II – DATA PROCESSING
1 – Data Controller
The data controller is the natural or legal person, public authority, service or other body which, individually or jointly with others, determines the purposes and means of the processing of personal data. It also deals with security profiles.
With regard to this website, the data controller is: … , and for any clarification or exercise of user rights may be contacted at the following email address: info@obsydianstone.com.
2 – Person responsible for data processing
The data controller is the natural or legal person, public authority, service or other body that processes personal data on behalf of the data controller.
Pursuant to Article 28 of Regulation (EU) No 2016/679, upon appointment by the data controller, the data controller of the obsydianstone website is …
3 – Place of data processing
The data processing generated by the use of obsydianstone takes place at Via Larga 8, 20122 Milan (MI), Italy.
If necessary, the data connected to the newsletter service may be processed by the person responsible for the processing or persons appointed by it for this purpose at its headquarters.

III – COOKIES
Type of Cookies:
The obsydianstone website uses cookies to make the user’s browsing experience easier and more intuitive: cookies are small strings of text used to store certain information that may relate to the user, his preferences or the Internet access device (computer, tablet or cell phone) and are mainly used to adapt the operation of the site to the user’s expectations, offering a more personalized browsing experience and storing the choices made previously.
A cookie consists of a small set of data transferred to the user’s browser by a web server and can only be read by the server that carried out the transfer. It is not executable code and does not transmit viruses.
Cookies do not record any personal information and any identifiable data will not be stored. If you wish, you can prevent the saving of some or all cookies. However, if you do, your use of the site and the services offered may be impaired. To proceed without changing your cookie options, simply continue browsing.

Below are the types of cookies the site uses:
1 – Technical cookies
There are numerous technologies used to store information on the user’s computer, which are then collected by the sites. Among these, the best known and most widely used is the HTML cookie. They are used for navigation and to facilitate access and use of the site by the user. They are necessary for the transmission of communications on the electronic network or to the supplier to provide the service requested by the customer.
The settings for managing or deactivating cookies may vary depending on the Internet browser used. However, the user can manage or request the general deactivation or deletion of cookies, changing the settings of your internet browser. Such deactivation may slow down or prevent access to certain parts of the site.
The use of technical cookies allows the safe and efficient use of the site.
The cookies that are placed in your browser and transmitted through Google Analytics or through the statistics service of blogger or similar are technical only if they are used for the purpose of optimizing the site directly by the owner of the site itself, which may collect information in aggregate form on the number of users and how they visit the site. Under these conditions, analytics cookies are subject to the same rules on information and consent as technical cookies.
From the point of view of duration we can distinguish temporary session cookies that are automatically deleted at the end of the browsing session and are used to identify the user and then avoid logging in each page visited and permanent cookies that remain active in the computer until expired or deleted by the user.
Session cookies may be installed in order to allow access and stay in the private area of the portal as an authenticated user.
They are not memorized in a persistent way but only for the duration of the navigation until the closure of the browser and vanish with the closure of the same. Their use is strictly limited to the transmission of session identifiers consisting of random numbers generated by the server and necessary to enable the safe and efficient exploration of the site.

2 – Third party cookies
In relation to the origin we distinguish between cookies sent to the browser directly from the site you are visiting and third party cookies sent to your computer from other sites and not from the one you are visiting.
Permanent cookies are often third-party cookies.
Most third-party cookies are tracking cookies used to detect online behavior, understand interests, and then customize advertising propositions for users.
Analytical third-party cookies may be installed. They are sent from domains of such third parties outside the site.
Third-party analytical cookies are used to detect information about user behavior on obsydianstone. The collection is done anonymously, in order to monitor performance and improve the usability of the site. Third-party profiling cookies are used to create profiles of users, in order to propose advertisements in line with the choices made by users themselves.
The use of these cookies is governed by the rules laid down by these third parties, therefore, users are invited to read the privacy notices and directions to manage or disable cookies published on their web pages.

3 – Profiling cookies
Profiling cookies are those that create profiles of the user and are used to send advertising messages in line with the preferences expressed by the same during web browsing. When using these types of cookies the user must give explicit consent.
Article 22 of Regulation (EU) 2016/679 and Article 122 of the Data Protection Code will apply.

IV – PROCESSED DATA
1 – Method of data processing
Like all websites, this site also makes use of log files in which information collected automatically during user visits is stored.
The information collected could be the following
– internet protocol (IP) address;
– browser type and parameters of the device used to connect to the site;
– name of the internet service provider (ISP);
– date and time of visit;
– the visitor’s web page of origin (referral) and exit;
– possibly the number of clicks.

The above information is processed automatically and collected in an aggregate form only in order to verify the proper functioning of the site, and for security reasons. This information will be processed according to the legitimate interests of the owner.
For security purposes (spam filters, firewalls, virus detection), automatically recorded data may also include personal data such as IP address, which could be used, in accordance with applicable laws, in order to block attempts to damage the site itself or to cause damage to other users, or otherwise harmful or criminal activities. These data are never used for identification or profiling of the user, but only for the protection of the site and its users, such information will be treated according to the legitimate interests of the owner.
If the site allows the insertion of comments, or in case of specific services requested by the user, including the possibility to send the Curriculum Vitae for a possible working relationship, the site automatically detects and records some identification data of the user, including the e-mail address. These data are voluntarily provided by the user at the time of the request for the provision of the service. By entering a comment or other information, the user expressly accepts the privacy policy, and in particular agrees that the contents entered are freely distributed to third parties. The data received will be used exclusively for the provision of the requested service and only for the time necessary for the provision of the service.
The information that users of the site will make public through the services and tools made available to them, are provided by the user knowingly and voluntarily, exempting this site from any liability with regard to any violation of the law. It is up to the user to verify that he/she has permission to enter personal data of third parties or content protected by national and international regulations.

2 – Purpose of data processing
The data collected by the site during its operation are used exclusively for the purposes indicated above and kept for the time strictly necessary to carry out the activities specified, and in any case not more than 10 years.
The data used for security purposes (blocking attempts to damage the site) are kept for the time strictly necessary to achieve the above purpose.

3 – Data provided by the user
As indicated above, the optional, explicit and voluntary sending of electronic mail to the addresses indicated on this site involves the subsequent acquisition of the sender’s address, necessary to respond to requests, and any other personal data included in the message.
Specific summary information will be progressively reported or displayed on the pages of the site set up for particular services on request.

4 – Support in the configuration of your browser
The user can also manage cookies through the settings of his browser. However, by deleting cookies from your browser you may remove the preferences you have set for the site.
For further information and support you can also visit the specific help page of the web browser you are using:
– Internet Explorer: http://windows.microsoft.com/en-us/windows-vista/block-or-allow-cookie
– Firefox: https://support.mozilla.org/en-us/kb/enable-and-disable-cookies-website-preference
– Safari: http://www.apple.com/legal/privacy/it/
– Chrome: https://support.google.com/accounts/answer/61416?hl=it
– Opera: http://www.opera.com/help/tutorials/security/cookies/

5 – Social Network Plugin
This site also incorporates plugins and/or buttons for social networks, in order to allow easy sharing of content on your favorite social networks. These plugins are programmed so as not to set any cookies when you access the page, to protect the privacy of users. Eventually cookies are set, if so provided by social networks, only when the user makes effective and voluntary use of the plugin. Please note that if the user navigates being logged into the social network then he has already consented to the use of cookies conveyed through this site at the time of registration to the social network.
The collection and use of information obtained through the plugin are governed by the respective privacy policies of the social networks, which please refer to:
Facebook: https://www.facebook.com/help/cookies
Twitter: https://support.twitter.com/articles/20170519-uso-dei-cookie-e-di-altre-tecnologie-simili-da-parte-di-twitter
Google+: http://www.google.com/policies/technologies/cookies
Pinterest: https://about.pinterest.com/it/privacy-policy
AddThis: http://www.addthis.com/privacy/privacy-policy
Linkedin: https://www.linkedin.com/legal/cookie-policy

V – USER RIGHTS
Article 13, c. 2 of Regulation (EU) 2016/679 lists the user’s rights.
The obsydianstone website therefore intends to inform the user about the existence of the user’s rights, based on the following articles of Regulation (EU) 2016/679:
Under Article 15, of the right of the data subject to request access to personal data from the controller, under Article 16 the possibility of rectifying the data provided, under Article 18 the possibility of supplementing or limiting the processing concerning him or her, or to object, for legitimate reasons, to their processing under Article 21, in addition to the right to data portability under Article 20 Regulation (EU);
– the right to request cancellation under Article 17, transformation into anonymous form or blocking of data processed unlawfully, including data whose retention is unnecessary for the purposes for which the data were collected or subsequently processed.
– the right to obtain certification that the operations of updating, rectification, integration of data, cancellation, blocking of data, transformation have been notified, also as regards their contents, to those to whom the data were communicated or disseminated, unless this requirement proves impossible or involves a manifestly disproportionate to the protected right.
Requests can be addressed to the owner of the treatment, without formalities or, alternatively, using the model provided by the Guarantor for the Protection of Personal Data, or by sending an email to: info@obsydianstone.com
If the treatment is based on art. 6, paragraph 1, letter. a) – express consent to use – or art. 9, paragraph 2 letter. a) – express consent to use genetic data, biometric, health, revealing religious or philosophical beliefs or trade union membership, revealing racial or ethnic origin, political opinions – the user has the right to withdraw consent at any time without affecting the lawfulness of treatment based on consent given before the revocation.
Similarly, in case of violation of the legislation, the user has the right to complain to the Guarantor for the Protection of Personal Data, as the authority responsible for monitoring the treatment in the Italian State.
For a more in-depth examination of your rights, see articles 15-22 of Regulation (EU) 2016/679.

VI – FULFILMENTS
The owner shall notify the Guarantor of the processing of personal data to which he intends to proceed, only if the processing concerns: genetic data, biometric data or data indicating the geographical position of persons or objects by means of an electronic communication network; data disclosing the state of health and sex life, processed for the purpose of assisted procreation, provision of health services by telematics related to databases or the provision of goods, epidemiological investigations, detection of mental, infectious and diffusive diseases, seropositivity, transplantation of organs and tissues and monitoring of health expenditure; data disclosing sex life or the psychic sphere, processed by associations, bodies and non-profit organizations, including unrecognized, political, philosophical, religious or trade union; data processed with the aid of electronic instruments aimed at defining the profile or personality of the data subject or at analysing consumption habits and choices or at monitoring the use of electronic communication services, with the exclusion of processing that is technically indispensable for providing such services to users; sensitive data recorded in databases for the purposes of personnel selection on behalf of third parties, as well as sensitive data used for opinion polls, market research and other sample research; data recorded in special databases managed by electronic means and relating to the risk of financial solvency, the financial situation, the correct fulfilment of obligations, illegal or fraudulent behaviour.

VII – DATA SECURITY
This site treats user data in a lawful and correct manner, adopting appropriate security measures to prevent unauthorized access, disclosure, modification or destruction of data. The treatment is carried out through computer and / or telematic tools, with organizational methods and logic closely related to the purposes indicated.
In addition to the owner, in some cases, may have access to data categories involved in the organization of the site (administrative staff, sales, marketing, legal, system administrators) or external parties (such as third party technical service providers, postal carriers, hosting providers, IT companies, communication agencies).

VIII – CHANGES TO THIS DOCUMENT
This document, which constitutes the privacy policy of this site, is published at: https://www.obsydianstone.com/privacy-policy/
It may be subject to changes or updates. In the event of significant changes and updates these will be reported with appropriate notifications to users.
The document was updated on 23/07/2021 in order to comply with the relevant regulatory provisions, and in particular in accordance with Regulation (EU) 2016/679.