Privacy Policy

1. Data Controller

The Data Controller is Studio Novara S.r.l., with registered office at Via Regina Amata 17, 00042 Anzio (RM) and operating office at Via Vassalli Eandi 28, 10138 Torino (TO) (the “Controller” or the “Studio”).

The Controller is represented by the Sole Director Salvatore Novara.

For any matter relating to the processing of personal data, you may contact the Controller at the contacts listed in the “Contacts” section of this document or by writing to studio@ilconsulenteambientale.com or to the certified email address (PEC) studionovarasrl@legalmail.it.

2. Personal data processed

The Site processes exclusively the personal data necessary for the purposes set out in section 3. In particular:

• browsing data: IP addresses, browser type, pages visited, access times and other technical data collected in aggregate form (see Cookie Policy);
• data provided voluntarily through the contact form: name, company, email, telephone (optional), service of interest and message;
• data provided to download the environmental checklist: name, company, email and telephone (optional), together with any consent to receive informational communications.

3. Purposes of processing and legal basis

Personal data is processed for the following purposes:

• responding to contact and consultancy requests submitted through the Site’s forms (legal basis: Art. 6(1)(b) GDPR — pre-contractual measures — and, where required, consent under Art. 6(1)(a) GDPR);
• sending the environmental checklist requested and, only with specific optional consent, informational communications about regulatory updates and consultant news (legal basis: consent under Art. 6(1)(a) GDPR);
• measuring the use of the Site in aggregate and anonymous form through statistical cookies (Google Analytics), only with the user’s prior consent (legal basis: consent, in line with cookie legislation and Directive 2009/136/EC);
• ensuring the security of the Site and preventing abuse, spam and cyber attacks (legal basis: the Controller’s legitimate interest under Art. 6(1)(f) GDPR);
• complying with legal, accounting and tax obligations (legal basis: Art. 6(1)(c) GDPR).

4. Nature of the provision of data

Providing the data marked as required in the forms is essential in order to respond to your requests: without it, it will not be possible to handle your request.

Consent to informational communications is instead optional and may be withdrawn at any time without affecting the lawfulness of processing carried out on the basis of the consent given beforehand.

5. Processing methods, retention and security

Data is processed using computer and electronic tools, with logic strictly related to the purposes indicated and, in any case, in a manner that ensures the confidentiality, integrity and availability of data, in accordance with the security measures provided for by Art. 32 GDPR.

Personal data is kept for the time strictly necessary to achieve the purposes for which it was collected and, in particular:

• contact and checklist form data: for the time needed to handle the request and, for established relationships, for the duration of the relationship and the subsequent legal obligations; in the absence of a relationship, generally no longer than 24 months from collection, unless required by law;
• data subject to informational communications: until consent is withdrawn or deletion is requested;
• statistical data (Google Analytics): for the duration set by the account settings, generally no longer than 14 months.

6. Recipients of the data

Personal data may be shared with parties that provide services on behalf of the Controller, appointed as data processors under Art. 28 GDPR, and in particular with parties that manage:

• the hosting and infrastructure of the Site (including cloud services and CDN);
• the email service and the management of forms;
• statistical and traffic measurement services (e.g. Google Analytics);
• protection against spam and abuse (e.g. anti-bot and CAPTCHA services).

Under no circumstances will the data be disclosed or sold to third parties for direct-marketing purposes by parties other than the Controller.

7. Transfer of data outside the EU

Some service providers (e.g. hosting platforms and Google Analytics) may also process data outside the European Economic Area, in particular in the United States.

In such cases, the transfer takes place in accordance with the GDPR, based on the appropriate safeguards provided for by Arts. 44 et seq. GDPR (e.g. Standard Contractual Clauses approved by the European Commission or adequacy decisions).

8. Cookies

The Site uses technical cookies that are necessary for its operation and, with prior consent, statistical cookies (Google Analytics) to understand how the Site is used.

For full information on the use of cookies, on how to manage consent and on how to disable them, please refer to the Cookie Policy.

9. Data subject’s rights

Under Arts. 15-22 GDPR, you may exercise the following rights at any time:

• right of access to your personal data (Art. 15 GDPR);
• right to rectification of inaccurate data (Art. 16 GDPR);
• right to erasure of the data (Art. 17 GDPR);
• right to restriction of processing (Art. 18 GDPR);
• right to data portability (Art. 20 GDPR);
• right to object to processing (Art. 21 GDPR);
• right to withdraw consent at any time, without affecting the lawfulness of processing based on consent given prior to withdrawal.

Requests should be sent to the Controller at the contacts listed in the “Contacts” section. The Controller will respond without undue delay and, in any case, within one month of receipt of the request.

You also have the right to lodge a complaint with the Italian data protection authority (Garante per la protezione dei dati personali — www.garanteprivacy.it) if you believe that the processing infringes the GDPR.

10. Changes to this policy

This policy may be updated from time to time. We invite you to check this page periodically: the date of the last update is shown at the top of the document.

11. Contacts

Data Controller: Studio Novara S.r.l. — Via Regina Amata 17, 00042 Anzio (RM).

To exercise your rights or for any question relating to the processing of personal data, you may contact the Controller:

• email: studio@ilconsulenteambientale.com
• certified email (PEC): studionovarasrl@legalmail.it
• telephone: +39 06 981 5849
• website: www.ilconsulenteambientale.com