Privacy Policy

Privacy disclaimer

The purpose of this document is to inform the natural person (hereinafter " Data Subject ") regarding the processing of his personal data (hereinafter " Personal Data ") collected by the data controller, Niccolò Turchi, Via 24 Maggio, 1 53100 Siena, Tax Code TRCNCL96R05I726Z, VAT number 01572520524, e-mail address:, (hereinafter the " Owner "), via the website (hereinafter the " Application ").

Changes and updates will be binding as soon as they are posted on the Application. In case of non-acceptance of the changes made to the Privacy Policy, the interested party is required to cease using this Application and may request the Owner to cancel his Personal Data.

1. Categories of Personal Data processed:

The Data Controller processes the following types of Personal Data provided voluntarily by the Data Subject:

Contact data : name, surname, address, e-mail, telephone, images, authentication credentials, any further information sent by the interested party, etc.

Tax and payment data : tax code, VAT number, credit card details, bank account details, etc. The Data Controller processes the following types of Personal Data collected automatically:

Navigation data and use of the Application : such as, for example, pages visited, number of clicks, actions performed, duration of sessions, etc.

Failure by the interested party to provide Personal Data for which there is a legal or contractual obligation or if they constitute a necessary requirement for the conclusion of the contract with the Data Controller, will make it impossible for the Data Controller to establish or continue the relationship with the Interested.

The interested party who communicates the Personal Data of third parties to the Data Controller is directly and exclusively responsible for their origin, collection, treatment, communication or dissemination.

2. Cookies and similar technologies

The Application uses cookies, web beacons, unique identifiers and other similar technologies to collect Personal Data of the interested party on the pages, on the links visited and on the other actions that are performed when the interested party uses the Application. They are memorized to then be transmitted on the next visit by the interested party. You can view the complete Cookie Policy at the following address:

3. Legal basis and purpose of the processing

The processing of Personal Data is necessary:

  1. for the execution of the contract with the interested party and precisely:

    1. fulfillment of any obligation deriving from the pre-contractual or contractual relationship with the interested party

    2. registration and authentication of the interested party: to allow the interested party to register on the Application, access and be identified also through external platforms

    3. support and contact with the interested party : to respond to requests from the interested party

  2. by legal obligation and precisely:

    1. the fulfillment of any obligation established by current regulations , laws and regulations, in particular, in tax and fiscal matters

  3. on the basis of the legitimate interest of the Data Controller, for:

    1. marketing purposes via email of products and/or services of the owner to directly sell the products or services of the owner using the email provided by the interested party in the context of the sale of a product or service similar to the one being sold

The Personal Data of the interested party can also be used by the Data Controller to protect himself in court before the competent judicial offices.

4. Processing methods and recipients of Personal Data

The processing of Personal Data is carried out using paper and IT tools with organizational methods and with

logic strictly related to the purposes indicated and through the adoption of adequate security measures. Personal Data is processed exclusively by:

persons authorized by the Personal Data Controller who are committed to confidentiality or have an appropriate legal obligation of confidentiality;

subjects who operate independently as separate data controllers or by subjects designated as data processors by the Data Controller in order to carry out all the processing activities necessary to pursue the purposes referred to in this information (for example, commercial partners, consultants, IT companies , service providers, hosting providers);

subjects or entities to which it is mandatory to communicate Personal Data by law or by order of the authorities.

The subjects listed above are required to use the appropriate safeguards to protect Personal Data and can only access those necessary to perform the tasks assigned to them.

Personal Data will not be disseminated indiscriminately in any way.

5. Place

Personal Data will not be subject to any transfer outside the territory of the European Economic Area (EEA).

6. Retention period of Personal Data

Personal Data will be kept for the period of time necessary to fulfill the purposes for which they were collected, in particular:

for purposes relating to the execution of the contract between the Data Controller and the Data Subject, they will be kept for the entire duration of the contractual relationship and, after termination, for the ordinary limitation period of 10 years. In the case of judicial litigation, for the entire duration of the same, until the exhaustion of the terms of practicability of the appeal actions

for purposes relating to the legitimate interest of the Data Controller, they will be kept until such interest is fulfilled

for the fulfillment of a legal obligation, by order of an authority and for legal protection, they will be kept in compliance with the timescales established by said obligations, regulations and in any case until the limitation period established by the regulations in force is completed

for purposes based on the consent of the interested party, they will be kept until the consent is revoked

At the end of the retention period, all Personal Data will be deleted or stored in a form that does not allow identification of the interested party.

7. Rights of the interested party

Interested parties can exercise certain rights with reference to the Personal Data processed by the Data Controller. In particular,

the interested party has the right to:

be informed on the processing of their Personal Data

withdraw consent at any time
limit the processing of your Personal Data
object to the processing of your Personal Data
access your Personal Data
verify and request the rectification of your Personal Data
obtain the limitation of the processing of your Personal Data
obtain the cancellation of their Personal Data
transfer your Personal Data to another owner

lodge a complaint with the supervisory authority for the protection of your Personal Data and/or take legal action.

To exercise their rights, interested parties can send a request to the following email address Requests will be taken over by the Data Controller immediately and processed as soon as possible, in any case within 30 days.

Last updated: 05/15/2023

© 2023

Back to blog