Privacy Policy on the Processing of Personal Data

European Regulation No. 2016/679 (GDPR) – Legislative Decree No. 196/2003 (Privacy Code)

The user’s personal data is processed by Lensky di Elena Casartelli, with registered office in Milan, Via Edmondo de Amicis 57 – 20123 Milan – VAT No. 03262060969 | Tax Code CSRLCT75P48F205H, in compliance with the principles for the protection of personal data established by Regulation (EU) 2016/679 (General Data Protection Regulation) and Article 13 of Legislative Decree No. 196/2003 (Privacy Code).

The processing of personal data will be carried out in compliance with the aforementioned regulations, in particular according to the principles of lawfulness, fairness, transparency, and protection of confidentiality and rights, with particular reference to integrity, confidentiality, identity, and the right to personal data protection.

The Data Controller adopts appropriate security measures to prevent unauthorized access, disclosure, alteration, or destruction of personal data.

METHODS OF DATA PROCESSING

The data will be processed using the following means:

  • Paper-based (registration forms, order forms, etc.)
  • Electronic (management software, accounting software, etc.)
  • Telematic systems

The processing will be carried out in automated and/or manual form, using methods and tools that comply with the security measures referred to in Article 32 of GDPR 2016/679 and in the Privacy Code (Articles 33–36 of the Code), by specifically authorized persons, in accordance with Article 29 of GDPR 2016/679.

Security measures will be employed to ensure the confidentiality of the data subject to whom such data refers and to prevent unauthorized access by third parties and/or unauthorized personnel.

PURPOSES

The personal data you provide will be used for the following purposes:

  • To provide the requested services or services available on the Website, fulfill any contractual obligations, and allow for effective management of the relationship with the other party in order to respond to requests for information, assistance, suggestions, and/or needs you may indicate.
  • For administrative and accounting purposes related to service contracts, including personal data and contact details.

Unless explicitly denied by the data subject, the user’s data will also be processed for the following purposes:

  • Sending offers and commercial communications via email.

LEGAL BASIS FOR PROCESSING

The provision of data is mandatory for all that is required by legal and contractual obligations; therefore, refusal to provide it in whole or in part may result in the inability to provide the requested services.

The company processes optional user data based on consent, i.e., through the explicit approval of this privacy policy and in relation to the methods and purposes described below.

CATEGORIES OF RECIPIENTS 

The data collected will not be disclosed; personal data, in relation to the purposes described above, may be communicated to the following categories of recipients:

  • Public entities to whom the data must be communicated by law (social security and welfare institutions, tax offices, etc.);
  • Public or private entities if communication is necessary or functional to carrying out our activities;
  • Our collaborators, consultants, and suppliers, to the extent necessary for them to perform their professional duties on behalf of the company.

RETENTION

In compliance with the principles of lawfulness, purpose limitation, and data minimization (under Article 5 of GDPR 2016/679), the retention period for your personal data is set for no longer than is necessary to achieve the purposes for which it was collected and processed, while also complying with the time limits prescribed by law (usually 10 years).

At the end of the retention period, the Personal Data will be deleted. Therefore, once this term has expired, the rights of access, deletion, rectification, and data portability can no longer be exercised.

RIGHTS OF THE DATA SUBJECT

Pursuant to Article 7 of the Privacy Code and Articles 15–22 of GDPR 2016/679, the data subject may, according to the procedures and within the limits provided by current legislation, exercise the following rights:

  • Request confirmation of the existence of personal data concerning them (right of access);
  • Know its origin;
  • Receive intelligible communication of it;
  • Obtain information about the logic, methods, and purposes of the processing;
  • Request its updating, rectification, integration, deletion, transformation into anonymous form, or blocking of data processed in violation of the law, including data no longer necessary for the purposes for which it was collected;
  • Obtain restriction of processing;
  • In cases of processing based on consent, receive their data provided to the Data Controller in a structured, machine-readable, and commonly used electronic format;
  • The right to lodge a complaint with the supervisory authority.

Requests and any further information regarding the processing of Personal Data can be made at any time to the Data Controller using the contact details provided below.

DATA CONTROLLER

The Data Controller of your personal data is Lensky di Elena Casartelli, based in Milan, Via Edmondo de Amicis 57 – VAT No. 03262060969 | Tax Code CSRLCT75P48F205H. 

The company has appointed a Data Protection Officer (DPO). The DPO’s details can be consulted at the registered office in Via Edmondo de Amicis 57, Milan. The Data Protection Officer can be contacted at: studio@lensky.it 

Cookie Information

What are Cookies

A “cookie” is a text file saved on the user’s computer when they access a website, in order to provide information each time the user returns to the same site. It serves as a reminder of the visited webpage. With a cookie, the web server sends information to the user’s browser (Internet Explorer, Mozilla Firefox, Google Chrome, etc.), which is stored on the user’s computer and will be read and updated whenever the user returns to the site. This way, the website can automatically adapt to the user. 

While browsing, the user may also receive cookies from different websites (“third-party cookies”), set directly by the operators of those websites and used for purposes and according to methods defined by them. 

Based on their duration, cookies can be: Session cookies, temporary and automatically deleted from the device at the end of the browsing session (when closing the browser). Persistent cookies: remain stored on the device until their expiration or deletion by the user. 

Technical cookies

These are used for IT authentication, session monitoring, and storing specific information about users accessing a web page. Technical cookies are often useful for navigating a website and using all its functionalities. Their use does not require the user’s consent. 

This category also includes analytics cookies, which collect information about how users use a website to improve its functionality.

Profiling cookies

These monitor and profile users during browsing, studying their movements and web consultation or consumption habits, in order to send targeted, personalized advertising. Their use requires the user’s prior, informed consent under Article 7 of Regulation (EU) 2016/679. 

Third-party cookies

These may be present in a webpage through external elements such as advertising banners, images, videos, maps, or links to other domains. They are set directly by other site operators or servers and often serve profiling purposes. Their use requires the user’s prior, informed consent. 

Types of Cookies Used by Our Site

The main cookies installed by Lensky di Elena Casartelli are technical, used to constantly improve the Service, for authentication, and for statistical purposes such as counting visits to the site. Their use is strictly aimed at facilitating server functions during navigation. 

To improve the website and understand which parts or elements are most appreciated by users, third-party Google Analytics cookies are used as an anonymous and aggregated analysis tool. These cookies are not tools under our ownership; for more information, please refer to the information provided by Google:

Google Analytics (anonymous, aggregated analysis tool)

Some web pages may incorporate YouTube video content. By visiting a page containing a video, or by clicking to view the video, cookies from YouTube may be set. These cookies are not tools under our ownership. For more information, please visit Google’s information page.

The website may use Facebook ADS programs and Facebook Retargeting technology managed by Facebook Inc., as well as Google ADS and Google Remarketing technology managed by Google Inc. The conversion tracking function of Facebook ADS and Google ADS also uses cookies to help us track requests, sales, and other conversions.

Managing Cookies

Users can manage cookie preferences through their browser settings, including deleting cookies, blocking them, or restricting them to specific sites. 

Therefore, it is possible to refuse the use of cookies by following the disabling procedure provided by your browser. Below are the methods suggested by the main browsers:

For information on stored cookies and how to disable them individually, visit:  http://www.youronlinechoices.com/it/le-tue-scelte

This privacy policy, including the information on the use of cookies, may be subject to changes over time – also in connection with the possible entry into force of new sector regulations, the update or provision of new services, or technological innovations – and users/visitors are therefore invited to periodically consult this page.