"Gira sto telefono" 😉
Privacy policy

Privacy policy

Index

1. General Information on Privacy
2. Definition of Personal Data and Their Processing
3. Identification of the Data Controller, Data Processor, and Authorized Persons
4. List of Main Data Processing Activities
5. User Rights According to EU Regulation 2016/679

Privacy Policy for the Website tomaskukula.com

1.Informazioni generali sulla Privacy

Legislative Decree 196/2003 and EU Regulation 2016/679 establish the rules to protect and safeguard natural persons with regard to the processing of their personal data. This privacy notice has been drafted in accordance with the new legislative framework.
The entire legal basis for the processing of personal data is founded on the Treaty on the Functioning of the European Union, and in particular, on Article 16 of said treaty.

This privacy notice may be subject to changes following the introduction of new regulations; therefore, you are invited to periodically visit this section to stay updated.

The Privacy Policy you are reading applies exclusively to the website www.tomaskukula.com. The sole proprietorship is not responsible for the methods of personal data processing carried out by third-party websites that may be accessible through the Cookies section or through any other external links present on this website.

According to the law, the processing of personal data must be based on principles of fairness, lawfulness, transparency, protection of the user’s privacy, and safeguarding of their rights.
Indeed, KUKULA TOMAS is committed to upholding these principles and, for this reason, informs you from the outset that—except for processing operations for which the law requires your explicit consent—by browsing this website, uploading, or providing personal data, you accept and agree to be bound by the terms and conditions of this privacy notice.

If you are under the age of 14, your consent is valid only if given or authorized by the holder of parental responsibility over you.

In any case, we would like to provide you with some information about the concept of personal data processing, the individuals who manage such data, the main processing activities we carry out, as well as your rights as a user.

2. Definition of Personal Data and Their Processing

Personal data refers to any information that identifies or makes an individual natural person identifiable. This includes information that directly identifies a person (such as name, surname, or tax identification number) or indirectly (such as profiling cookies).
Processing of personal data refers to any operation or set of operations performed on personal data or sets of personal data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination, or otherwise making available, alignment or combination, restriction, erasure, or destruction.

3. Identification of the Data Controller, Data Processor, and Authorized Persons

The Data Processor is the natural or legal person, public authority, agency, or other body that processes personal data on behalf of the Data Controller.
With regard to the personal data you provide while browsing this website, the sole proprietorship has not appointed any Data Processor or Authorized Person. Therefore, your data will be processed exclusively by the Data Controller.

4. List of Main Personal Data Processing Activities Carried Out While Browsing This Website

1. The data collected through browsing will not be disclosed or transferred to non-EU countries (the hosting service used by the Data Controller is located in Italy). However, in order to properly deliver the requested service, some data may be shared with external parties tasked with carrying out specific duties on behalf of our company (by way of example only: legal, IT, or management consultants).
In any case, the Data Controller is committed to protecting the security of all your personal data by adopting the necessary digital and physical security measures.
It should be noted, however, that no security system can guarantee absolute protection. Therefore, except in cases of liability due to negligence on the part of the Data Controller, the sole proprietorship KUKULA TOMAS cannot be held responsible for unauthorized access to systems carried out by third parties.

3. On this website, the only forms capable of collecting user data for processing purposes are those that include statements for the collection of consent (for example, below the form, a statement such as the following will appear:
“I declare that I am over sixteen years old and—if under sixteen—that I have been authorized by the holder of parental responsibility, and that I have read the terms of the privacy policy and give my consent to the processing of my personal data.”).
In fact, due to the Data Controller’s teaching activities, some forms serve merely as sample layouts or demos.
By filling out the form titled “Contact Me”, the user provides their personal data (such as name, surname, email, phone number, etc.).

3.1 The submission of such data is not mandatory; however, failure to complete the form prevents the company from responding to user requests, such as a quote request.
The legal basis for the processing lies in the execution of pre-contractual measures; nevertheless, the sole proprietorship requests the user’s explicit consent.
Processing is carried out using digital and/or paper-based systems, and its duration depends on the outcome of the negotiation.
If, following the submission of a quote, the user enters into a contract with the sole proprietorship for the provision of services, the data retention period will be ten years from the effective conclusion of the contractual relationship, for fiscal/accounting purposes and to comply with the legal obligations to which the sole proprietorship is subject.
On the other hand, if the user does not accept the quote within the deadline set by the Data Controller and communicated to the user, then upon the expiration of that deadline, the user’s data will be immediately deleted by the sole proprietorship.
Information requests are permitted only from users who are at least sixteen years old, or—if under sixteen—have been previously authorized by their legal guardians.

3.2 The data provided by the user through the form titled “Contact Me” may also be processed for advertising purposes.
The submission of such data is not mandatory; however, failure to complete the form will prevent the sole proprietorship from sending advertising materials.
The legal basis for this processing is the user’s consent.
Processing is carried out using digital systems, and its duration depends on the user’s will—consent may be withdrawn at any time by contacting the email address mentioned above.
The advertising service is available only to users who are at least sixteen years old or—if under sixteen—have been previously authorized by their legal guardians.

5. Except for the cookie policy (to which we refer for further details), this website does not include any automated decision-making processes for commercial profiling purposes.
Commercial profiling is a targeted marketing technique that involves collecting and processing user data to understand their choices and behaviors, with the aim of grouping interests into “profiles,” or homogeneous groups based on increasingly specific behaviors or characteristics.

5. User Rights According to EU Regulation 2016/679

Article 13, paragraph 2 of EU Regulation 2016/679 outlines the rights of the user.
The sole proprietorship KUKULA TOMAS therefore wishes to inform you of the existence of the following rights:

– the data subject’s right to request from the Data Controller access to personal data (Art. 15 GDPR), rectification (Art. 16 GDPR), erasure (Art. 17 GDPR), restriction of processing concerning them (Art. 18 GDPR), or to object to the processing (Art. 21 GDPR), as well as the right to data portability (Art. 20 GDPR);

Requests may be addressed to the Data Controller without any formal requirements or, alternatively, by using the form provided by the competent Data Protection Authority, available on the official website of the European Data Protection Board (EDPB):

– where the processing is based on the user’s explicit consent to the use of personal data, or on explicit consent to the use of genetic, biometric, or health-related data, or data revealing religious or philosophical beliefs, trade union membership, racial or ethnic origin, or political opinions – the user has the right to withdraw consent at any time, without affecting the lawfulness of the processing based on consent before its withdrawal;

– the right to lodge a complaint with the Data Protection Authority, which is the supervisory authority responsible for monitoring data processing in the relevant Member State.

For a more in-depth examination of your rights, please refer to Articles 15 and following of Regulation (EU) 2016/679.

Icon representing the privacy policy with a green padlock