The present information describes the methods of processing personal data of users who visit the website: www.mariacaterinacristallo.com The information is provided in accordance with EU Regulation 2016/679, "GDPR", and Italian legislation applicable to the protection of personal data. The present website has informative and promotional purposes of the professional services offered by Maria Caterina Cristallo and does not provide for the online sale of products or services. 1. Data Controller The Data Controller of personal data is: Maria Caterina Cristallo Email: mcaterina.interpreter@gmail.com For any request related to the processing of personal data or the exercise of rights provided by the GDPR, it is possible to contact the Data Controller at the email address indicated above. 2. Categories of processed data Through the website, the following categories of personal data can be processed. Navigation data The computer systems and software procedures used to operate the website acquire, during their normal operation, some technical data whose transmission is implicit in the use of Internet communication protocols. This category includes, by way of example: IP address; type of browser used; operating system; domain name and addresses of the websites from which access was made; information on the pages visited; time of the request; method used to submit the request to the server; other parameters related to the user's operating system and computer environment. These data are used solely for the purpose of ensuring the correct functioning of the website, obtaining anonymous statistical information on the use of the website, and controlling its security. Data voluntarily provided by the user The optional, explicit, and voluntary sending of communications to the email addresses indicated on the website or through any contact forms entails the acquisition of the personal data provided by the user. Such data may include: name and surname; email address; phone number, if provided; content of the message; any information related to the request sent; any documents or materials spontaneously attached by the user. The voluntary sending of messages to the contact addresses indicated on the website entails the acquisition of the sender's contact data and any personal data included in the communication. Garante Privacy 3. Purpose of processing Personal data may be processed for the following purposes: a) Responding to user requests Data provided via email or contact form are used to respond to requests for information, quotes, requests related to interpretation, translation, language training services, or other professional services presented on the website. b) Managing pre-contractual or contractual relationships If the user's request leads to a professional proposal, assignment, or collaboration, the data may be processed for the management of pre-contractual, contractual, administrative, and fiscal activities connected. c) Ensuring the functioning and security of the website Navigation data can be processed to allow the correct display of the website, prevent abuse, unauthorized access attempts, fraudulent or harmful activities. d) Fulfilling legal obligations Some data may be processed to fulfill obligations provided by applicable legislation, including fiscal, accounting, administrative, or requests from competent authorities. e) Analyzing website usage If statistical or analytics tools are used, data may be processed to understand, in aggregate form, how users interact with the website, improve content, and monitor page operation. If such tools involve the use of cookies or non-technical tracking technologies, the user's consent will be requested according to applicable legislation. 4. Legal basis for processing The processing of personal data is based on the following legal grounds: execution of pre-contractual or contractual measures, when processing is necessary to respond to a user's request or provide a requested service; fulfillment of legal obligations, when processing is necessary to respect regulatory, fiscal, accounting, or administrative obligations; legitimate interest of the Data Controller, to ensure the correct functioning, security, and protection of the website; user consent, in cases where it is required, for example, for profiling cookies, marketing tools, newsletters, or non-strictly necessary tracking technologies. The GDPR requires that every processing be based on an adequate legal ground and that the interested party be informed in a clear and comprehensible manner. European Data Protection Board 5. Processing methods Personal data are processed using computer tools, telecommunication, and, if necessary, paper-based means, in compliance with the principles of lawfulness, correctness, transparency, minimization, accuracy, storage limitation, integrity, and confidentiality. The Data Controller adopts technical and organizational measures suitable to protect personal data from unauthorized access, loss, disclosure, modification, or destruction. 6. Data provision Providing data via email or contact form is optional. However, failing to provide the necessary data to identify and manage the request may prevent the Data Controller from responding or providing the requested information. 7. Data retention Personal data are retained for the time necessary to achieve the purposes for which they were collected. In particular: data sent via contact form or email are retained for the time necessary to respond to the request and manage any subsequent communications; data related to professional, contractual, administrative, or fiscal relationships are retained for the period provided by applicable legislation; technical navigation data are retained for the time strictly necessary for the operation and security of the website; data processed based on consent are retained until the consent is withdrawn, unless legal obligations or the need to protect the Data Controller's rights require longer retention. If a user's request gives rise to a professional relationship, some data may be retained for a longer period to fulfill fiscal, accounting, or legal obligations. 8. Communication of data to third parties Personal data may be processed by third-party subjects providing technical, professional, or administrative services to the Data Controller, within the limits necessary for the performance of their respective activities. By way of example, data may be processed by: hosting and website maintenance providers; email service providers; fiscal, accounting, or legal consultants; statistical analysis tool providers, if present; providers of technical services related to the operation of the website. Such subjects, if necessary, will be appointed as data processors pursuant to Article 28 of the GDPR or will act as independent data controllers. Personal data will not be sold or transferred to third parties for commercial purposes.
9. Transfer of data outside the European Economic AreaSome technical service providers, hosting, email, analytics, security or integrated tools on the site may process personal data in countries located outside the European Economic Area. In this case, the transfer will take place in accordance with the guarantees provided by the GDPR, such as adequacy decisions of the European Commission, standard contractual clauses or other measures provided for by the applicable legislation.10. Cookies and tracking toolsThe site may use technical cookies necessary for the proper functioning of the pages and, only if present and configured, analytical cookies or tracking tools. Technical cookies are necessary to allow navigation and do not require user consent. Any non-anonymized analytical cookies, profiling cookies, marketing tools, social plugins, embedded videos, maps or similar technologies may only be used as provided for by the applicable legislation and, if necessary, with the user's consent. The Privacy Authority clarifies that technical cookies do not require consent, while it is still necessary to provide information; for non-technical cookies or tracking tools, a banner with a request for consent and a link to the extended information may be necessary. Privacy AuthorityFor more information on the use of cookies, the user can consult the site's Cookie Policy, published separately.11. Contact formsIf the site contains contact forms, the data entered by the user will be used exclusively to respond to the request sent and for any subsequent communications related to it.The data collected through the form may include name, email, phone, subject of the request and content of the message.The user is invited not to insert in the form personal data not necessary, sensitive data or information referred to third parties, unless this is indispensable for the request.12. Links to external sites and social mediaThe site may contain links to external pages, social profiles or third-party platforms.The Owner is not responsible for the methods of processing personal data carried out by external sites, platforms or services.The user is invited to consult the respective privacy information.13. Rights of the interested partyThe user, as an interested party, can exercise the rights provided for by articles 15 and following of the GDPR. In particular, they have the right to: obtain confirmation of the existence or not of personal data concerning them;access their personal data; request the correction of inaccurate data;request the deletion of data, in the cases provided for by the legislation;request the limitation of processing;oppose processing, in the cases provided for;receive data in a structured, common and machine-readable format, where applicable;revoke the consent given, without affecting the lawfulness of the processing carried out before the revocation;propose a complaint to a control authority.To exercise their rights, the user can write to:mcaterina.interpreter@gmail.comThe Owner undertakes to respond to requests within the terms provided for by the applicable legislation.14. Complaint to the control authorityIf the user believes that the processing of their personal data takes place in violation of the applicable legislation, they have the right to propose a complaint to the Guarantor for the protection of personal data. Guarantor for the protection of personal dataWebsite: www.garanteprivacy.it15. Changes to this informationThis Privacy Policy may be updated over time, also in relation to regulatory, technical or organizational changes to the site.Users are invited to periodically consult this page to verify any updates