PRIVACY NOTICE FOR WEBSITE USERS
according to article 13 of the Regulation (EU) 2016/679 (“GDPR”) General Data Protection Regulation
The website elenaciprietti.com collects, directly or through third parties, some Personal Data from its users (“Users). Your personal data (“Data”) will be processed by Elena Ciprietti (“Controller”) VAT n. 0261070964, as Data Controller. Your Data will be processed under the principles of protection of personal data established by EU Regulation 2016/679 (“GDPR”).
You can contact Elena Ciprietti for any questions regarding this Privacy Notice at the following email address: firstname.lastname@example.org.
Purpose and lawful basis of the processing
What Data do we process, and for what purpose?
The Controller may process the following Data: IP address, name, surname, email address, other Data freely provided by the User.
The Data concerning the Users is collected to allow the Controller to:
offer courses to the Customers;
process Customers payments;
respond to Users that fill-out the contact form.
Provided you have given your consent, the Controller can also process your name and email address, for the following purposes:
to offer you a newsletter service. The service is provided using MailChimp, an American marketing automation platform and an email marketing service;
to send you special offers and redeemable gifts.
To analyze statistical data;
Lawful basis of the processing
The lawful basis of the processing for the purposes a), b) and c) is the fulfillment of contractual or pre-contractual obligations.
In order to purchase video-courses, you shall provide your Personal Data. If the Data is not provided, you will not be able to conclude the transaction.
In addition, to complete the purchase of video-courses, you shall accept the “User’s Terms and Conditions”. The User’s Terms and Conditions are available at the following link: https://www.iubenda.com/terms-and-conditions/36515635.
The lawful basis of the processing for the purpose d), e) and f) is Your consent.
You can withdraw the consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal. You can withdraw the consent at any time by sending an email to: email@example.com.
Your data will be transferred by the Controller to countries outside the European Union (EU). Your Data will be transferred exclusively to countries considered “adequate” - and therefore “safe” - by the European Commission or to companies that have adhered to specific international standards (e.g., Privacy Shield Framework).
For further information about the processing of your Data for marketing purposes, you can see the MailChimp Data Processing Addendum at the following link: https://mailchimp.com/legal/data-processing-addendum/
The Facebook Like button and social widgets allow the interaction with Facebook and other social networks. Here below you can see the relevant privacy policies:
The Controller will store and process personal data for the time necessary to fulfill the purposes specified in this privacy notice. Your Data will not be retained for a longer period of time unless the current law requires a more extended retention period. The Italian Civil Code requires to store all the documents with commercial and legal relevance for 10 years.
Data Subject Rights
You may exercise the rights granted by the GDPR (articles 15-22), including:
a. The right to receive confirmation as to whether the Data Controller is processing the Data Subject’s personal data (access rights);
b. The right to update, modify and / or correct personal data (right of rectification);
c. The right to request the erasure of data or the restriction of the processing. This right can be granted if the process is unlawful or the Controller no longer needs the personal data for the purposes of the processing (right to be forgotten and right to restriction of processing);
d. The right to oppose to the processing (right of opposition);
e. The right to propose a complaint to the Supervisory Authority in case of violation of the regulations regarding the protection of personal data;
f. The right to receive an electronic copy of the Data Subject’s personal data (in a structured, commonly used and machine-readable format) and right to transmit those Data to another Controller without hindrance from the Controller to which the personal Data have been provided (right to Data portability).
You can contact the Controller to exercise the rights granted by the GDPR providing the following information: name, surname. Moreover, in order to process the request, please provide a copy of your identity document.
Privacy Notice updated on: March 12, 2020