Privacy Policy

PRIVACY POLICY

1 - Information about the Privacy of the website

1. This section contains information on the management methods of www.riflessi-di-luce.com, owned by Vira Pavlenko, concerning the processing of users' data of the website itself.
2. This information also has value for the purposes of Article 13 of Regulation (EU) no. 2016/679, concerning the protection of individuals with regard to the processing of personal data and the free movement of such data, for subjects interacting with www.riflessi-di-luce.com.
3. The information is provided only for www.riflessi-di-luce.com and not for other websites that may be consulted by the user through links contained therein.
4. The purpose of this document is to provide indications about the methods, times, and nature of the information that the data controllers must provide to users when connecting to the web pages of www.riflessi-di-luce.com, regardless of the purposes of the connection itself, according to Italian and European legislation.
5. The information may undergo changes due to the introduction of new rules in this regard; therefore, users are invited to periodically check this page.
6. If the user is under the age of fourteen, pursuant to art.8, c.1 Regulation (EU) 2016/679, and Art. 2 - Quinquies of Legislative Decree 196/2003, as amended by Legislative Decree 181/18, they must legitimize their consent through the authorization of parents or those who take their place.

2 - Data Controller

1. The data controller is the natural or legal person, public authority, service, or other body that, individually or together with others, determines the purposes and means of the processing of personal data. It also deals with security profiles.
2. Regarding this website, the data controller is: Vira Pavlenko, and for any clarification or exercise of the user's rights, they can be contacted at the following email address: pavlenko.v.5591@gmail.com.

3 - Data processing location

1. The processing of data generated by the use of www.riflessi-di-luce.com takes place at Via I Maggio 46, 56036, Palaia (PI).
2. If necessary, data related to the newsletter service may be processed by the data processor or subjects appointed by it for this purpose at the relevant office.

4 - Legal Basis of Processing

1. The processing of personal data by www.riflessi-di-luce.com is based on consent - pursuant to Art. 6, para. 1, lett. a) of EU Regulation 2016/679 - expressed by the user through browsing this website and its consultation, thus accepting this information.
2. Consent is optional and can be revoked at any time by request sent via email to pavlenko.v.5591@gmail.com, specifying that, in this case, without consent, some services cannot be provided, and browsing the website may be compromised.

5 - Cookies

1. This section describes how this Website and third parties use cookies and similar technologies. The use of cookies complies with the relevant European (Directive 2009/136/EC amending Directive 2002/58/EC "E Privacy") and national legislation (Garante's Provision for the protection of personal data of May 8, 2014, and subsequent clarifications as well as Guidelines on cookies and other tracking tools of June 10, 2021 no.231).
2. For complete information about cookies, visit our cookie policy: www.riflessi-di-luce.com.

6 - Type of Data Processing

1. The processing of personal data is necessary to pursue the legitimate interest of the data controller for the purpose of providing information about the activity of www.riflessi-di-luce.com pursuant to Art. 6, para. 1, lett. f) of EU Regulation 2016/679, in compliance with the same Regulation.
2. This site uses Log Files in which information collected in an automated manner during user visits is stored. The collected information may include:

• Internet Protocol (IP) address;
• Browser type and device parameters used to connect to the site;
• Name of the Internet Service Provider (ISP);
• Date and time of visit;
• Referral web page of the visitor and exit;
• Possibly the number of clicks.

1. The above information is processed automatically and collected only in aggregate form in order to verify the correct functioning of the site and for security reasons. This information will be processed based on the legitimate interests of the data controller.
2. For security purposes (anti-spam filters, firewall, virus detection), automatically recorded data may also include personal data such as the IP address, which could be used, in accordance with applicable laws, to block attempts to damage the site itself or to cause harm to other users, or otherwise harmful activities or offenses. Such data are never used for the identification or profiling of the user, but only for the protection of the site and its users; this information will be processed based on the legitimate interests of the data controller.

7 - Type of Acquired Data

1. www.riflessi-di-luce.com collects user data directly from the website or from third parties. The data is necessary for browsing the website.
2. The data collected by www.riflessi-di-luce.com are:

name, surname, shipping address, billing address, and email

8 - User Provided Data

1. If the website allows the insertion of comments, or in case of specific services requested by the user, including the possibility of sending the Curriculum Vitae for a possible job relationship, the website automatically detects and records some user identification data, including email address. This data is voluntarily provided by the user at the time of requesting the service.
2. By entering a comment or other information, the user expressly accepts the privacy policy. The data received will be used exclusively for the provision of the requested service and for the time necessary for the provision of the service.
3. The information that users of the site consider to make public through the services and tools made available to them is provided by the user knowingly and voluntarily, exempting this site from any liability regarding any violations of laws. It is the user's responsibility to verify that they have permission to enter personal data of third parties or content protected by national and international regulations.
4. The optional, explicit, and voluntary sending of electronic mail to the addresses indicated on this site entails the subsequent acquisition of the sender's address, necessary to respond to requests, as well as any other personal data entered in the message.
5. Specific summary information will be progressively reported or displayed on the pages of the site prepared for particular on-demand services.

9 - Purpose of Data Processing

1. The data collected by the website during its operation are used exclusively for the purposes indicated above and stored for the time strictly necessary to carry out the specified activities, and in any case not exceeding 2 years.

10 - Data Retention

1. In accordance with Article 5.1(c) of the Regulation, the information systems and computer programs used by www.riflessi-di-luce.com are configured to minimize the use of personal and identifying data; such data will be processed only to the extent necessary to achieve the purposes indicated in this Policy.
2. The data will be kept for the period of time strictly necessary to achieve the purposes pursued and, in any case, the criterion used to determine the storage period is based on compliance with the terms allowed by applicable laws and the principles of data minimization and storage limitation.
3. The data collected by the website will never be provided to third parties, unless it is a legitimate request by the judicial authority and only in the cases provided for by law.
4. Data used for security purposes (blocking attempts to damage the website) are stored for the time strictly necessary to achieve the aforementioned purpose.

11 - Payments

1. www.riflessi-di-luce.com uses payment services to process payments by credit card, bank transfer, or other instruments. www.riflessi-di-luce.com does not collect or acquire the data used for payment.
2. The payment data is collected and acquired directly by the payment service manager, such as the credit card company, PayPal, Stripe, or similar entities. These services may send messages to the user, such as email or SMS payment notifications.
3. The data acquired and their use by third-party services are regulated by their respective Privacy Policies to which reference should be made.

PayPal, Service Provider: PayPal, Inc. Service Purpose: Processing online payments Personal Data collected: Various types of Data as specified in the privacy policy of the service Place of processing: See the privacy policy of the service Privacy Policy (https://www.paypal.com/it/webapps/mpp/ua/privacy-full)

Stripe, Service Provider: Stripe, Inc. Service Purpose: Processing online payments Personal Data collected: Various types of Data as specified in the privacy policy of the service. Place of processing: See the privacy policy of the service Privacy Policy (https://stripe.com/it/privacy)

12 - Newsletter

1. With the prior consent of the user, and through voluntary registration via email, the user is added to a contact list to which periodic update emails, including promotional and marketing emails, from this website will be sent.
2. The user is sent an email (to the email address provided) containing a link to click to confirm that the user is the actual owner of the email address.
3. Personal data that may be collected in the newsletter:

email

13 - Social Network Interaction

1. This website also incorporates plugins and/or buttons for social networks, in order to allow easy sharing of content on your favorite social networks. These plugins are programmed not to set any cookies when accessing the page, to safeguard user privacy. Cookies are only set, if provided by the social networks, when the user makes effective and voluntary use of the plugin. Please note that if the user browses while logged into the social network, they have already consented to the use of cookies transmitted through this site when registering with the social network.
2. This type of service allows interaction with social networks, or with other external platforms, directly from the pages of www.riflessi-di-luce.com.
3. Interactions and information acquired by www.riflessi-di-luce.com are in any case subject to the User's privacy settings for each social network. If an interaction service with social networks is installed, it is possible that, even if Users do not use the service, it collects traffic data relating to the pages where it is installed.

LinkedIn Social Button and Widgets (LinkedIn Corporation). The LinkedIn Social Button and Widgets are interaction services with the LinkedIn social network, provided by LinkedIn Corporation. Personal Data collected: Cookies and Usage Data. Location of processing: United States – Privacy Policy: https://www.linkedin.com/legal/privacy-policy

Facebook Like Button and Widgets (Facebook, Inc.) The Facebook Like Button and Widgets are interaction services with the Facebook social network, provided by Facebook, Inc. Personal Data collected: Cookies and Usage Data. Location of processing: United States – Privacy Policy: https://www.facebook.com/privacy/explanation.

Twitter Tweet Button and Widgets (Twitter, Inc.) The Twitter Tweet Button and Widgets are interaction services with the Twitter social network, provided by Twitter, Inc. Personal Data collected: Cookies and Usage Data. Location of processing: United States – Privacy Policy: https://twitter.com/en/privacy.

Google+ +1 Button and Widgets (Google Inc.) The Google+ +1 Button and Widgets are interaction services with the Google+ social network, provided by Google Inc. Personal Data collected: Cookies and Usage Data. Location of processing: United States – Privacy Policy: https://policies.google.com/privacy?hl=it.

Pinterest Pin It Button and Widgets (Pinterest Inc.) Pinterest Pin It Button and Widgets are interaction services with the Pinterest social network, provided by Pinterest Inc. Personal Data collected: Cookies and Usage Data. Location of processing: United States – Privacy Policy: https://policy.pinterest.com/it/privacy-policy

Instagram Social Button and Widgets (Instagram, Inc.) The Instagram Social Button and Widgets are interaction services with the Instagram social network, provided by Instagram, Inc. Personal Data collected: Cookies and Usage Data. Location of processing: United States – Privacy Policy: https://help.instagram.com/196883487377501

14 - User Rights

1. The User is guaranteed respect for their rights in the context of personal data protection. In line with the GDPR, in relation to the processing of their personal data, the User has the right to ask the Data Controller:

• Access: the User can request confirmation of whether or not data concerning them is being processed, as well as further clarifications regarding the information in this policy;
• Rectification: the User can request the correction or integration of the data they have provided, if inaccurate or incomplete;
• Erasure: the User can request the deletion of their data, if it is no longer necessary for the purposes, upon withdrawal of consent or objection to processing, in case of unlawful processing, or if there is a legal obligation to delete or if they refer to subjects under fourteen years of age;
• Restriction: the User can request that their data be processed only for storage purposes, with exclusions of other processing, for the period necessary for the correction of their data, in case of unlawful processing for which they object to deletion, if they need to exercise their rights in court and the data held by the Controller may be useful to them, and finally, in case of objection to processing and while verifying the prevalence of the Controller's legitimate reasons over theirs.
• Objection: the User can object at any time to the processing of their data, unless there are legitimate reasons for the Controller to proceed with processing that prevail over theirs, for example for the exercise or defense of legal claims.
• Portability: the User can request to receive their data, or to have it transmitted to another data controller indicated by them, in a structured, commonly used and machine-readable format.
• Revocation: the User can revoke their consent to the use of cookies (Cookie Policy) at any time, as this constitutes the basis of the processing. However, the revocation of consent does not affect the lawfulness of the processing based on consent before its revocation.

1. At any time, the User may exercise the aforementioned rights by contacting www.riflessi-di-luce.com via email at: pavlenko.v.5591@gmail.com.
2. Furthermore, the User has the right to lodge a complaint with the Italian supervisory authority: "Garante per la Protezione dei Dati Personali" if they believe that their rights have been violated by www.riflessi-di-luce.com or if they do not find the response from www.riflessi-di-luce.com satisfactory.
3. Data Security Provided
4. This website processes user data in a lawful and correct manner, adopting appropriate security measures to prevent unauthorized access, disclosure, alteration, or unauthorized destruction of data. Processing is carried out using computers and/or IT enabled devices, following organizational procedures and logic strictly related to the purposes indicated.
5. In addition to the Data Controller, in some cases, access to data may be granted to categories of appointed individuals involved in the organization of the site (administrative, commercial, marketing, legal, system administrators) or external parties (such as third-party technical service providers, postal couriers, hosting providers, IT companies, communication agencies).
6. Changes to this Document
7. This document, constituting the privacy policy of this site, is published at the following address:

https://www.riflessi-di-luce.com/privacy-policy

1. It may be subject to changes or updates. If there are significant changes or updates, they will be notified to users accordingly.
2. Previous versions of the document will still be available on this page.
3. The document was last updated on 01/08/2022 to comply with regulatory provisions, particularly with Regulation (EU) 2016/679.