiting the duecomuni.com website for personal data protection
in accordance with Article 13 of Regulation (EU) 2016/679

At duecomuni.com, the privacy of its users is of primary importance. This Privacy Policy outlines which data is collected and how it is used, disclosed, transferred, and/or stored by the Site.

This site collects certain personal data from its users. Users may be subject to different levels of protection, with some users enjoying a higher level of protection. Further information regarding protection criteria can be found in the applicability section.

Data Controller

For any questions regarding this privacy policy, please contact us using the information provided below.

Due Comuni Società Agricola a Responsabilità Limitata Semplificata

Via San Gervasio 48

56025 Pontedera (PI)

VAT: 02183390505

Phone: +39 347 128 8531

Users may send requests regarding personal data protection, privacy, and security to info@duecomuni.com.

Types of Data Collected

You can visit our website anonymously.

Among the personal data collected by duecomuni.com, independently or through third parties, are: Cookies, usage data, email, name, and various types of data.

Full details on each type of data collected are provided in the relevant sections of this privacy policy or through specific informative texts displayed before data collection.

Personal Data may be freely provided by the user, or, in the case of usage data, collected automatically while using the site. Where duecomuni.com indicates certain data as optional, users are free to refrain from providing it without affecting the availability or operation of the service.

Users who are uncertain about which data is mandatory are encouraged to contact the Data Controller. Any use of Cookies—or other tracking tools—by duecomuni.com or third-party service providers used by duecomuni.com, unless otherwise stated, is intended to provide the requested service, along with additional purposes described in this document and in the Cookie Policy, if available.

The user assumes responsibility for any third-party personal data obtained, published, or shared through duecomuni.com and ensures that they have the right to communicate or disclose it, thus releasing the Data Controller from any liability towards third parties.

Methods and Location of Data Processing

Data Processing Methods

The Data Controller processes the personal data of users by taking appropriate security measures to prevent unauthorized access, disclosure, modification, or destruction of personal data.

The processing is carried out using computers and/or IT-enabled tools, following organizational procedures and modes strictly related to the purposes indicated.

In addition to the Data Controller, in some cases, certain types of responsible parties involved in the organization of the site (such as administrative, commercial, marketing, legal, system administrators) or external parties (such as third-party technical service providers, mail carriers, hosting providers, IT companies, communication agencies) may have access to the data. If necessary, they may be appointed as Data Processors by the Data Controller. An updated list of these parties may be requested from the Data Controller at any time.

Legal Basis of Processing

The Data Controller processes Personal Data related to the User if one of the following conditions applies:

• The user has given consent for one or more specific purposes. Note: Under certain jurisdictions, the Data Controller may be allowed to process personal data without the user’s consent or any other legal basis specified below, until the user objects (“opt-out”) to such processing. However, this is not applicable when the processing of personal data is subject to European data protection legislation.
• The processing is necessary for the performance of a contract with the user and/or for any pre-contractual obligations.
• The processing is necessary to comply with a legal obligation to which the Data Controller is subject.
• The processing is related to a task that is carried out in the public interest or in the exercise of official authority vested in the Data Controller.
• The processing is necessary for the purposes of the legitimate interests pursued by the Data Controller or by a third party.

It is always possible to request clarification from the Data Controller regarding the specific legal basis of each processing activity, and, in particular, to specify whether the processing is based on law, provided for by contract, or necessary to conclude a contract.

Location

Data is processed at the operational offices of the Data Controller and any other location where the parties involved in the processing are located. For further information, contact the Data Controller.

The User’s Personal Data may be transferred to a country other than the one in which the User is located. To obtain further information about the location of processing, the User may refer to the section detailing the processing of Personal Data.

The User has the right to obtain information regarding the legal basis for transferring Data outside the European Union or to an international organization of public international law or comprising two or more countries, such as the UN, as well as the security measures adopted by the Data Controller to protect the Data.

Should any of the aforementioned transfers take place, the User can refer to the respective sections of this document or request information from the Data Controller by contacting them at the contact details provided at the beginning.

Retention Period

Data is processed and stored for as long as required for the purposes for which it was collected.

Thus:

• Personal Data collected for purposes related to the performance of a contract between the Data Controller and the User will be retained until the contract has been fully performed.
• Personal Data collected for purposes related to the legitimate interest of the Data Controller will be retained as long as needed to fulfill such purposes. The User can obtain further information regarding the legitimate interest pursued by the Data Controller in the relevant sections of this document or by contacting the Data Controller.

When processing is based on the User’s consent, the Data Controller may retain the Personal Data for a longer period until such consent is revoked. Additionally, the Data Controller may be obligated to retain Personal Data for a longer period to comply with a legal obligation or by order of an authority.

Once the retention period expires, Personal Data will be deleted. Therefore, upon expiration of this term, the right to access, deletion, rectification, and the right to data portability can no longer be exercised.

Purposes of the Data Processing

The User’s Data is collected to allow the Data Controller to provide its Services, as well as for the following purposes: Analytics, Managing contacts and sending messages, Handling payments, Interaction with social networks and external platforms, Contacting the User, SPAM protection, Affiliate marketing, Managing landing and invitation pages, Performance testing of content and functionality (A/B testing), Managing User databases, session recording, and interaction with online survey platforms.

To obtain further detailed information on the purposes of processing and the Personal Data relevant to each purpose, the User may refer to the relevant sections of this document.

Details on the Processing of Personal Data

Personal Data is collected for the following purposes and using the following services:

Contact Form (This Site)

By filling in the contact form with their Data, the User authorizes its use to respond to requests for information, quotations, or any other request as indicated by the form’s header.

Personal Data collected: Email and Name.

Managing Contacts and Sending Mail

These services allow for the management of email contacts, phone contacts, or any other contact information used to communicate with the User. These services may also collect data concerning the date and time of message viewing by the User, as well as the User’s interaction with them, such as information on clicks on links included in messages.

Contact Form 7

Contact Form 7 is a form creation and management service provided by Rock Lobster, LLC that allows this site to incorporate such content within its pages.

Personal Data collected: Email and Name, as well as various types of Data as specified in the privacy policy of the service.

Place of processing: Japan – Privacy Policy

SPAM Protection

These services analyze the traffic of this Site, potentially containing Users’ Personal Data, to filter it from parts of traffic, messages, and content recognized as SPAM.

Akismet (Automattic Inc.)

Akismet is a SPAM protection service provided by Automattic Inc.

Personal Data collected: Various types of Data as specified in the privacy policy of the service.

Place of processing: USA – Privacy Policy

Wordfence Security – Firewall & Malware Scan

Wordfence Security is a SPAM and malware scan protection service provided by Cerber Tech Inc.

Personal Data collected: Various types of Data as specified in the privacy policy of the service.

Place of processing: USA – Privacy Policy

Google Fonts (Google Inc.)

Google Fonts is a font display service managed by Google Inc. that allows this Site to incorporate content of this kind on its pages.

Personal Data collected: Cookies and Usage Data

Place of processing: USA – Privacy Policy

Google Maps (Google Inc.)

Google Maps is a map display service managed by Google Inc. that allows this Site to incorporate content of this kind on its pages.

Personal Data collected: Cookies and Usage Data

Place of processing: USA – Privacy Policy

RSS Feed Management

These services enable the management of RSS feeds and the distribution of their content. Depending on the characteristics of the service used, these services may also be used to insert advertisements within the content and to collect statistical data on it.

Google Analytics (Google Inc.)

Google Analytics is a web analytics service provided by Google Inc. (“Google”). Google uses the Personal Data collected to track and examine the use of this Site, compile reports, and share them with other Google services. Google may use the Personal Data to contextualize and personalize the ads of its advertising network.

At the following link https://tools.google.com/dlpage/gaoptout?hl=en, Google also provides a browser add-on to opt out of Google Analytics.

Personal Data collected: Cookies and Usage Data.

Place of processing: USA – Privacy Policy – Opt Out

User Rights

Users may exercise certain rights regarding their Data processed by the Data Controller.

In particular, Users have the right to:

• Withdraw consent at any time. Users have the right to withdraw their consent where they have previously given their consent to the processing of their Personal Data.
• Object to processing of their Data. Users have the right to object to the processing of their Data if the processing is carried out on a legal basis other than consent. Further details are provided in the relevant section below.
• Access their Data. Users have the right to learn if Data is being processed by the Data Controller, obtain disclosure regarding certain aspects of the processing, and obtain a copy of the Data undergoing processing.
• Verify and seek rectification. Users have the right to verify the accuracy of their Data and ask for it to be updated or corrected.
• Restrict the processing of their Data. Users have the right, under certain circumstances, to restrict the processing of their Data. In this case, the Data Controller will not process their Data for any purpose other than storing it.
• Have their Personal Data deleted or otherwise removed. Users have the right, under certain circumstances, to obtain the erasure of their Data from the Data Controller.
• Receive their Data and have it transferred to another controller. Users have the right to receive their Data in a structured, commonly used, and machine-readable format and, if technically feasible, to have it transmitted to another controller without any hindrance. This provision is applicable provided that the Data is processed by automated means and that the processing is based on the User’s consent, on a contract of which the User is part, or on pre-contractual obligations thereof.
• Lodge a complaint. Users have the right to bring a claim before their competent data protection authority.

Details on the Right to Object

When Personal Data is processed in the public interest, in the exercise of official authority vested in the Data Controller, or for the legitimate interests pursued by the Data Controller, Users have the right to object to the processing for reasons related to their particular situation.

Users are informed that if their Data is processed for direct marketing purposes, they may object to such processing at any time without providing any justification. To find out if the Data Controller processes data for direct marketing purposes, Users may refer to the relevant sections of this document.

How to Exercise Rights

To exercise their rights, Users may send a request to the Data Controller’s contact details provided in this document. Requests are free of charge and processed by the Data Controller as quickly as possible, in any event within one month.

Applicability of a Higher Level of Protection

While most of the provisions in this document apply to all Users, some expressly depend on the applicability of a higher level of protection for the processing of Personal Data.

This higher level of protection is always guaranteed when the processing:

• is carried out by a Data Controller based in the EU; or
• concerns Personal Data of Users located in the EU and relates to the offering of goods or services, whether paid or free, to such Users; or
• concerns Personal Data of Users located in the EU and allows the Data Controller to monitor the behavior of such Users to the extent that such behavior takes place within the Union.