Privacy Policy of ateliermanitu.it

This Application collects certain Personal Data from its Users.

Data Controller

Atelier Manitu
Via Paggiola, 13
ZIP Code 35013 Cittadella, Padua (Italy)
Email address of the Data Controller: info@ateliermanitu.it

Types of Data collected

Among the Personal Data collected by this Application, either independently or through third parties, are: email address; Usage Data; Tracking Tools; number of Users; session statistics; device information.

Complete details on each type of Personal Data collected are provided in the dedicated sections of this privacy policy or through specific information notices displayed prior to Data collection.
Personal Data may be freely provided by the User or, in the case of Usage Data, automatically collected during the use of this Application.

Unless otherwise specified, all Data requested by this Application are mandatory. If the User refuses to provide them, it may be impossible for this Application to provide the Service.
Where this Application indicates certain Data as optional, Users are free to refrain from communicating such Data, without this having any effect on the availability or operation of the Service.

Users who have doubts about which Data are mandatory are encouraged to contact the Data Controller.

Any use of Cookies or other tracking tools by this Application or by the owners of third-party services used by this Application is intended to provide the Service requested by the User, in addition to the other purposes described in this document and in the Cookie Policy.

The User assumes responsibility for the Personal Data of third parties obtained, published, or shared through this Application.

Methods and place of processing of the collected Data

Methods of processing

The Data Controller adopts appropriate security measures to prevent unauthorized access, disclosure, modification, or destruction of Personal Data.

Processing is carried out using IT and/or telematic tools, with organizational methods and logic strictly related to the stated purposes. In addition to the Data Controller, in some cases other parties involved in the organization of this Application (administrative, commercial, marketing, legal staff, system administrators) or external parties (such as third-party technical service providers, postal couriers, hosting providers, IT companies, communication agencies) may have access to the Data and may be appointed, if necessary, as Data Processors by the Data Controller.

The updated list of Data Processors may always be requested from the Data Controller.

Place

The Data are processed at the Data Controller's operating offices and in any other place where the parties involved in the processing are located. For further information, please contact the Data Controller.

The User's Personal Data may be transferred to a country other than the one in which the User is located. To obtain further information on the place of processing, the User may refer to the section relating to details on the processing of Personal Data.

Retention period

Unless otherwise stated in this document, Personal Data are processed and stored for as long as required by the purpose for which they were collected and may be retained for a longer period due to legal obligations or based on the Users' consent.

Purposes of the Processing of the collected Data

User Data are collected to enable the Data Controller to provide the Service, comply with legal obligations, respond to requests or enforcement actions, protect its rights and interests (or those of Users or third parties), detect any fraudulent or malicious activity, as well as for the following purposes: contacting the User, access to accounts on third-party services, statistics, displaying content from external platforms, tag management, and platform and hosting services.

For detailed information on the purposes of processing and on the Personal Data processed for each purpose, the User may refer to the section "Details on the processing of Personal Data".

Facebook permissions requested by this Application

This Application may request certain Facebook permissions that allow it to perform actions with the User's Facebook account and to collect information, including Personal Data, from it. This service allows this Application to connect with the User's account on the Facebook social network, provided by Facebook Inc.

For more information about the permissions listed below, please refer to Facebook's permissions documentation and Facebook's privacy policy.

The requested permissions are as follows:

Basic information

The basic information of the User registered on Facebook, which normally includes the following Data: ID, name, image, gender, and localization language, and in some cases Facebook "Friends". If the User has made additional Data publicly available, those Data will also be available.

Usage Data

Email

Provides access to the User's primary email address.

Device information

Tracking Tools

Tracking Tools mean any technology—such as Cookies, unique identifiers, web beacons, embedded scripts, e-tags, and fingerprinting—that allows Users to be tracked, for example by collecting or storing information on the User's device.

Details on the processing of Personal Data

Personal Data are collected for the following purposes and using the following services:

Access to accounts on third-party services

These services allow this Application to access Data from your accounts on third-party services and to perform actions with them. These services are not activated automatically but require the User's explicit authorization.

Facebook account access (Meta Platforms, Inc.)

This service allows this Application to connect with the User's Facebook account, provided by Meta Platforms, Inc.
Permissions requested: Usage Data; Email; device information; Tracking Tools.
Place of processing: United States – Privacy Policy – Opt out.

Contacting the User

Contact form

By filling in the contact form with their Data, the User consents to their use for responding to requests for information, quotations, or any other type of request indicated by the form header.
Personal Data processed: Usage Data; email.

Tag management

This type of service allows the Data Controller to centrally manage the tags or scripts required by this Application. As a result, User Data may be processed by these services, with the possibility that they may be stored.

Google Tag Manager (Google LLC)

Google Tag Manager is a tag management service provided by Google LLC. To learn about Google's use of Data, please consult their partner policy and their Business Data page.
Personal Data processed: Usage Data; Tracking Tools.
Place of processing: United States – Privacy Policy.

Platform and hosting services

These services are intended to host and operate key components of this Application, making it possible to deliver the Application from a single platform. These platforms provide the Data Controller with a wide range of tools, such as analytics tools, tools for managing user registration, comments and databases, e-commerce, payment processing, etc. The use of such tools involves the collection and processing of Personal Data.

Some of these services operate through servers located in different geographical locations, making it difficult to determine the exact location where Personal Data are stored.

Webnode (Webnode AG)

Webnode is a platform provided by Webnode AG that allows the Data Controller to develop, operate, and host this Application. Webnode is an extremely versatile and customizable tool that allows hosting various types of websites, from simple blogs to complex e-commerce platforms.
Personal Data processed: Usage Data; device information; Tracking Tools.
Place of processing: Switzerland – Privacy Policy.

Statistics

The services contained in this section allow the Data Controller to monitor and analyze traffic data and are used to track User behavior.

Google Analytics 4 (Google LLC)

Google Analytics is a statistics service provided by Google LLC ("Google"). Google uses the collected Personal Data to track and examine the use of this Application, compile reports, and share them with other services developed by Google. Google may use Personal Data to contextualize and personalize ads in its advertising network.

In Google Analytics 4, IP addresses are used at the time of collection and then deleted before data are recorded in any data center or server. For more information, please consult Google's official documentation.

To learn about Google's use of Data, consult their partner policy and their Business Data page.
Personal Data processed: Usage Data; number of Users; session statistics; Tracking Tools.
Place of processing: United States – Privacy Policy – Opt out.

Display of content from external platforms

This type of service allows content hosted on external platforms to be displayed directly on the pages of this Application and to interact with it. These services are often referred to as widgets, i.e., small elements embedded in a website or application that provide specific information or perform a particular function and often allow interaction with the user.

This type of service may still collect web traffic data related to the pages where the service is installed, even when Users do not use it.

Google Fonts (Google LLC)

Google Fonts is a typeface visualization service provided by Google LLC that allows this Application to integrate such content into its pages.
Personal Data processed: Usage Data; Tracking Tools.
Place of processing: United States – Privacy Policy.

Cookie Policy

This Application uses Tracking Tools. To learn more, Users may consult the Cookie Policy.

Additional information for Users

Legal basis of processing

The Data Controller processes Personal Data relating to the User if one of the following conditions applies:

• the User has given consent for one or more specific purposes;

• processing is necessary for the performance of a contract with the User and/or for the implementation of pre-contractual measures;

• processing is necessary to comply with a legal obligation to which the Data Controller is subject;

• processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the Data Controller;

• processing is necessary for the purposes of the legitimate interests pursued by the Data Controller or by a third party.

It is always possible to ask the Data Controller to clarify the specific legal basis for each processing activity and, in particular, whether the processing is based on law, provided for by a contract, or necessary to enter into a contract.

Additional information on retention time

Unless otherwise stated in this document, Personal Data are processed and stored for as long as required by the purpose for which they were collected and may be retained longer due to legal obligations or based on the Users' consent.

Therefore:

• Personal Data collected for purposes related to the performance of a contract between the Data Controller and the User will be retained until such contract has been fully performed.

• Personal Data collected for purposes related to the legitimate interest of the Data Controller will be retained until such interest is satisfied.

When processing is based on the User's consent, the Data Controller may retain Personal Data for longer until such consent is withdrawn. In addition, the Data Controller may be required to retain Personal Data for a longer period to comply with a legal obligation or by order of an authority.

At the end of the retention period, Personal Data will be deleted. Therefore, once this period has expired, the rights of access, deletion, rectification, and data portability can no longer be exercised.

User rights under the General Data Protection Regulation (GDPR)

Users may exercise certain rights with reference to the Data processed by the Data Controller.

In particular, to the extent permitted by law, the User has the right to:

• withdraw consent at any time;

• object to the processing of their Data;

• access their Data;

• verify and request rectification;

• obtain restriction of processing;

• obtain erasure or removal of their Personal Data;

• receive their Data or have them transferred to another controller;

• lodge a complaint with the competent data protection authority or take legal action.

Users also have the right to obtain information about the legal basis for the transfer of Data abroad, including to any international organization, and about the security measures adopted by the Data Controller to protect their Data.

Details on the right to object

Where Personal Data are processed in the public interest, in the exercise of official authority, or for the pursuit of a legitimate interest of the Data Controller, Users have the right to object to processing on grounds relating to their particular situation.

Users are informed that, where their Data are processed for direct marketing purposes, they may object to such processing at any time, free of charge and without providing any justification. If Users object to processing for direct marketing purposes, the Personal Data will no longer be processed for such purposes.

How to exercise rights

Any requests to exercise User rights may be addressed to the Data Controller using the contact details provided in this document. Requests are free of charge, and the Data Controller will respond as soon as possible and in any case within one month, providing all information required by law.

Additional information on processing

Legal defense

The User's Personal Data may be used by the Data Controller in legal proceedings or in the preparatory phases thereof to defend against abuse in the use of this Application or related Services by the User. The User declares to be aware that the Data Controller may be required to disclose Data by order of public authorities.

Specific notices

Upon User request, this Application may provide additional and contextual notices regarding specific Services or the collection and processing of Personal Data.

System logs and maintenance

For operation and maintenance purposes, this Application and any third-party services it uses may collect system logs, i.e., files that record interactions and may also contain Personal Data, such as the User's IP address.

Information not contained in this policy

Further information regarding the processing of Personal Data may be requested at any time from the Data Controller using the contact details provided.

Changes to this privacy policy

The Data Controller reserves the right to make changes to this privacy policy at any time by notifying Users on this page and, if possible, within this Application and, where technically and legally feasible, by sending a notice to Users via available contact details.

Users are therefore encouraged to check this page frequently, referring to the date of the last modification indicated at the bottom. If changes affect processing activities whose legal basis is consent, the Data Controller will collect the User's consent again, if required.

Definitions and legal references

Personal Data (or Data)
Any information that, directly or indirectly, including in connection with any other information, identifies or makes identifiable a natural person.

Usage Data
Information collected automatically through this Application (also from third-party applications integrated into this Application), including IP addresses or domain names of the computers used by the User, URI addresses, request time, request method, size of the response file, numerical code indicating server response status, country of origin, browser and operating system characteristics, time-related details of visits, and details of the navigation path within the Application.

User
The individual using this Application who, unless otherwise specified, coincides with the Data Subject.

Data Subject
The natural person to whom the Personal Data refer.

Data Processor
The natural or legal person, public authority, agency, or other body that processes Personal Data on behalf of the Data Controller.

Data Controller
The natural or legal person, public authority, service, or other body that determines the purposes and means of the processing of Personal Data and the measures adopted, including security measures.

This Application
The hardware or software tool by which Users' Personal Data are collected and processed.

Service
The service provided by this Application as defined in the relevant terms (if any) on this website/application.

European Union (EU)
Unless otherwise specified, all references to the European Union include all current Member States of the European Union and the European Economic Area.

Cookies
Cookies are Tracking Tools consisting of small portions of data stored in the User's browser.

Tracking Tool
Any technology—such as Cookies, unique identifiers, web beacons, embedded scripts, e-tags, and fingerprinting—that enables tracking of Users.

Legal references
Unless otherwise specified, this privacy notice refers exclusively to this Application.