Privacy Policy pursuant to Regulation (EU) 2016/679 (GDPR)

Leonardo Network Srl (hereinafter, “Leonardo Network” or “the Company”), with registered office in Via dell'Argento 13, 58023 Gavorrano, Grosseto, Italy, Tel. 05661966359, VAT and Tax Code 01749180533 contact email info@leonardonetwork.eu, as Data Controller, informs you, pursuant to art. 13 of EU Regulation no. 2016/679 (hereinafter, "GDPR"), that your data will be processed in the manner and for the purposes set out below.

1. Data controller

The data controller is Leonardo Network Srl, with registered office at Via dell'Argento 13, 58023 Gavorrano, Grosseto, Italy. For any questions or requests regarding the processing of your personal data, you can contact the data controller at the email address info@leonardonetwork.eu or by calling 05661966359.

2. Type of data processed

Leonardo Network collects and processes the following personal data:

Identification data: name, surname, address, telephone number, email address;
Browsing data: IP address, operating system, browser used, website browsing data;
Contact details: telephone number, email address;
Other personal data possibly provided by the interested party via the contact form or other communication methods.

3. Purpose of processing and legal basis

The personal data provided will be processed for the following purposes:

Performance of a contract: to fulfill the interested party's requests and to provide the requested services;
Legal obligations: to fulfill obligations established by law, by a regulation, by community legislation or by an order of the Authority;
Legitimate interest: for the exercise of the Data Controller's rights, for example the right of defense in court;
Consent: to send marketing and promotional communications, where the interested party has given specific consent.

4. Methods of processing

Your personal data is processed using the operations indicated in Article 4(2) of the GDPR, specifically: collection, recording, organization, storage, consultation, processing, modification, selection, extraction, comparison, use, interconnection, blocking, communication, erasure, and destruction of data. Your personal data is subject to both paper-based and electronic and/or automated processing.

5. Data retention period

Personal data will be processed for the time necessary to fulfill the aforementioned purposes and in any case for no longer than 10 years from the termination of the relationship for service purposes and for no longer than 2 years from the date of data collection for marketing purposes.

6. Access to data

Your data may be made accessible for the purposes indicated above:

to employees and collaborators of the Data Controller or of companies of the Leonardo Network group, in their capacity as persons in charge and/or internal data processors and/or system administrators;
to third-party companies or other entities (for example, credit institutions, professional firms, consultants, insurance companies for the provision of insurance services, etc.) that carry out outsourcing activities on behalf of the Data Controller, in their capacity as external data processors.

7. Communication of data

Without the need for express consent (pursuant to Article 6, letters b) and c) of the GDPR), the Data Controller may disclose your data for the purposes set out in Article 3 to supervisory bodies, judicial authorities, insurance companies for the provision of insurance services, as well as to those entities to whom disclosure is required by law for the fulfillment of the aforementioned purposes. These entities will process the data in their capacity as independent data controllers.

8. Data transfer

Personal data is stored on servers located within the European Union. It is understood that the Data Controller, if necessary, will have the right to relocate the servers outside the EU. In this case, the Data Controller hereby ensures that the transfer of data outside the EU will be carried out in accordance with applicable laws, subject to the stipulation of the standard contractual clauses provided by the European Commission.

9. Rights of the interested party

As a data subject, you have the rights set forth in Article 15 of the GDPR, specifically the rights to:

obtain confirmation of whether or not personal data concerning you exists;
obtain information on: a) the source of the personal data; b) the purposes and methods of processing; c) the logic applied in the event of processing carried out with the aid of electronic means; d) the identification details of the data controller, data processors, and the designated representative pursuant to Art. 3, paragraph 1, GDPR; e) the entities or categories of entities to whom the personal data may be communicated or who may become aware of it in their capacity as designated representative(s) in the territory of the State, data processors, or persons in charge of processing;
obtain: a) the updating, rectification, or, where applicable, integration of the data; b) the deletion, anonymization, or blocking of data processed in violation of the law; c) certification that the operations referred to in letters a) and b) have been brought to the attention, including their content, of those to whom the data was communicated or disseminated, except where such compliance proves impossible or involves a manifestly disproportionate effort compared to the right being protected;
Object, in whole or in part: a) for legitimate reasons, to the processing of your personal data, even if pertinent to the purpose of collection; b) to the processing of your personal data for the purpose of sending advertising or direct sales materials or for conducting market research or commercial communications, through the use of automated calling systems without human intervention, by email and/or through traditional marketing methods such as telephone and/or mail. Please note that the data subject's right to object, set forth in point b) above, for direct marketing purposes via automated means extends to traditional methods, and that the data subject may exercise the right to object even partially. Therefore, the data subject may decide to receive communications only via traditional means, only automated communications, or neither type of communication.

10. How to exercise your rights

You may exercise your rights at any time by sending:

a registered letter with return receipt to Leonardo Network Srl, Via dell'Argento 13, 58023 Gavorrano, Grosseto, Italy;
an email to the address info@leonardonetwork.eu.

11. Minors

This Site and the Data Controller's Services are not intended for minors under 18, and the Data Controller does not intentionally collect personal information from minors. If information about minors is inadvertently recorded, the Data Controller will promptly delete it upon request.

12. Changes to this Policy

This Policy may be subject to change. We therefore recommend that you check this Policy regularly and refer to the most up-to-date version.

Last updated: June 17, 2024