Web information

Website information www.pianoth.com

This Website collects certain Personal Data of its Users.

Types of Data collected

Among the Personal Data collected by this Website, either independently or through third parties, are: name; email; Cookie; Usage Data; various types of Data; Data communicated during the use of the service.

Full details on each type of data collected are provided in the dedicated sections of this privacy policy or through specific information texts displayed before the collection of data.
Personal Data may be freely provided by the User or, in the case of Usage Data, automatically collected during the use of this Website.
Unless otherwise specified, all Data required by this Web Site is required. If the User refuses to disclose it, it may be impossible for this Web Site to provide the Service. In cases where this Web Site indicates certain Data as optional, Users are free to refrain from disclosing such Data, without this having any effect on the availability of the Service or its operation.
Users who have any doubts as to which Data is mandatory are encouraged to contact the Owner.
Any use of Cookies – or other tracking tools – by this Web Site or the owners of third party services used by this Web Site, unless otherwise stated, is intended to provide the Service requested by the User, in addition to the additional purposes described in this document and in the Cookie Policy, if available.

The User assumes responsibility for the Personal Data of third parties obtained, published or shared through this Web Site and guarantees to have the right to communicate or disseminate them, releasing the Owner from any liability to third parties.

Method and place of treatment of the collected data

Treatment methods

The Holder shall take appropriate security measures to prevent unauthorised access, disclosure, modification or destruction of Personal Data.
The processing is carried out by computer and/or telematic means, with organizational methods and with logic strictly related to the purposes indicated. In addition to the Data Controller, in some cases, other parties involved in the organisation of this Website (administrative, commercial, marketing, legal, system administrators) or external parties (such as third party technical service providers, couriers, hosting providers, IT companies, communication agencies) appointed also, if necessary, as Data Processors by the Data Controller, may have access to the Data. The updated list of Managers may always be requested from the Data Controller.

Legal basis of the treatment

The Data controller shall process Personal Data relating to the User in the event that one of the following conditions is met:

  • Note: In some jurisdictions, the Holder may be authorised to process Personal Data without the User’s consent or any other of the legal bases specified below, until the User objects (“opt-out”) to such processing. However, this does not apply if the processing of Personal Data is governed by European legislation on the protection of Personal Data
  • the treatment is necessary for the execution of a contract with the User and / or the execution of pre-contractual measures
  • the treatment is necessary to fulfill a legal obligation to which the Holder is subject;
  • the treatment is necessary for the pursuit of the legitimate interest of the Holder or third parties.

However, it is always possible to ask the Data Controller to clarify the concrete legal basis of each treatment and in particular to specify whether the treatment is based on the law, provided for by a contract or necessary to conclude a contract.

Place

The Data are processed at the operating offices of the Owner and in any other place where the parties involved in the processing are located. For further information, please contact the Data Controller.
The User’s Personal Data may be transferred to a country other than that in which the User is located. To obtain further information on the place of processing, the User may refer to the section on the details of the processing of Personal Data.

You have the right to obtain information about the legal basis for the transfer of Data outside the European Union or an international organisation governed by public international law or consisting of two or more countries, such as the UN, and about the security measures taken by the Data Controller to protect the Data.

The User may check whether one of the above transfers takes place by examining the section of this document relating to the details of the processing of Personal Data or request information from the Holder by contacting him at the contact details given in the opening.

Retention period

Data are processed and stored for the time required for the purposes for which they were collected.

Therefore:

  • Personal Data collected for purposes related to the execution of a contract between the Holder and the User will be retained until the execution of such contract is completed.
  • Personal Data collected for purposes related to the legitimate interest of the Owner will be retained until such time as such interest is satisfied. The User may obtain further information regarding the legitimate interest pursued by the Holder in the relevant sections of this document or by contacting the Holder.

When processing is based on the User’s consent, the Holder may retain the Personal Data for longer until such consent is revoked. In addition, the Holder may be obliged to retain Personal Data for a longer period in accordance with a legal obligation or by order of an authority.

At the end of the retention period the Personal Data will be deleted. Therefore, upon expiry of this period, the right of access, deletion, rectification and portability of the Data may no longer be exercised.

Purpose of processing of collected data

User Data is collected to enable the Owner to provide its Services, as well as for the following purposes: Contacting the User, Statistics, Content Commentary, Viewing Content from External Platforms, Transferring Data Outside the EU, Tag Management, Hosting and Backend Infrastructure, SPAM Protection, Traffic Optimization and Distribution and Interaction with External Social Networks and Platforms.

To obtain further detailed information on the purposes of the processing and on the Personal Data specifically relevant for each purpose, the User may refer to the relevant sections of this document.

Details on the processing of Personal Data

Personal Data is collected for the following purposes and using the following services:

Commentary on contents

Commentary services allow Users to make and make public their own comments regarding the content of this Web Site.
Users, depending on the settings decided by the Owner, may also leave the comment anonymously. If the Personal Data provided by the User includes an email, it may be used to send notifications of comments regarding the same content. Users are responsible for the content of their comments.
If a commenting service provided by third parties is installed, it is possible that, even if the Users do not use the commenting service, it collects traffic data relating to the pages where the commenting service is installed.

Directly managed commentary system (this Website)

This Website has its own content commenting system.

Personal data collected: email; name.

Contact User

Contact form (this Website)

The User, by filling in the contact form with his/her Data, consents to their use to respond to requests for information, quotes, or any other nature indicated in the header of the form.

Personal data collected: email; name; phone.

Hosting and backend infrastructure

This type of service has the function of hosting Data and files that allow this Web Site to function, allow its distribution and provide a ready-to-use infrastructure to provide specific features of this Web Site.

Some of the services listed below, if any, may operate on geographically distributed servers, making it difficult to determine the actual location where Personal Data is stored.

Tag management

This type of service is functional to the centralized management of tags or scripts used on this Web Site.
The use of these services involves the flow of User Data through them and, where applicable, their retention.

Google Tag Manager (Google Ireland Limited)

Google Tag Manager is a tag management service provided by Google Ireland Limited.
Personal data collected: Cookie; Usage data.
Place of treatment: Irlanda – Privacy Policy. Subject adhering to the Privacy Shield.

Interaction with social networks and external platforms

This type of service allows you to interact with social networks, or other external platforms, directly from the pages of this Website.
The interactions and information acquired by this Website are in any case subject to the User’s privacy settings for each social network.
This type of service may still collect traffic data for the pages where the service is installed, even when Users do not use it.
We recommend that you disconnect from the respective services to ensure that the data processed on this Website is not linked to your profile.

Like button and social widgets from Facebook (Facebook, Inc.)

The Facebook Like button and social widgets are social networking services provided by Facebook, Inc.

Personal data collected: Cookie; Usage data.

Place of treatment: Stati Uniti – Privacy Policy. Subject adhering to the Privacy Shield.

Tweet button and Twitter social widgets (Twitter, Inc.)

The Tweet button and Twitter social widgets are social networking services provided by Twitter, Inc.

Personal data collected: Cookie; Usage data.

Place of treatment: Stati Uniti – Privacy Policy. Subject adhering to the Privacy Shield.

Linkedin button and social widgets (LinkedIn Corporation)

The LinkedIn button and social widgets are LinkedIn social networking services provided by LinkedIn Corporation.

Personal data collected: Cookie; Usage data.

Place of treatment: Stati Uniti – Privacy Policy. Subject adhering to the Privacy Shield.

YouTube button and social widgets (Google Ireland Limited)

The YouTube button and social widgets are services of interaction with the social network YouTube, provided by Google Ireland Limited.

Personal data collected: Usage data.

Place of treatment: Irlanda – Privacy Policy. Subject adhering to the Privacy Shield.

Facebook Pages

Facebook appendix on Facebook Insights and Page Administrators.

“Page administrators do not have access to personal data processed in the context of events, but only to aggregated Page Insights. The events used to create Page Insights do not store IP addresses, cookie IDs or other identifiers associated with people or their devices, except for a Facebook user ID for people who have logged in to Facebook. Events recorded by Facebook for the creation of Page Insights are exclusively defined by Facebook and cannot be configured, modified or otherwise influenced by Page administrators.
“Facebook Ireland decides in its sole discretion how to comply with the obligations set out in this Appendix for Page Insights. The Page Administrator acknowledges and accepts that only Facebook Ireland has the power to make and implement decisions on the processing of Insights’ Data.
Link to the Page’s Insights Appendix, in force since 28/11/2019.
Regulations relating to Pages, Groups and Events.

Traffic optimisation and distribution

This type of service allows this Web Site to distribute its content through servers located in the territory and to optimize the performance of the same.
The Personal Data processed depends on the characteristics and method of implementation of these services, which by their nature filter the communications between this Web Site and the User’s browser.
Due to the distributed nature of this system, it is difficult to determine where the content is transferred, which may contain your Personal Data.

Cloudflare (Cloudflare Inc.)

Cloudflare is a traffic optimization and distribution service provided by Cloudflare Inc.
Cloudflare’s integration methods require that this filters all the traffic on this Website, i.e. the communications between this Website and the User’s browser, also allowing the collection of statistical data on it.

Personal data collected: Cookies and various types of Data as specified in the privacy policy of the service.

Place of treatment: Stati Uniti – Privacy Policy.

Protection from SPAM

This type of service analyzes the traffic on this Web Site, potentially containing Personal Data of Users, in order to filter it from parts of traffic, messages and content recognized as SPAM.

Akismet (Automattic Inc.)

Akismet is a SPAM protection service provided by Automattic Inc.

Personal data collected: various types of Data as specified by the privacy policy of the service.

Place of treatment: Stati Uniti – Privacy Policy.

Statistics

The services contained in this section allow the Data Controller to monitor and analyse traffic data and are used to keep track of the User’s behaviour.

WordPress Stat (Automattic Inc.)

WordPress Stats is a statistics service provided by Automattic Inc.

Personal data collected: Cookie; Usage data.

Place of treatment: Stati Uniti – Privacy Policy.

Data transfer outside the EU

The Holder may transfer Personal data collected within the EU to third countries (i.e. all non-EU countries) only in accordance with a specific legal basis. Therefore, these data transfers are carried out according to one of the legal bases described below.
The User may request information from the Holder regarding the applicable legal basis actually applicable to each individual service.

Other legal basis for the transfer of Data to third countries (this Website)

When no other legal basis is applicable, Personal Data may be transferred from the EU to third countries only under one of the following conditions:

  • the transfer is necessary to perform a contract concluded between User and Holder or pre-contractual measures taken at the request of the User
  • the transfer is necessary to conclude or perform a contract entered into in the interest of the User by the Holder and another natural person or legal entity;
  • the transfer is necessary for reasons of public interest; ( -the transfer is necessary to ascertain, exercise or defend a legal claim;
  • the transfer is necessary to protect the vital interests of the Interested Party or other persons, when the Interested Party is physically or legally unable to give consent.

In such cases, the Owner shall inform the User of the legal basis applicable to the actual transfer through this Website.

Personal data collected: various types of Data.

Transfer of Data from the EU and/or Switzerland to the United States based on the Privacy Shield (this Website)

Where this is the legal basis, the transfer of Personal Data from the EU or from Switzerland to the US takes place under the EU – US or Switzerland – US Privacy Shield Agreement.
In particular, Personal Data is transferred to persons who have self-certified within the framework of the Privacy Shield and thus ensure an adequate level of protection of the Data transferred. The services concerned by the transfer of Data are listed in the respective sections of this document. Among them, those that adhere to the Privacy Shield can be identified by consulting the relevant privacy policy or by verifying the status of their inclusion in the official list of the Privacy Shield.
Users’ rights under the Privacy Shield are described in a continually updated form on the U.S. Department of Commerce website.(( The transfer of Personal Data from the EU or Switzerland to the U.S. to persons who are no longer (no longer) members of the Privacy Shield is only admissible on another valid legal basis. Users may request information from the Holder regarding these legal bases.

Personal data collected: various types of Data.

Data transfer to countries that guarantee European standards (this Website)

Where this is the legal basis, the transfer of Personal Data from the EU to third countries takes place on the basis of an adequacy decision taken by the European Commission. The European Commission takes adequacy decisions with respect to individual third countries that it considers to ensure a level of protection of Personal Data comparable to that provided by European legislation on the protection of Personal Data. The User can view the updated list of adequacy decisions on the website of the European Commission.

Personal data collected: various types of Data.

Transfer to third countries based on consent (this Website)

Where this is the legal basis, the transfer of Personal Data from the EU to third countries only takes place when the User has expressly consented to such transfer after having been informed of the risks due to the absence of an adequacy decision and of the adequate safeguards adopted.
In such cases, the Holder informs the Users and collects their consent through this Website.

Personal data collected: various types of Data.

Transfer to third countries on the basis of standard contractual clauses (this Website)

Where this is the legal basis, the transfer of Personal Data from the EU to third countries takes place on the basis of standard clauses for the protection of Personal Data adopted by the European Commission.
In such cases, the recipients of the Data have agreed to process the Personal Data in accordance with the levels of protection provided by law. Users may request further information by contacting the Data Controller at the contact details indicated in this document.

Personal data collected: various types of Data.

Viewing content from external platforms

This type of service allows you to view and interact with content hosted on external platforms directly from the pages of this Website.
This type of service may still collect data on web traffic related to the pages where the service is installed, even when users do not use it.

YouTube Video Widget (Google Ireland Limited)

YouTube is a video viewing service operated by Google Ireland Limited that allows this Website to integrate video content into its pages.

Personal data collected: Cookies and Usage Data.

Place of treatment: Irlanda – Privacy Policy. Subject adhering to the Privacy Shield.

Instagram Widget (Instagram, Inc.)

Instagram is an image viewing service operated by Instagram, Inc. that allows this Web Site to integrate such content into its pages.

Personal data collected: Cookies and Usage Data.

Place of treatment: Stati Uniti – Privacy Policy.

Gravatar (Automattic Inc.)

Gravatar is an image viewing service operated by Automattic Inc. that allows this Web Site to integrate such content into its pages.
Please note that if Gravatar images are used for commenting systems, the commentator’s email address (or parts thereof) may be sent to Gravatar, even if you are not a member of this service.

Personal data collected: Usage data; email.

Place of treatment: Stati Uniti – Privacy Policy.

Google Fonts (Google Ireland Limited)

Google Fonts is a style display service operated by Google Ireland Limited that allows this Website to integrate such content into its pages.

Personal data collected: Usage data; various types of Data as specified in the privacy policy of the service.

Place of treatment: Irlanda – Privacy Policy. Subject adhering to the Privacy Shield.

Font Awesome (Fonticons, Inc. )

Font Awesome is a font viewing service operated by Fonticons, Inc. that allows this Web Site to integrate such content into its pages.

Personal data collected: Usage data.

Place of treatment: Stati Uniti – Privacy Policy.

YouTube Video Widget without cookies (Google Ireland Limited)

YouTube is a video viewing service operated by Google Ireland Limited that allows this Website to integrate video content into its pages.
This widget is set so that YouTube does not store information and cookies about you on this Website unless you play the video.

Personal data collected: Usage data.

Place of treatment: Irlanda – Privacy Policy. Subject adhering to the Privacy Shield.

SoundCloud Widget (SoundCloud Limited)

Soundcloud is an audio content delivery service operated by SoundCloud Limited that allows this Website to integrate this content into its pages.

Personal data collected: Usage data.

Place of treatment: Germania – Privacy Policy.

User Rights

Users may exercise certain rights with regard to the Data processed by the Owner.
In particular, the User has the right to:

  • Revoke your consent at all times. You may revoke your consent to the processing of your Personal Data previously expressed.
  • Opposing the processing of their Data. The User may object to the processing of their Data when it takes place on a legal basis other than consent.
    Further details on the right to object are indicated in the section below.
  • Access to your Data. You have the right to obtain information on the Data processed by the Owner, on certain aspects of the processing and to receive a copy of the Data processed.
  • Check and request correction. The User can verify the correctness of their Data and request its updating or correction.
  • Adhere to the limitation of the treatment. When certain conditions are met, the User may request the limitation of the processing of their Data. In this case, the Owner will not process the Data for any other purpose than their storage.
  • Observe the cancellation or removal of your Personal Data. When certain conditions apply, the User may request the cancellation of their Data by the Owner.
  • Receive your Data or have it transferred to another holder. You have the right to receive your Data in a structured format, commonly used and readable by automatic device and, where technically feasible, to obtain the transfer without hindrance to another holder. This provision is applicable when the Data is processed by automated means and the processing is based on the User’s consent, on a contract to which the User is a party or on contractual measures related thereto.
  • Submitting a complaint. The User may submit a complaint to the competent data protection supervisory authority or take legal action.

Details of the right to object

When Personal Data are processed in the public interest, in the exercise of public powers vested in the Data Controller or to pursue a legitimate interest of the Data Controller, Users have the right to object to the processing for reasons related to their particular situation.
Users are reminded that, if their Data is processed for direct marketing purposes, they may object to the processing without giving any reason. To find out if the Owner processes data for direct marketing purposes, Users can refer to the respective sections of this document.

How to exercise your rights

In order to exercise the User’s rights, Users may address a request to the Owner’s contact details indicated in this document. Requests are filed free of charge and processed by the Holder as soon as possible, in any case within one month.

Cookie Policy

This Website uses Cookies. For more information and to view the detailed information, the User may refer to the Cookie Policy.

More information about the treatment

Defense in court

The User’s Personal Data may be used by the Owner in court or in the preparatory stages for its possible establishment to defend against abuse in the use of this Website or related Services by the User.
The User declares to be aware that the Owner may be obliged to disclose the Data by order of the public authorities.

Specific information

At your request, in addition to the information contained in this privacy policy, this Web Site may provide you with additional and contextual information regarding specific Services, or the collection and processing of Personal Data.

System log and maintenance

For operational and maintenance purposes, this Website and any third party services used by it may collect system logs, i.e. files that record interactions and may also contain Personal Data, such as the User’s IP address.

Information not contained in this policy

Further information in relation to the processing of Personal Data may be requested at any time from the Data Controller using the contact details.

Response to requests “Do Not Track”

This Website does not support “Do Not Track” requests.
To find out if any third party services you use support them, please refer to their privacy policies.

Changes to this privacy policy

The Data Controller reserves the right to make changes to this privacy policy at any time by informing Users on this page and, if possible, on this Website and, where technically and legally feasible, by sending a notification to Users through one of the contact details held by the Data Controller. Please consult this page regularly, referring to the date of the last change indicated at the bottom.
If the changes involve processing whose legal basis is the consent, the Holder will collect the User’s consent again, if necessary.

Definitions and legal references

Personal Data

Personal data are any information that, directly or indirectly, also in connection with any other information, including a personal identification number, makes a natural person identified or identifiable.

Usage Data

This is the information automatically collected through this Web Site (also by third party applications integrated into this Web Site), including: IP addresses or domain names of computers used by the User connecting to this Web Site, addresses in URI (Uniform Resource Identifier), the time of the request, the method used to forward the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response from the server (successful, error, etc.).) the country of origin, the characteristics of the browser and operating system used by the visitor, the various time connotations of the visit (for example, the time spent on each page) and details of the itinerary followed within the Application, with particular reference to the sequence of pages consulted, the parameters relating to the operating system and the User’s computer environment.

User

The individual using this Web Site who, unless otherwise specified, is the same as the Interested Subject.

Interested

The natural person to whom the Personal Data refers.

Data processor

The natural person, legal entity, public administration and any other entity that processes personal data on behalf of the Holder, as set forth in this privacy policy.

Data controller

The natural or legal person, public authority, service or other body which, individually or together with others, determines the purposes and means of the processing of personal data and the instruments adopted, including the security measures relating to the operation and use of this Website. The Data Controller, unless otherwise specified, is the owner of this Web Site.

This Website

The hardware or software tool through which User Personal Data is collected and processed.

Service

The Service provided by this Web Site as defined in the relevant terms (if any) on this site.

European Union (UE)

Unless otherwise stated, any reference in this document to the European Union shall be deemed to extend to all current Member States of the European Union and the European Economic Area.

Cookie

Small amount of data stored within the User’s device.


Legal references

This privacy policy has been drawn up on the basis of a number of legislative systems, including Articles 13 and 14 of Regulation (EU) 2016/679.

Unless otherwise stated, this privacy policy applies exclusively to this Website.


Data controller

Aldo Roberto Pessolano
Email address:
arpessolano@pianoth.com

Last modified: 9 October 2019


The official version of this policy is the Italian one.