PROCESSING METHODS
The owner takes appropriate security measures to prevent unauthorized access, disclosure, modification or destruction of personal data.

The processing is carried out by means of computer and/or telematic tools, with organizational methods and logics strictly related to the indicated purposes.

In addition to the owner, in some cases, other subjects involved in the organization of this application (administrative, sales, marketing, legal, system administrators) or external subjects (such as third party technical service providers, postal couriers, hosting providers, IT companies, communication agencies) also appointed, if necessary, as data processors by the owner may have access to the data.

An updated list of those responsible can always be obtained from the data controller.

LEGAL BASIS FOR PROCESSING
The owner processes personal data related to the user if any of the following conditions exist:

The user has given consent for one or more specific purposes;
• Processing is necessary for the performance of a contract with the user and/or the execution of pre-contractual measures;
• Processing is necessary to fulfill a legal obligation to which the owner is subject;
• The processing is necessary for the performance of a task of public interest or the exercise of public authority vested in the holder;
• Processing is necessary for the pursuit of the legitimate interest of the owner or third parties.

However, it is always possible to ask the controller to clarify the concrete legal basis of each processing and in particular to specify whether the processing is based on law, required by a contract or necessary to conclude a contract.

LOCATION
Data are processed at the holder’s operational offices and at any other location where the parties involved in the processing are located. For more information, contact the owner.
The user’s personal data may be transferred to a country other than the one where the user is located. To obtain more information about the location of the processing, the user can refer to the section on personal data processing details.

You have the right to obtain information regarding the legal basis for the transfer of data outside the European Union or to an international organization under public international law or consisting of two or more countries, such as the UN, as well as regarding the security measures taken by the data controller to protect the data.

Should any of the transfers just described take place, the user may refer to the respective sections of this document or request information from the owner by contacting him at the contact details given at the beginning.

STORAGE PERIOD
Data are processed and kept for the time required by the purposes for which they were collected; therefore:

• Personal data collected for purposes related to the performance of a contract between the owner and the user will be retained until the performance of that contract is completed;

• Personal data collected for purposes attributable to the legitimate interest of the holder will be retained until that interest is satisfied. You may obtain additional information regarding the legitimate interest pursued by the owner in the relevant sections of this document or by contacting the owner.

When processing is based on the user’s consent, the controller may retain personal data longer until that consent is revoked. In addition, the controller may be obliged to retain personal data for a longer period in compliance with a legal obligation or by order of an authority.

At the end of the retention period, personal data will be deleted. Therefore, at the expiration of this period the right of access, deletion, rectification and the right to data portability can no longer be exercised.