Privacy Policy
Source: cms
This page is a GDPR-oriented model notice to be adapted with the real details of the data controller.
1. Data controller
[INSERT COMPANY NAME], with registered office at [INSERT ADDRESS], contact email [INSERT EMAIL], acts as data controller for the processing described on this website.
2. Data processed
Depending on the service used, the site may process identification data, contact data, account data, technical navigation data, and data voluntarily sent through contact or newsletter forms.
3. Purposes and legal bases
Data may be processed to deliver the requested service, answer requests, manage reserved-area access, comply with legal obligations, protect legitimate technical and security interests, and send newsletter communications where consent has been provided. The main legal bases are Article 6(1)(b), 6(1)(c), 6(1)(f), and, where required, 6(1)(a) GDPR.
4. Retention
Data is retained only for the time necessary to achieve the stated purposes or to comply with applicable legal and contractual obligations.
5. Recipients and transfers
Data may be processed by authorized personnel and by technical providers acting as processors. Any transfer outside the EEA must be supported by an appropriate legal mechanism where required.
6. Data subject rights
You may request access, rectification, erasure, restriction, portability, objection, and, where consent is the legal basis, withdrawal of consent without affecting prior processing. You may also lodge a complaint with the competent supervisory authority.
7. Contacts
To exercise rights or request clarifications, write to [INSERT PRIVACY EMAIL].