VINCI GROUP S.R.L.

Via Gorizia 5, 98076 Sant’Agata di Militello (ME)

 Email: info@danielevinci.it | Web: vincigroup.srl

WEBSITE USERS’ NOTICE

This webpage describes, in accordance with Article 13 of the Regulation (EU) 2016/679 (hereinafter referred to as “GDPR”), the methods of processing personal data of users of the website accessible at the address https://www.boldifyplugin.com (hereinafter referred to as the “Site”).

The information provided below does not concern, unless otherwise indicated, other websites, pages, applications, or web services that can be accessed through links from this Site.

1. Data Controller

The data controller is Vinci Group S.r.l., with registered office at Via Gorizia 5, 98076 Sant’Agata di Militello (ME), contactable at the email address info@danielevinci.it. 2. Purposes and Legal Basis of Processing

The personal data of users are exclusively processed for the purposes indicated below and only in compliance with the lawful conditions set out in Article 6 of the GDPR.

The processing activities related to sending messages or comments through the specific forms on the Site are based on the explicit consent freely given by the user, in accordance with Article 6(1)(a) of the GDPR. The same applies to the use of cookies implemented by Google LLC for the Site’s analytics services, for which the general privacy policy and specific information on cookies and Analytics services can be consulted.

Furthermore, the processing necessary for the proper functioning of the website, such as the use of technical session cookies, first-party and third-party cookies, as well as the transmission of data implicit in Internet communication protocols, is carried out in the legitimate interest of the data controller, pursuant to Article 6(1)(f) of the GDPR. 3. Categories of Processed Data

The categories of personal data of users, processed based on the aforementioned lawful conditions, are as follows:

• Personal and contact information (such as name, surname, telephone number, and email address) and additional categories of personal data that may be transmitted following the submission of messages or comments through the specific forms on the Site.
• Computer data, information contained in cookies used on the Site, as well as traffic data inherent in Internet communication protocols.

4. Processing Methods

The processing operations described above are carried out in compliance with the principles set out in Article 5 of the GDPR.

Processing is carried out using computer and electronic tools, adopting measures suitable to guarantee the security, integrity, and confidentiality of the data at all times. In particular, technical and organizational measures have been implemented to prevent unauthorized access, alteration, disclosure, and destruction of data.

Data transmissions between the user and the Site take place within an encrypted connection using the HTTPS protocol. To prevent the risk of accidental loss of personal data, automatic data backups are performed, while the data controller carries out periodic manual backups.

The user’s personal data will be processed until a request for their deletion is made by the user. 5. Data Disclosure

The personal data of users collected through the Site may be processed by employees and collaborators of the data controllers, who act based on specific instructions regarding the purposes and methods of processing, as stated in the acts of identification as authorized persons and appointments as data processors, pursuant to Articles 28 and 29 of the GDPR.

The main recipient of the data processed following access to and consultation of the Site is GoDaddy Operating Company LLC, the hosting and site-building service provider, which operates based on standard contractual clauses for the transfer of data to third countries (United States of America).

Information regarding additional recipients