Privacy Policy

1. Data Controller

The controller of the processing of personal data is:

• Centro Polifunzionale In Itinere di Cinzia Farfante (sole proprietorship)
• Registered office: Via Nazionale dei Giovi 70/B, 20811 Cesano Maderno (MB), Italy
• VAT No.: 14463230962
• Tax Code: FRFCNZ72R64C351Q
• Phone: 347.7962992 / 320.6753286
• Certified email (PEC): cinziafarfante@pec.it
• Email: initinere.cesano@gmail.com

2. Data collected through the site

Through the site we collect two types of data:

• Data provided voluntarily: the data the user enters in the contact and booking forms, namely name, email address, phone number, service of interest, preferred professional, preferred days and times, subject of the message and any notes.
• Navigation data: information collected automatically for the technical operation of the site, such as the IP address, browser type and referring page (referrer).

3. Purposes of processing

Personal data is processed for the following purposes:

• To respond to requests for information and to bookings submitted through the site's forms.
• To contact the user to arrange introductory consultations and the provision of services.
• To comply with obligations laid down by law, regulations and applicable legislation.

4. Legal basis

The processing of data is based on the following legal bases:

• Consent of the data subject (Art. 6(1)(a) GDPR) for submitting requests through the site's forms.
• Legitimate interest of the controller (Art. 6(1)(f) GDPR) for the processing of navigation data essential to the operation and security of the site.

5. Methods of processing

Data is processed manually and by electronic means, for the time strictly necessary to achieve the stated purposes.

The controller adopts technical and organisational security measures appropriate to prevent data loss, unlawful or incorrect use and unauthorised access.

6. Third-party services used

To provide certain functionalities, the site relies on third-party providers that may process data on behalf of the controller:

• Resend (Resend, Inc., United States, with infrastructure also in the eu-west-1 region): used to send the transactional emails generated by the forms. Data passes through Resend but is not retained beyond the time technically necessary for delivery.
• Google Maps (Google LLC): used to embed the map on the Contact page.

Any transfers of data outside the European Union take place in compliance with the Standard Contractual Clauses approved by the European Commission.

7. Data retention

Data is retained for the time strictly necessary for the purposes of processing:

• Data provided through the forms: retained for the time needed to handle the request and in any case no longer than 24 months.
• Technical navigation logs: retained for a maximum of 6 months.

8. Rights of the data subject

As a data subject, the user may exercise at any time the rights provided for by Articles 15-22 of the GDPR:

• Access to their personal data.
• Rectification of inaccurate or incomplete data.
• Erasure of data (right to be forgotten).
• Restriction of processing.
• Data portability.
• Objection to processing.
• Withdrawal of the consent given, at any time and without prejudice to the lawfulness of processing carried out before withdrawal.

To exercise these rights, you can write to initinere.cesano@gmail.com or via certified email (PEC) to cinziafarfante@pec.it.

9. Complaint to the Supervisory Authority

A data subject who believes that the processing of their data infringes the GDPR has the right to lodge a complaint with the Italian Data Protection Authority (Garante per la Protezione dei Dati Personali, https://www.garanteprivacy.it).

10. Changes to this notice

The controller reserves the right to modify or update this notice, including as a result of regulatory changes. Changes will be published on this page and take effect from the moment of publication.