This Privacy Policy describes how codecarvings.com (hereinafter referred to as "we", "us", or "our") collects, uses, and protects your personal data when you visit and use our website. We are committed to protecting your privacy and ensuring transparency in accordance with the EU General Data Protection Regulation (GDPR) and applicable Italian privacy laws.
Data Controller
The Data Controller for this website is Sergio Turolla, who can be contacted at privacy@codecarvings.com.
Data We Collect
We collect and process the following types of personal data:
Technical Data
When you visit our website, we automatically collect certain technical information including IP address, browser type and version, operating system, referring URLs, pages visited, and timestamps. This data is collected through cookies and similar technologies as described in our Cookie Declaration.
Voluntarily Provided Data
If you decide to subscribe to our newsletter, or if you contact us via email or other communication channels, we collect the personal data you choose to provide, such as your name, email address, and the content of your messages.
User Preferences
We store your preferences regarding cookies, theme settings, and language selection to enhance your user experience.
Legal Basis for Processing
We process your personal data based on the following legal grounds:
Consent
For non-essential cookies and analytics, we process your data based on your explicit consent, which you can withdraw at any time.
Legitimate Interest
We have a legitimate interest in operating and improving our website, ensuring its security, and understanding how users interact with our content.
Contractual Necessity
Processing is necessary for providing the services you request, such as responding to your inquiries.
Purpose of Data Processing
We use your personal data for the following purposes:
- Operating and maintaining the website
- Improving user experience and website functionality
- Analyzing website usage and performance through anonymous analytics
- Responding to your inquiries and support requests
- Ensuring website security and preventing fraud
- Complying with legal obligations
Data Sharing and Third Parties
We are committed to not selling your personal data. However, we may share data with the following third parties:
Vercel (Hosting and Analytics)
Our website is hosted on Vercel, and we use Vercel Web Analytics to collect anonymous usage statistics. Vercel processes data in accordance with their privacy policy available at https://vercel.com/docs/analytics/privacy-policy.
Legal Requirements
We may disclose your data if required by law, court order, or to protect our rights, property, or safety.
Data Retention
We retain your personal data only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. Technical logs are typically retained for up to 12 months. User preferences stored in cookies are retained according to the durations specified in our Cookie Declaration.
Your Rights Under GDPR
As a data subject, you have the following rights regarding your personal data. You can exercise these rights by contacting us:
Right of Access
You have the right to obtain confirmation of whether we process your data and to access that data.
Right to Rectification
You can request correction of inaccurate or incomplete personal data.
Right to Erasure
You have the right to request deletion of your personal data under certain circumstances (the "right to be forgotten").
Right to Restriction
You can request restriction of processing of your personal data in certain situations.
Right to Data Portability
You have the right to receive your personal data in a structured, commonly used format.
Right to Object
You can object to processing of your personal data based on legitimate interests or for direct marketing purposes.
Right to Withdraw Consent
Where processing is based on consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing before withdrawal.
Right to Lodge a Complaint
You have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la Protezione dei Dati Personali) at https://www.garanteprivacy.it.
Data Security
We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. Our website uses HTTPS encryption, and we follow industry best practices for data security. However, no method of transmission over the internet is 100% secure.
International Data Transfers
Your data may be transferred to and processed in countries outside the European Economic Area (EEA), particularly the United States where our hosting provider operates. We ensure that such transfers comply with GDPR requirements through appropriate safeguards, such as Standard Contractual Clauses or adequacy decisions.
Children's Privacy
Our website is not directed to children under 16 years of age. We do not knowingly collect personal data from children. If you believe we have inadvertently collected data from a child, please contact us immediately.
Cookies and Tracking Technologies
We use cookies and similar technologies on our website. For detailed information about the cookies we use, their purposes, and how to manage your preferences, please refer to our Cookie Declaration.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The date of the last update is indicated at the bottom of this page. We encourage you to review this policy periodically.
Contact Us
If you have any questions about this Privacy Policy, wish to exercise your rights, or have concerns about how we handle your personal data, please contact us at privacy@codecarvings.com.