This Application collects some Personal Data from its Users.

Data Controller

Elena Caglio / PI 02698350903
Via Campidano 2c, Olbia (SS) – Sardinia – Italy

Email address of the Data Controller:

elena@costasmeraldaphotography.com

Types of Data Collected

Among the Personal Data collected by this Application, either independently or through third parties, there are: Cookies, Usage Data, first name, last name, email address, username, website, phone number, profession, province, state, country, postal code, gender, date of birth, city, address, company name, VAT number, fax number, various types of Data, Tax Code, business sector, User ID, number of employees, “About Me” information, Data communicated during service use, geographic location, workplace, billing address, shipping address, language, profile picture, image, unique device identifiers for advertising (e.g., Google Advertiser ID or IDFA), password, Social Security number (SSN), marital status, street number, prefix, store-related data, Twitter nickname, budget, and educational background.

Complete details on each type of collected data are provided in the dedicated sections of this privacy policy or through specific informative texts displayed before data collection.

Personal Data may be freely provided by the User or, in the case of Usage Data, collected automatically while using this Application.

Unless otherwise specified, all Data requested by this Application is mandatory. If the User refuses to provide them, it may be impossible for this Application to provide the Service. In cases where this Application states that some Data is optional, Users are free to refrain from providing such Data without affecting the availability or functionality of the Service.

Users who are uncertain about which Personal Data is mandatory are encouraged to contact the Data Controller.

The use of Cookies – or other tracking tools – by this Application or by third-party service providers used by this Application, unless otherwise stated, serves the purpose of providing the Service requested by the User, in addition to other purposes described in this document and in the Cookie Policy, if available.

Users are responsible for any third-party Personal Data obtained, published, or shared through this Application and confirm that they have the third party’s consent to provide the Data to the Owner, releasing the Data Controller from any liability towards third parties.

Methods and Place of Data Processing

Processing Methods

The Data Controller takes appropriate security measures to prevent unauthorized access, disclosure, modification, or destruction of Personal Data.

Data processing is carried out using IT and/or telematic tools, following organizational procedures and methods strictly related to the stated purposes. In addition to the Data Controller, in some cases, Data may be accessible to certain types of individuals involved in the operation of this Application (administrative, sales, marketing, legal staff, system administrators) or external parties (such as third-party technical service providers, mail carriers, hosting providers, IT companies, communication agencies) appointed as Data Processors by the Data Controller. The updated list of these parties may be requested from the Data Controller at any time.

Legal Basis of Processing

The Data Controller processes Personal Data relating to the User if one of the following conditions applies:

• The User has given consent for one or more specific purposes.
• Processing is necessary for the performance of a contract with the User and/or for any pre-contractual obligations.
• Processing is necessary for compliance with a legal obligation to which the Data Controller is subject.
• Processing is necessary for a task carried out in the public interest or in the exercise of official authority vested in the Data Controller.
• Processing is necessary for the purposes of the legitimate interests pursued by the Data Controller or a third party.

Users can always request clarification regarding the legal basis of processing, particularly whether the processing is required by law, contract, or necessary to enter into a contract.

Location of Data Processing

Data is processed at the operational offices of the Data Controller and in any other locations where the parties involved in processing are located.

Depending on the User’s location, data transfers may involve transferring the User’s Data to a country other than their own. For further information on processing locations, Users can refer to the relevant sections of this document.

Retention Time

Personal Data is processed and stored for as long as required for the purpose it was collected for.

Therefore:

• Personal Data collected for contract execution purposes will be retained until such contract is fully performed.
• Personal Data collected for the legitimate interests of the Data Controller will be retained as long as needed to fulfill such purposes. Users may obtain further details regarding the legitimate interest pursued by the Data Controller in the relevant sections of this document or by contacting the Data Controller.
• When processing is based on the User’s consent, the Data Controller may retain Personal Data for a longer period until such consent is withdrawn.

Once the retention period expires, Personal Data will be deleted. Therefore, the right to access, deletion, rectification, and data portability cannot be enforced after the expiration of the retention period.

User Rights

Users may exercise certain rights regarding their Data processed by the Data Controller.

In particular, Users have the right to:

• Withdraw their consent at any time.
• Object to the processing of their Data.
• Access their Data.
• Verify and request correction.
• Restrict the processing of their Data.
• Have their Personal Data deleted or otherwise removed.
• Receive their Data and have it transferred to another controller.
• Lodge a complaint with the appropriate data protection authority.

Additional Information

Legal Action

The User’s Personal Data may be used for legal purposes by the Data Controller in Court or in the stages leading to possible legal action arising from improper use of this Application or related Services.

System Logs and Maintenance

For operational and maintenance purposes, this Application and any third-party services may collect system logs, which record interactions and may contain Personal Data (such as the User’s IP address).

“Do Not Track” Requests

This Application does not support “Do Not Track” requests. To determine whether any third-party services it uses honor such requests, please refer to their privacy policies.

Changes to This Privacy Policy

The Data Controller reserves the right to make changes to this privacy policy at any time by notifying Users on this page and possibly within this Application, and/or, as far as technically and legally feasible, sending a notification to Users via any contact information available to the Data Controller.

It is strongly recommended to check this page often, referring to the date of the last modification listed at the bottom.

If the changes affect processing activities based on User consent, the Data Controller shall collect new consent from the User, where required.

Last updated: [Insert Date]