Privacy Cookie Policy

Privacy Policy

Welcome!
This document (hereinafter also “Privacy Policy”) is valid as information and illustrates, with particular reference to the principle of transparency pursuant to art. 13 EU Regulation 679/2016 (hereinafter referred to as “GDPR” for convenience), what data is processed by the Data Controller and how it manages it.
Pursuant to art. 5 GDPR, the processing of personal data is based on general respect and observance of the principles of lawfulness, correctness, purpose limitation and conservation, minimization of the same, accuracy, integrity, confidentiality and accountability, according to the canons of privacy by default and by design.
In particular, the regulation of the matter in question is contained, among other legal provisions, in Legislative Decree 196/2003 and
ss.mm.ii, in Legislative Decree 101/2018 and in the aforementioned GDPR.

For the purposes of this text, “website” means http://haizeamaritiphotography.com/, including each of its pages, sections and subsections.
By User we mean the person who comes into contact with the website, uses the services, communicates or even simply accesses and/or views one or more pages of the aforementioned website.
For further definitions, such as that of personal data or others, please refer to the text of the aforementioned GDPR.
We kindly ask you to carefully and carefully read this Privacy Policy, which applies in any case you access this website and/or navigate within it and/or use the related services, regardless of the data processed. Therefore, by accessing the website you give your consent to the Privacy Policy described here. For any further request for information relating to data processing, you can contact the Data Controller at the email indicated in point 1 of this Privacy Policy.

1. OWNERSHIP OF THE TREATMENT

The Data Controller, pursuant to articles. 4 and 24 GDPR, is:

• Haizea Mariti
• P.IVA 16135051007‬
• E-mail: info@haizeamaritiphotography.com

For the owner’s personal details, you can send a written request to the above e-mail address.

2. TYPE OF DATA COLLECTED

• Navigation data: This is the set of data whose transmission is implicit in the use of Internet communication protocols. They are acquired, in the absence of any human activity, independently by the IT systems and software procedures used to operate the website. This category, by way of example, includes the IP addresses or domain names of the devices used during navigation, the addresses in URI notation of the requested resources, the day, date and time of the request, the method used in submitting the request to the server, the size and type of the file obtained in response, the numerical code indicating the status of the response given to the server and other parameters relating to the operating system and the User’s IT environment.
  These data, which are necessary for the use of web services, are also processed for the purpose of obtaining statistical information on the use of the services and checking the correct functioning of the services offered.
• Data communicated by the user: This is the set of data collected when the User sends a message to the e-mail referred to in article 1 or makes a telephone contact or any other type of contact, including via Whatsapp using the relevant support form, in order to receive information or commercial proposals, ask for clarification, or otherwise. These also include the activity of commenting on articles on the website by leaving your name and e-mail address. In this case, the voluntary sending of messages to the contact addresses, as well as the compilation and forwarding of the forms present therein, involve the acquisition of the sender’s contact data as well as all the personal data of the user independently included in the communications and/or requested by completing the reference form: all the data provided will be processed in order to fulfill the User’s request.
  This, even in the case of use of the tool for organizing appointments made available by Calendly LLC, implemented on this website, through which you are connected to the Owner’s Calendly appointment account. After you select your appointment, confirm it, and enter your contact information and requests, you receive a confirmation email from Calendly. Further information about Calendly and data protection can be found at https://calendly.com/privacy.
• Data collected through cookies: This is the information contained in the cookies, which is retransmitted to the servers when the user returns to visit the site. Cookies are text files that the servers of the sites visited can store in the memory of the devices used by the user: regarding this, please consult the Cookie information on the website.
• Newsletter subscription data: These are the data entered by the user to subscribe to the Newsletter, in which name, surname and e-mail address are requested via a specific form. In this case, the data is useful and preparatory to receiving updates and commercial communications. This marketing activity may, depending on the case, be implemented through third party service providers such as: Mailchimp https://www.intuit.com/privacy/statement/, in relation to which the Owner has undertaken to collect and maintain all necessary permissions and valid consents required to legally transfer the data and to allow such data to be legally collected, processed and shared by Mailchimp for the purposes of providing the Service.
• Purchase, billing and payment data: This is the data acquired in order to allow the placing of the order and the purchase of the products and/or services present on the website. The Data Controller receives the information directly from the user via the appropriate registration and payment form.
  In particular, the following data are acquired:
  – identifiers, personal details and, more generally, personal details such as name, surname, place and date of
  birth, residence, domicile, e-mail address and telephone numbers, also useful for any shipments;
  – relating to payment and invoicing methods, as well as administrative, accounting and fiscal ones.
• Review data: This is the data entered by the user to review the products and/or services purchased, in which name, surname and e-mail address are requested via a specific form. In this case, the data is useful and preparatory to being able to publish your review.
  In the event that the reviews are published on Google as per the indications https://support.google.com/maps/answer/6230175?hl=it&co=GENIE.Platform%3DDesktop, the regulations established by the service itself apply.

All the aforementioned information is intended to be provided only for purposes connected to this website and not for other sites that may be consulted via links. Therefore, the Data Controller is not to be held responsible for personal data processed independently by the provider of the platform connected via links.

3. MANDATORY OR OPTIONAL PROVISION OF PERSONAL DATA

In cases where the nature of the provision is to be defined as mandatory, the reference textual field in the form of this website will be expressly indicated as such, also through the use of symbols or graphic signs.

If, in the presence of these fields marked as mandatory, the User does not enter the requested information, it will be objectively impossible for the Owner to manage the pre-contractual/contractual and communication/purchase/sale relationship.

In summary, failure to communicate the data in question will not allow the relationship to be established.

4. PURPOSE OF THE PROCESSING AND RELATED LEGAL BASIS

The data are processed, subject to express consent ex. Art.6, letter. a, GDPR, for the following purposes:  

• Marketing, profiling and commercial promotion, sending, via all digital and/or paper communication tools, information, updates and news regarding products, services and promotions. At any time, the User has the right to revoke the consent given to the receipt of promotional information, by communicating his/her wish in writing to the email address referred to in article 1, or by following the procedure that can be activated at the link, present at the bottom of the communications received by email, which allows you to cancel your subscription.

• Publish reviews of products and/or services previously purchased by the user.

At any time, the User has the right to revoke the consent given to the publication of the review uploaded on the website, by communicating his/her will in writing to the email address referred to in art.1.

The data are processed without prior express consent pursuant to art. 6, letter. b, c, f, GDPR, for the following purposes:

1. allow the User to become part of the community and receive paper and/or digital communications on the legal basis of contractual fulfillment;
2. fulfill orders, process payments, ship products and/or provide services, provide the resulting customer assistance and support activities on the legal basis of the execution of pre-contractual and contractual measures, adopted at the customer’s request;
3. fulfill all legal, fiscal, accounting and administrative obligations;
4. provide information on products or services similar to those already purchased and detect the degree of satisfaction with the products or services purchased. At any time, the User has the right to revoke the consent given by communicating it in writing to the email address referred to in article 1, or by following the procedure that can be activated at the link in the communications received by email which allows you to cancel your registration;
5. carry out the User’s requests and requests and respond to the questions and issues raised through the contact tools available to them. The legal basis is the legitimate interest of the Owner in providing a customer assistance service, in addition to information on products and services, the development of new products and/or services, implementation of existing ones and general achievement of a greater degree of efficiency;
6. put in place an adequate defense in the appropriate judicial and extrajudicial forums in the event of a dispute with the User.

At any time, the User has the right to revoke the consent given by communicating it in writing to the email address referred to in art.1.

All data collected are processed solely for the purposes connected to this website and not for other sites that may be consulted via the links or social buttons present therein. Therefore, the Data Controller is not to be held responsible for the data processing carried out independently by the owner of the platforms connected via links and/or social buttons. . It is specified, from now on, that the website is autonomous and independent from the sites and/or platforms referred to by the aforementioned links and/or social buttons.

5. METHODS OF TREATMENT

The data is processed by the Data Controller electronically and electronically, without this affecting the possibility of execution in paper form.

The processing of personal data may include any type of operation, including collection, recording, modification, storage, organization, consultation, processing, selection, extraction, comparison, use, interconnection, blocking, communication, cancellation and destruction. In any case, the data is collected and processed for specific, explicit and legitimate purposes, and used in terms compatible with the purposes indicated in point 4. All this is done by adopting security measures that are as adequate as possible in order to minimize the risks associated with such activities, and, in particular, where cancellation or destruction are not the object of the processing, in order to avoid such eventualities, as well as to avoid unauthorized access or processing that is not permitted and/or does not comply with the purposes.

6. PLACE OF TREATMENT

The data is processed at the owner’s headquarters and at the host servers, to be understood as third parties with respect to the owner and not under his direct control.

7. STORAGE PERIOD

The data are processed for the time needed to fulfill the service requested by the User, coinciding with the achievement of the purposes for which they were collected, and in any case, no later than 10 years from that date.
At the end of the retention period the data will be deleted.
For marketing purposes only, this period is reduced and is equal to 24 months from the last interaction and in any case never more than 10 years.

8. DISCLOSURE OF PERSONAL DATA

The data processing is carried out by the Data Controller and the staff appointed by it to carry out tasks relating to the correct management of contractual and marketing relationships with customers, potential customers, and with suppliers.

The data controller undertakes not to disseminate personal data, unless authorized by the User, to people other than the Data Controller’s employees and/or professionals, collaborators and third parties (natural or legal persons) who carry out activities on behalf of the Data Controller and who need to know such data for the sole purpose of carrying out the requested activities.

In particular, the data may be communicated to:

• subjects who need to access the data within the limits strictly necessary to achieve purposes auxiliary to the contractual relationship;
• individuals and companies who collaborate with the Data Controller, within the limits necessary to carry out their professional duties, including in particular the keeping of accounts or the carrying out of legal procedures.

In this sense, these subjects will play the role of Data Controllers.

The aforementioned subjects, duly appointed pursuant to art. 28 GDPR, will process the data in full compliance with this Privacy Policy and current legislation: the list of such subjects can be consulted upon written request of the interested party, also by email to the address indicated in point 1, to be addressed to the Data Controller.

By virtue of national and European legal provisions and/or the competent authorities, the data may also be communicated or made available to public or private entities indicated by them, within the limits and for the purposes set out therein. The aforementioned subjects will only be provided with the strictly necessary information.

9. RIGHTS OF THE INTERESTED PARTY

The interested party has the right to receive correct information regarding the processing of their data, as established by the articles. 12 ff. of the GDPR.

At any time, pursuant to articles. 15 et seq. GDPR, the interested party has the right to exercise the relevant data access rightsrectification, cancellation or limitation of processing, request and obtaining information and clarifications regarding the purposes and purposes of the processing, the categories of personal data, the recipients to whom the data have been communicated and the relevant retention period. For consultation of the rights of the interested party, please also refer to what is further specified in the articles. 15-22 GDPR.

The right to revoke the consent previously given is always recognised, to be carried out via email, addressed to the email address better specified in point 1 and intended for the Data Controller.

We also point out the legal right to lodge a complaint with the Supervisory Authority for the protection of personal data, as required by art. 77 GDPR, or to take action in the appropriate judicial offices pursuant to art. 79 same text.

The exercise of all the aforementioned rights, with the exclusion of complaints to the Supervisory Authority and to the judicial offices, is possible by sending a specific request to the email address referred to in art.1.

With particular reference to cancellation, we recognize the right to request the deletion of personal data, which will be deleted upon request, except in cases where there are circumstances preventing this provided by law, for example the validity of a contract or the existence of debt/credit relationships. Likewise, data cannot be deleted in cases where there are retention obligations.

With particular reference to cancellation, we recognize the right to request the deletion of personal data, which will be deleted upon request, except in cases where there are circumstances preventing this provided by law, for example the validity of a contract or the existence of debt/credit relationships. Likewise, data cannot be deleted in cases where there are retention obligations.

10. LINKS AND SOCIAL BUTTONS

Everything provided in this information is to be understood as operating solely for the website in which it is inserted.

It is in no way valid for other sites and/or platforms in any way connected to this site and reachable by the User via links and social buttons.

Social buttons mean the link buttons on the web page depicting social network icons to facilitate sharing and interaction in a specific social network of what has been chosen by the user.

The data processing carried out by these external parties is independent of that carried out on this website, and we therefore ask you to refer to the respective privacy policies, which can be consulted free of charge at the following links:

• Facebook: https://facebook.com/about/privacy
• Instagram: https://help.instagram.com/519522125107875
• YouTube: https://policies.google.com/privacy?hl=it
• TikTok: https://www.tiktok.com/legal/page/eea/privacy-policy/it-IT

11. TRANSFER OF PERSONAL DATA

Personal data will not be transferred outside of European territory. Any transfer to countries outside the European Union, where necessary and previously authorized by the User, will be carried out in accordance with the articles. 44 et seq. GDPR, i.e. guaranteeing the best data protection measures.

12. MINORS

Minors under the age of 16 are not required to provide any type of information or personal data without the consent of those exercising parental responsibility over them.

13. UPDATES AND CHANGES

In the future, the Owner reserves the right to modify and/or update, in whole or in part, this document, also in consideration of possible regulatory interventions on the matter in question. The User is advised to consult the page regularly to view updates.

This document was last updated on 04.17.2025.