Annamaria Giancaspero, who manages the website in the provision of services and in the context of legal relationships relating to her business, she recognizes and respects the right to the protection of personal data, as a fundamental right of the person. In the current regulatory context, the ability to maintain control of one’s information becomes fundamental and requires constant and conscious commitment to ensure adequate levels of personal data protection. The following information describes the methods and purposes of the processing of personal data of users who access and use the website (hereinafter only the “Site”). The information is provided only for the Site and not for third-party websites accessible via hyperlinks (links) contained on the Site. Data Controller The data controller is Dr. Annamaria Giancaspero, with registered office in Piazzale Luigi Cadorna 11 – 20123 Milan Email: / Tel: 0289451967 Types of data processed and purposes of the processing The processing operations are carried out with reference only to the personal data necessary for the use of the Site and its functions. The types of data processed include, in particular: navigation data: the computer systems and software procedures used to operate the Site acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols. This information is not collected to be associated with identified interested parties, but which by their very nature could, through processing and association with data held by third parties, allow users to be identified. These data are used for the sole purpose of obtaining anonymous statistical information on the use of the site and to check its correct functioning and are not, nor will in any case be used by the Data Controller to carry out profiling activities. data provided voluntarily by the user, in particular: e-mail address and other personal data possibly contained in the e-mail messages sent to the addresses indicated on the Site and / or in the related attachments, in order to carry out the processing activities necessary to provide feedback to the user’s requests; name and e-mail address provided by filling in the request form for a consultation, in order to receive feedback to plan an online consultation on the platforms indicated on the site; name, e-mail address and any other personal data provided by filling in the contact forms and requesting information, in order to meet the user’s requests; The data provided by the user may be acquired and stored by the Data Controller, also in electronic form, for the purposes related to their collection through the Site and the Platform will not be used for profiling or direct marketing activities. Methods of processing The processing will be carried out, using mainly IT tools, by means of collaborators and employees authorized to do so, who operate according to the instructions given by the Data Controller, with logic strictly related to the purposes indicated and, in any case, in such a way as to guarantee the security and confidentiality of the data processed. Specific security measures are adopted in order to minimize the risk of destruction or loss, even accidental, of the data being processed, of unauthorized access, of treatment that is not permitted or does not comply with the purposes indicated in this statement. Data retention period The data being processed will be kept for a period of time not exceeding that necessary to achieve the purposes for which they were collected or subsequently processed and, in particular: The data provided by sending e-mails or filling out the contact forms on the site will be kept for the time necessary to provide feedback; The Data Controller will, after the expiry of the retention terms according to the indicated criteria, take preordained measures for the cancellation or anonymization of data that should not be kept for specific regulatory obligations. Categories of recipients The personal data of the interested party may be disclosed to specifically authorized collaborators and employees of the Data Controller, within the scope of their respective competences. Furthermore, they may be communicated to suppliers of the services offered through the Site or connected to its operation, including Aruba Spa for the web hosting service which acts as Data Processors Rights of the interested party The interested party has the right to access their personal data, to request their correction, updating and deletion or limitation, if incomplete, erroneous or collected in violation of the law, as well as to oppose the processing for legitimate reasons or obtain portability. The interested party, in particular, pursuant to articles 15-22 of Regulation (EU) 679/2016, has the right to obtain confirmation of the existence or not of personal data concerning him, even if not yet registered, and their communication in an intelligible form. The interested party also has the right to obtain the indication: of the purposes and methods of the processing; the logic applied in case of processing carried out with the aid of electronic tools; of the identification details of the Data Controller, of the Manager and of the subjects or categories of subjects to whom the personal data may be communicated or who can learn about them as authorized for processing. The interested party has the right to obtain: updating, rectification or integration of their data; the cancellation, transformation into anonymous form or blocking of data processed in violation of the law, including those that do not need to be kept for the purposes of the processing; the limitation of processing, when one of the hypotheses referred to in Article 18 of the GDPR occurs; the attestation that the operations referred to in letters a), b) and c) have been brought to the attention of those to whom the data have been communicated or disseminated, except in the case in which this fulfillment proves impossible or involves the use of means manifestly disproportionate to the protected right; the transmission of data concerning him, provided to the Data Controller and processed on the basis of the consent expressed by the interested party for one or more specific purposes, in a structured format, commonly used and readable by an automatic device. Pursuant to art. 20 of the GDPR, the interested party also has the right to transmit such data to another Data Controller without impediments and, if technically feasible, to obtain the direct transmission of personal data from one Data Controller to the other. if the processing is based on consent, withdraw your consent at any time (pursuant to Article 7, paragraph 3 of the GDPR). The interested party has the right to object, in whole or in part: for legitimate reasons to the processing of personal data concerning him, even if pertinent to the purpose of the collection; to automated decision-making processes that significantly affect your person. Without prejudice to any other administrative or judicial appeal, the interested party has the right to lodge a complaint and / or report to a supervisory authority, particularly in the Member State in which he usually resides, works or in the place where the alleged violation has occurred. Exercise of rights The above rights are exercised with a request addressed to the Data Controller, directly or through an authorized person, orally or by sending an e-mail message to the address The request is formulated freely and without formalities by the interested party, who has the right to receive appropriate feedback within a reasonable time, depending on the circumstances of the case. The interested party may make use, for the exercise of his rights, of non-profit bodies, organizations or associations, whose statutory objectives are of public interest and which are active in the field of protection of the rights and freedoms of the interested parties with regard to to the protection of personal data, giving, for this purpose, a suitable mandate. The interested party can also be assisted by a trusted person. To find out about your rights, lodge a complaint and always be updated on the legislation on the protection of individuals with regard to the processing of personal data, the interested party can contact the Guarantor Authority for the protection of personal data, by consulting the website at address