Privacy Policy

Andrea Capelli

Brand / project: EDECUM

Registered office or professional address: Fraz. Santa Croce 30, BG

Email: edecumart@gmail.com

2. Categories of data processed

Browsing data. The systems and services used to make the website available may collect technical information such as IP address, date and time of the request, requested resource, browser and device information, and technical data necessary for operation and security.

Data voluntarily provided by email. Sending an email to edecumart@gmail.com involves the processing of data voluntarily supplied by the user, such as email address, name, message content, attachments and any additional information included in the communication.

Users are asked not to provide personal data that are unnecessary for the request and, in particular, special categories of personal data unless strictly necessary.

3. Purposes of processing

• to make the website available and ensure its proper technical operation;
• to protect the website against abuse, attacks and anomalous use;
• to respond to enquiries received by email;
• to provide information about EDECUM and private commissions;
• to manage pre-contractual enquiries, quotations and preliminary project evaluations;
• to comply with applicable legal obligations if a professional or commercial relationship is established.

4. Legal basis

Processing of technical data required for website operation and security may be based on the Controller's legitimate interest in maintaining a secure and operational service. Processing of data provided by users when requesting information, a quotation or a commission may be necessary in order to take pre-contractual steps at the user's request. Any additional processing will rely on the legal basis applicable to the relevant circumstances.

5. Processing methods

Personal data are processed using electronic and telematic means in accordance with the principles of lawfulness, fairness, transparency, data minimisation, purpose limitation, integrity and confidentiality, and with appropriate technical and organisational measures.

6. Retention

Data are retained only for as long as necessary for the purposes for which they were collected. General enquiries that do not result in a commercial relationship may be retained for an indicative maximum period of 12 months after the last communication, unless longer retention is necessary to protect the Controller's rights or to comply with legal obligations.

Where an enquiry develops into a contractual relationship, data may be retained for the periods required by civil, tax, accounting and other applicable legal obligations.

7. Technical service providers

The website uses Cloudflare for hosting, distribution and security. Cloudflare may process technical data necessary to provide and protect the website in accordance with its applicable agreements, security measures and service terms.

Messages sent to edecumart@gmail.com are handled through Google / Gmail. Accordingly, data contained in email communications may be processed through the technical services used to provide that mailbox under the applicable service terms.

8. Transfers outside the EEA

Some technical service providers may be established, or may operate infrastructure, outside the European Economic Area. Where applicable, international transfers are handled using the safeguards and mechanisms recognised by the GDPR, such as adequacy decisions, Standard Contractual Clauses or other legally recognised transfer mechanisms.

9. Cookies and similar technologies

In its current configuration, EDECUM does not intentionally install profiling, advertising, remarketing, newsletter tracking or behavioural analytics tools. The infrastructure provider may process data and use technical mechanisms strictly necessary for security, traffic distribution and service operation, depending on the features actually enabled.

If non-essential technologies are introduced in the future, this Privacy Policy will be updated and, where required, a consent management mechanism will be implemented.

10. Recipients

Personal data may be processed, where necessary, by the Controller and by technical service providers used for hosting, security, email, maintenance or professional assistance. Personal data are not made publicly available unless there is a specific legal basis or authorisation.

11. Data subject rights

Where provided for by the GDPR, data subjects may exercise their rights of access, rectification, erasure, restriction, objection and data portability, and may withdraw any consent previously given without affecting the lawfulness of processing carried out before withdrawal.

Requests may be sent to edecumart@gmail.com.

12. Complaint to a supervisory authority

Data subjects have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali) or another competent supervisory authority, without prejudice to any other administrative or judicial remedy available under applicable law.

13. Minors

The EDECUM website and services are not specifically directed at minors. Users should not submit personal data relating to minors through the website's contact details unless this is necessary and carried out in compliance with applicable law.

14. External links

The website may contain links to third-party websites or services. EDECUM does not control processing independently carried out by those third parties. Users should review the relevant privacy notices before using external services.

15. Changes to this Privacy Policy

This Privacy Policy may be updated following legal, technical, organisational or service changes. The updated version will be published on this page together with its latest revision date.