GDPR and your rights

The General Data Protection Regulation (EU 2016/679) applies across the European Union and, in Italy, is supplemented by Legislative Decree 196/2003. It requires that your personal data be processed lawfully, transparently and only for specific purposes. How this website processes it is described in the Privacy Policy.

• Access (art. 15): know whether I process your data and obtain a copy.
• Rectification (art. 16): correct inaccurate data or complete it.
• Erasure (art. 17): ask for your data to be deleted when it is no longer needed or the processing is unlawful.
• Restriction (art. 18): ask for processing to be temporarily blocked.
• Portability (art. 20): receive the data you gave me in a commonly used format.
• Objection (art. 21): object to processing based on legitimate interest.
• Withdrawal of consent (art. 7): where processing is based on consent, you can withdraw it at any time, without affecting the past.

Write to chiaramenozzi06@gmail.com stating which right you want to exercise and the email address you used to contact me, so I can find your data. For security I may ask you to confirm your identity.

I reply within 30 days of the request, extendable by two further months in complex cases, telling you why. Exercising your rights is free of charge.

I do not use automated decision-making or profiling on data collected through the website.

In the unlikely event of a breach posing a risk to your rights, I will notify the people concerned and the competent authority within the times required by arts. 33 and 34 of the GDPR.

If you believe your data is not being processed properly, you have the right to lodge a complaint with the Italian data protection authority (Garante per la protezione dei dati personali): garanteprivacy.it. I would rather talk it through with you first, though.