Paolo Mussat Sartor

PRIVACY NOTICE
(pursuant to Article 13 of EU Regulation 2016/679 – GDPR)

Users are invited to carefully read this Privacy Notice before using the website.
Use of the website implies that the user has read and understood this Notice.

1. Data Controller
The Data Controller of personal data is:

Paolo Mussat Sartor
Registered office in Turin
Email: info@PaoloMussatSartor.com

2. Types of Data Processed
The website is structured to allow browsing without requiring user identification.

However, the following personal data may be processed:

Data voluntarily provided by the user (first name, last name, email address, and any other data entered in contact forms or communications sent via email);
Data necessary for newsletter subscription;
Browsing data (IP addresses, system logs, technical information transmitted implicitly through the use of Internet communication protocols).

3. Purposes of Processing and Legal Basis
Personal data are processed for the following purposes:

a) Responding to requests sent via email
Legal basis: performance of pre-contractual measures taken at the request of the data subject (Art. 6(1)(b) GDPR).

b) Sending newsletters or informational/promotional communications
Legal basis: consent of the data subject (Art. 6(1)(a) GDPR).

c) Compliance with legal, tax, accounting, or administrative obligations
Legal basis: legal obligation (Art. 6(1)(c) GDPR).

d) Protection of the Data Controller’s rights in judicial proceedings
Legal basis: legitimate interest (Art. 6(1)(f) GDPR).

Provision of data for the purposes referred to in point a) is necessary in order to receive a response.
Provision of data for promotional purposes is optional and subject to explicit consent.

4. Methods of Processing
Data are processed using paper-based, IT, and telematic tools, in compliance with the principles of lawfulness, fairness, transparency, and data minimization. Appropriate technical and organizational measures are adopted to ensure the security and confidentiality of the information.

5. Disclosure of Data
Personal data will not be disclosed.
They may be communicated to third parties who perform activities on behalf of the Data Controller (for example: tax consultants, IT service providers, hosting providers), appointed as Data Processors pursuant to Article 28 GDPR.
In the event of extraordinary corporate transactions, data may be transferred within the limits permitted by law.

6. Data Retention
Personal data will be retained for the time strictly necessary to achieve the purposes for which they were collected and, subsequently, for the period required by applicable legal obligations.

7. Rights of the Data Subject
The data subject may exercise at any time the rights provided for in Articles 15–22 of the GDPR, including:

the right of access to personal data;
the right to rectification;
the right to erasure (“right to be forgotten”);
the right to restriction of processing;
the right to data portability;
the right to object to processing;
the right to withdraw consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal.

The data subject also has the right to lodge a complaint with the Italian Data Protection Authority (Garante per la Protezione dei Dati Personali).

Requests may be sent to the following email address:
info@PaoloMussatSartor.com

8. Cookies and Third-Party Technologies
The website may use technical cookies and, subject to consent, third-party cookies for statistical or profiling purposes.
For detailed information, please refer to the dedicated Cookie Policy.