Privacy Notice

This notice is provided pursuant to Art. 13 of Regulation (EU) 2016/679 (\u00abGDPR\u00bb) and Legislative Decree 196/2003 as amended by Legislative Decree 101/2018, and describes how the personal data of users who consult the website https://moscardinostudio.com are processed.

1. Data controller

MOSCARDINO STUDIO is an informal creative collective: a group of natural persons who collaborate in the making of audiovisual works. It is not a company, it is not registered with the Companies Register and it has no separate legal personality. For this reason the collective, as such, cannot act as data controller.

The controller of the data collected through this website is therefore the natural person Marco Antonio Lanera, founding member of the collective.

For any request concerning personal data, including the exercise of the rights described in section 8, you may write to moscardinostudio@gmail.com.

No Data Protection Officer (DPO) has been appointed, as the conditions in Art. 37 GDPR are not met.

2. Types of data collected

This site is a portfolio: it does not provide for registration, it does not host contact forms, it does not process payments and it does not require the creation of an account. The data processed are limited to the following.

Data provided voluntarily

If you choose to write to the email address or to call the telephone number published on the site, the controller will process the data you decide to communicate: name, email address, telephone number and any other information contained in the message. Providing the data is entirely optional: without it, however, it will not be possible to reply.

Browsing data

The computer systems and software procedures used to operate the site acquire, in the course of their normal operation, certain data whose transmission is implicit in the use of Internet communication protocols. These include in particular:

• IP address of the device used for the connection;
• browser type, operating system and language setting;
• date and time of the request, URL of the resources requested and status code of the response.

These data are recorded in the hosting provider\u2019s logs and are used solely to ensure the proper functioning and security of the site. They are not used to identify users nor associated with other information.

Cookies and tracking tools

The site uses strictly necessary cookies and, subject to consent, third-party cookies for video playback. Details are set out in the Cookie Policy.

3. Purposes and legal basis of processing

• Responding to contact requests received by email or telephone, managing relations with those who write and assessing possible collaborations. Legal basis: Art. 6.1.b GDPR (pre-contractual measures taken at the request of the data subject) and, where the request is not pre-contractual in nature, Art. 6.1.f GDPR (legitimate interest of the controller in responding to those who contact them).
• Ensuring the operation and security of the site, preventing abuse, diagnosing malfunctions and storing the cookie preferences expressed. Legal basis: Art. 6.1.f GDPR (legitimate interest of the controller in the security of their infrastructure) and, for strictly necessary cookies, Art. 122 of Legislative Decree 196/2003, which does not require consent.
• Playing third-party multimedia content (YouTube videos) and any future browsing statistics. Legal basis: Art. 6.1.a GDPR (consent), freely given and withdrawable at any time through the \u00abCookie preferences\u00bb panel.

4. Methods of processing

Processing is carried out with electronic and automated means, for the time strictly necessary to achieve the purposes indicated. Appropriate technical and organisational measures are adopted pursuant to Art. 32 GDPR to prevent data loss, unlawful or incorrect uses and unauthorised access, including encrypted transmission via the HTTPS protocol.

No profiling is carried out, nor any automated decision-making that produces legal effects or similarly significantly affects the data subject pursuant to Art. 22 GDPR.

5. Recipients of the data and external processors

The data are not disseminated or transferred to third parties for commercial purposes. They may be processed, on behalf of the controller and as processors pursuant to Art. 28 GDPR, by the following parties:

• Vercel Inc. \u2014 hosting and site-distribution provider, which processes the browsing data contained in the server logs;
• Google Ireland Ltd. \u2014 provider of the YouTube service used to embed videos, active only after your consent;
• the provider of the email service used to receive and store messages sent to the published address.

The data may also be disclosed to the competent authorities where this is required by law or necessary to establish, exercise or defend a right in court.

6. Transfers of data outside the European Union

Some of the providers indicated in the previous section, in particular Google in relation to YouTube videos, may transfer personal data to countries located outside the European Economic Area, including the United States of America.

Such transfers take place on the basis of the safeguards provided for in Chapter V of the GDPR: the European Commission\u2019s adequacy decision of 10 July 2023 relating to the EU-U.S. Data Privacy Framework, for providers that adhere to it, and additionally or alternatively the Standard Contractual Clauses adopted by the European Commission, with supplementary measures where necessary. You can consult Google\u2019s privacy notice at policies.google.com/privacy. If you do not give consent to media cookies, no data are transmitted to Google.

7. Retention period

• Contact correspondence: retained for the time necessary to handle the request and any relationship arising from it, and thereafter for the period required by legal obligations or necessary for defence in court.
• System logs: retained by the hosting provider according to its technical policies, for a limited period and in any event no longer than necessary for security and diagnostic purposes.
• Cookie preferences: stored in your browser for 182 days (about 6 months), after which consent is requested again.

8. Rights of the data subject

In relation to the data processed you may at any time exercise the rights provided for by Arts. 15-22 of the GDPR, and in particular:

• access (Art. 15): obtain confirmation as to whether or not processing is taking place and receive a copy of the data;
• rectification (Art. 16): correct inaccurate data or complete incomplete data;
• erasure (Art. 17): obtain the deletion of the data in the cases provided for by the rule;
• restriction (Art. 18): request that processing be suspended pending verification;
• portability (Art. 20): receive the data in a structured, commonly used and machine-readable format;
• objection (Art. 21): object to processing based on legitimate interest;
• withdrawal of consent (Art. 7.3): withdraw consent given at any time, without affecting the lawfulness of processing carried out before withdrawal. For cookies, withdrawal is immediate through the \u00abCookie preferences\u00bb panel.

Requests should be addressed to moscardinostudio@gmail.com. The controller replies without undue delay and in any event within one month of receipt, extendable by two months in cases of particular complexity.

You also have the right to lodge a complaint with the Garante per la protezione dei dati personali (Art. 77 GDPR), Piazza Venezia 11, 00187 Rome \u2014 www.garanteprivacy.it \u2014 or to bring proceedings before the judicial authority.

9. Minors

The site is not directed at children under 14 years of age and does not knowingly collect personal data relating to them. Should the controller become aware of having processed data of a child under 14 in the absence of consent from the person exercising parental responsibility, pursuant to Art. 8 GDPR and Art. 2-quinquies of Legislative Decree 196/2003, they will delete them without delay. Reports may be sent to the controller\u2019s email address.

10. Changes to this notice

The controller reserves the right to amend or update this notice to adapt it to regulatory changes or to changes in the services used by the site. Amendments take effect from the moment of publication on this page, which always shows at the top the date of the last update: you are invited to consult it periodically.

Should MOSCARDINO STUDIO be incorporated in a legal form with separate legal personality, the controller\u2019s details will be updated accordingly and the change will be indicated in this notice.