top of page


Data Controller

Andreina's mosaic

Loc. Indicator I n.7 - 52100 Arezzo Italy


Types of data collected

Among the Personal Data collected by this Application, independently or through third parties,
there are: email;
first name; surname; telephone number; address; nation; province; POSTAL CODE; various types of
Data; Cookie; Usage data.
Full details on each type of data collected are provided in the dedicated sections of
this privacy policy or through specific information texts displayed before the collection of the
data themselves.

Personal Data can be freely provided by the User or, in the case of Usage Data,
collected automatically when using this Application.
Unless otherwise specified, all the Data required by this Application are
required. If the User refuses to communicate them, it may be impossible for this
Application provide the Service. In cases where this Application indicates some Data such as
optional, Users are free to refrain from communicating such Data, without this having
no consequence on the availability of the Service or on its operation.
Users who have doubts about which data are mandatory are encouraged to
contact the owner.

The possible use of cookies - or other tracking tools - by this
Application or owners of third party services used by this Application, where not
otherwise specified, it aims to provide the Service requested by the User, in addition to the
additional purposes described in this document and in the Cookie Policy, if available.
The User assumes responsibility for the Personal Data of third parties obtained, published or shared
through this Application and guarantees that you have the right to communicate or disseminate them,
freeing the owner from any liability to third parties.

Method and place of processing the collected data

Method of treatment

The Data Controller adopts the appropriate security measures to prevent access, the
unauthorized disclosure, modification or destruction of Personal Data.
The treatment is carried out using IT and / or telematic tools, with methods
organizational and with logic strictly related to the purposes indicated. In addition to the owner, in
in some cases, other parties involved in the organization of may have access to the Data
this Application (administrative, commercial, marketing, legal,
system administrators) or external subjects (such as third party technical service providers,
postal couriers, hosting providers, IT companies, communication agencies) appointed
also, if necessary, Data Processors by the Owner. The list
updated of the Managers can always be requested from the Data Controller.

Legal basis of the treatment

The Data Controller processes Personal Data relating to the User if one of the following exists
● the User has given consent for one or more specific purposes; Note: in some
orders, the Data Controller may be authorized to process Personal Data without it
the User's consent or another of the specified legal bases of
followed, until the User opts out of this treatment. This does not
however, it is applicable if the processing of Personal Data is regulated by
European legislation on the protection of Personal Data;
● processing is necessary for the execution of a contract with the User and / or
the execution of pre-contractual measures;
● processing is necessary to fulfill a legal obligation to which the
● processing is necessary for the performance of a public interest task or for
the exercise of public powers with which the Data Controller is invested;
● the processing is necessary for the pursuit of the legitimate interest of the owner or
of third parties.
However, it is always possible to request the Data Controller to clarify the concrete legal basis of
each treatment and in particular to specify whether the treatment is based on the law,
required by a contract or necessary to conclude a contract.


The Data are processed at the Data Controller's operating offices and in any other place where the parties
involved in the treatment are localized. For more information, contact the owner.
The User's Personal Data may be transferred to a country other than the one in which
the User is located.
To obtain further information on the place of treatment, the User can refer to
section relating to details on the processing of Personal Data.
The User has the right to obtain information regarding the legal basis for the transfer of
Data outside the European Union or to an international legal organization
international public or consisting of two or more countries, such as the UN, as well as in
on the security measures taken by the Data Controller to protect the Data.
The User can check whether one of the transfers described above takes place by examining the
section of this document relating to details on the processing of Personal Data or ask
information to the Data Controller by contacting him at the ends indicated at the beginning.

Retention period

The data are processed and stored for the time required by the purposes for which they were
● Personal Data collected for purposes related to the execution of a contract between the Owner
and the User will be retained until such execution is completed
● Personal Data collected for purposes related to the legitimate interest of the Owner
will be retained until this interest is met. User can get
further information on the legitimate interest pursued by the Data Controller in the
relevant sections of this document or by contacting the Data Controller.
When the treatment is based on the User's consent, the Data Controller can keep the Data
Personal longer until said consent is revoked. In addition, the owner
may be obliged to keep Personal Data for a longer period in
compliance with a legal obligation or by order of an authority.
At the end of the retention period, Personal Data will be deleted. Therefore, allo
expire the right of access, cancellation, rectification and the right to
Data portability can no longer be exercised.

Purpose of the processing of the collected data

User data are collected to allow the owner to provide their services, as well as
for the following purposes: Contacting the User, Social Features, Interaction with social
external networks and platforms, Statistics, Displaying content from external platforms
and Payment Management.
To obtain further detailed information on the purposes of the processing and on Personal Data
concretely relevant for each purpose, the User can refer to the related
sections of this document.

Details on the processing of personal data

Personal data are collected for the following purposes and using the following services:
● Contact the User
Mailing list or newsletter (this Application)
By registering with the mailing list or the newsletter, the User's email address comes
automatically inserted in a list of contacts to which messages can be transmitted
emails containing information, including commercial and promotional information, relating to
this Application. The User's email address may also be added to this
list as a result of registering with this Application or after making a
Personal Data collected: e-mail.
Contact form (this Application)
By filling in the contact form with their Data, the User consents to their use
to respond to requests for information, quotes, or any other kind
indicated by the form header.
Personal Data collected: ZIP code; surname; e-mail; address; nation; first name; number of
phone; province.

● Social features

Invite and suggest friends (this Application)
This Application may use the Personal Data provided to allow Users to
invite their friends - for example through the address book, if access has been authorized - and
to suggest friends or connections inside.
Personal Data collected: various types of Data.

● Payment management
The payment management services allow this Application to process
payments by credit card, bank transfer or other instruments. The data used for the
payments are acquired directly by the operator of the requested payment service
without being treated in any way by this Application.
Some of these services may also allow the scheduled sending of messages
to the User, such as emails containing invoices or notifications regarding the payment.
PayPal (Paypal)
PayPal is a payment service provided by PayPal Inc., which allows the User to
make payments online.
Personal Data collected: various types of Data as specified by privacy
service policy.
Place of treatment: Consult the Paypal privacy policy - Privacy Policy.
Stripe (Stripe Inc)
Stripe is a payment service provided by Stripe Inc.
Personal Data collected: various types of Data as specified by privacy
service policy.
Place of treatment: United States - Privacy Policy. Subject adhering to the Privacy Shield.

● Interaction with social networks and external platforms
This type of service allows you to interact with social networks, or with others
external platforms, directly from the pages of this Application.
The interactions and information acquired by this Application are in any case
subject to the User's privacy settings relating to each social network.
However, this type of service may collect traffic data for pages
where the service is installed, even when Users do not use it.

It is recommended to disconnect from the respective services to make sure that the data processed
on @ {replacement missing: it.privacy_policy_page.interpolation.this_application} not
are connected to the User's profile.
LinkedIn button and social widgets (LinkedIn Corporation)
The LinkedIn button and social widgets are services for interacting with the social network
Linkedin, provided by LinkedIn Corporation.
Personal Data collected: Cookies; Usage data.
Place of treatment: United States - Privacy Policy. Subject adhering to the Privacy Shield.
Like button and social widgets of Facebook, Instagram and Whatsapp (Facebook, Inc.)
The "Like" button and the social widgets of Facebook, Instagram and Whatsapp are services
of interaction with the Facebook social network, provided by Facebook, Inc.
Personal Data collected: Cookies; Usage data.
Place of treatment: United States - Privacy Policy. Subject adhering to the Privacy Shield.
+1 button and Google+ social widgets (Google Ireland Limited)
The +1 button and Google+ social widgets are social interaction services
Google+ network, provided by Google Ireland Limited.
Personal Data collected: Cookies; Usage data.
Place of treatment: Ireland - Privacy Policy. Subject adhering to the Privacy Shield.

● Statistics
The services contained in this section allow the Data Controller to
monitor and analyze traffic data and are used to track behavior
Google Analytics (Google Ireland Limited)
Google Analytics is a web analysis service provided by Google Ireland Limited
("Google"). Google uses the Personal Data collected for the purpose of tracking and examining
the use of this Application, compiling reports and sharing them with other developed services
from Google.
Google could use Personal Data to contextualize and personalize the
ads from your advertising network.
This integration of Google Analytics makes your IP address anonymous.
Anonymization works by shortening within the borders of the member states of the Union

European or other countries adhering to the agreement on the European Economic Area
the IP address of the Users. Only in exceptional cases, the IP address will be sent to the servers of
Google and abbreviated within the United States.
Personal Data collected: Cookies; Usage data.
Place of treatment: Ireland - Privacy Policy - Opt Out. Member of the
Privacy Shield.

● Display of content from external platforms
This type of service allows you to view content hosted on external platforms
directly from the pages of this Application and to interact with them.
This type of service could still collect data on web traffic related to
pages where the service is installed, even when users are not using it.
Instagram widget (Instagram, Inc.)
Instagram is an image viewing service operated by Instagram, Inc. which
allows this Application to integrate such content within its pages.
Personal Data collected: Cookies; Usage data.
Place of treatment: United States - Privacy Policy

Further information on Personal Data

● Selling goods and services online
The Personal Data collected is used for the provision of services to the User or for the
sale of products, including payment and possible delivery. Personal Data collected for
the payment may be those relating to the credit card or to the account
current used for the transfer or other payment instruments provided. The Data of
payment collected by this Application depend on the payment system used.

User rights

Users can exercise certain rights with reference to the data processed by the owner.
In particular, the User has the right to:
● withdraw consent at any time. The User can withdraw consent to
processing of your Personal Data previously expressed.
● oppose the processing of their data. The user can object to the processing of
own data when it occurs on a legal basis other than consent. More
details on the right to object are indicated in the section below.
● access their data. The user has the right to obtain information on the data processed
by the Data Controller, on certain aspects of the processing and to receive a copy of the Data
● verify and request correction. The User can verify the correctness of the
own data and request its updating or correction.
● obtain the limitation of the treatment. When certain conditions are met,
the User can request the limitation of the processing of their Data. In this case the
The owner will not process the data for any other purpose other than their conservation.
● obtain the cancellation or removal of your Personal Data. When
certain conditions are met, the User can request the cancellation of his own
Data by the owner.
● receive your data or have it transferred to another holder. The User has the right to
receive your data in a structured format, commonly used and readable by device
automatic and, where technically feasible, to obtain the transfer without obstacles
to another holder. This provision is applicable when the Data is processed with
automated tools and the treatment is based on the User's consent, on a
contract of which the User is a party or on contractual measures connected to it.
● propose a complaint. The User can lodge a complaint with the supervisory authority of the
protection of personal data competent or to act in court.

Details on the right to object

When Personal Data are processed in the public interest, in the exercise of audiences
powers with which the Data Controller is invested or to pursue a legitimate interest of the Data Controller, the
Users have the right to object to the treatment for reasons related to their situation
Users are reminded that, if their data were processed for marketing purposes
directly, they can oppose the treatment without giving any reason. To find out if the
Holder of data for direct marketing purposes Users can refer to
respective sections of this document.

How to exercise your rights

To exercise the User's rights, Users can direct a request to the ends
contact details indicated in this document. Requests are filed in title
free of charge and processed by the Owner as soon as possible, in any case within a month.

Cookie Policy

This application uses cookies. To learn more and to view
of the detailed information, the User can consult the Cookie Policy.

Learn more about the treatment

Defense in court

The User's Personal Data may be used by the Owner in court or in the
preparatory stages for its possible establishment to defend against abuse in the use of this Application or related Services by the User.
The User declares to be aware that the Owner may be obliged to disclose the
Data by order of public authorities.

Specific information

At the request of the User, in addition to the information contained in this privacy policy,
this Application could provide the User with additional and contextual information
concerning specific Services, or the collection and processing of Personal Data.

System log and maintenance
For needs related to operation and maintenance, this Application and
any third party services used by it could collect system logs, that is files that
record the interactions and which may also contain Personal Data, such as the IP address

Information not contained in this policy

Further information in relation to the processing of Personal Data may be requested
at any time to the Data Controller using the contact details.

Reply to “Do Not Track” requests
This Application does not support "Do Not Track" requests.
To find out if any third-party services used support them, the User is invited to
consult the respective privacy policies.

Changes to this privacy policy

The Data Controller reserves the right to make changes to this privacy policy
policy at any time by informing Users on this page and, if
possible, on this Application as well as, if technically and legally feasible,
by sending a notification to Users through one of the contact details held by the Owner. Therefore, please consult this page regularly, referring to the date of the last modification indicated at the bottom.
If the changes affect treatments whose legal basis is consent, the Owner
will collect the User's consent again, if necessary.

Definitions and legal references Personal Data (or Data) Constitutes personal data any information which, directly or indirectly, also in connection with any other information, including a personal identification number, makes a natural person identified or identifiable.

Usage data

These are the information collected automatically through this Application (also from
third party applications integrated into this Application), including: IP addresses or names a
domain of the computers used by the User who connects with this Application, the
addresses in URI (Uniform Resource Identifier) ​​notation, the time of the request, the method
used in forwarding the request to the server, the size of the file obtained in response, the
numeric code indicating the status of the response from the server (successful, error, etc.) the country
of origin, the characteristics of the browser and operating system used by the visitor,
the various temporal connotations of the visit (for example the time spent on each one

page) and details of the itinerary followed within the Application, with particular details
reference to the sequence of pages consulted, to the parameters relating to the operating system and
to the User's computer environment.


The individual who uses this Application who, unless otherwise specified,
coincides with the interested party.

The natural person to whom the Personal Data refers.

Data Processor (or Responsible)
The natural person, legal entity, public administration and any other entity that processes data
personal data on behalf of the Data Controller, as set out in this privacy policy.

Data Controller (or Owner)

The natural or legal person, public authority, service or other body which,
individually or together with others, it determines the purposes and means of data processing
personal and the tools adopted, including the security measures relating to
operation and use of this Application. The Data Controller, except
unless otherwise specified, it is the owner of this Application.

This Application

The hardware or software tool through which Personal Data is collected and processed
of Users.


The Service provided by this Application as defined in the relative terms (if any)
on this site / application.

European Union (or EU)

Unless otherwise specified, any reference to the European Union contained in this
document is intended to be extended to all the current member states of the European Union and the
European Economic Area.


Small portion of data stored within the User's device.

Legal references

This privacy statement has been prepared on the basis of multiple legislative systems,
including articles 13 and 14 of Regulation (EU) 2016/679.
Unless otherwise specified, this privacy statement concerns exclusively
this Application.

bottom of page