Privacy Policy | Sustainability International

In relation to the GDPR, the Reg. (EU) 679/2016 in material protection of personal data, entered into force in all Europe at May 25th 2018.

This application is linked to personal data of the user's property.

This document contains a dedicated section that is intended to be protected and is subject to privacy.

This document can be stamped using the stamp command present in the browser setting.

Data controller:

Sabino De Mieri

Gallarate (Varese)

E-mail: sustainability.international23@gmail.com

Types of Data collected

Among the Personal Data collected by this Application, either independently or through third parties, there are: first name; last name; email address, phone number. navigation data.

Complete details on each type of Personal Data collected are provided in the dedicated sections of this privacy policy or by specific information texts displayed before the Data are collected.
Personal Data may be freely provided by the User, or, in the case of Usage Data, collected automatically when using this Application.
Unless otherwise specified, all Data requested by this Application is mandatory. Failure to provide this Data may make it impossible for this Application to provide its Service. In cases where this Application specifically states that some Data is mandatory, Users are free not to communicate this Data without any consequences on the availability or operation of the Service.

Users who are uncertain about which Data is mandatory are encouraged to contact the Owner.
Any use of Cookies - or other tracking tools - by this Application or by the owners of third-party services used by this Application is intended to provide the Service requested by the User, in addition to the other purposes described in this document and in the Cookie Policy section.

The User assumes responsibility for the Personal Data of third parties obtained, published or shared through this Application.

Method and place of processing of the collected data

Italy

Methods of processing

The Data Controller takes appropriate security measures to prevent unauthorized access, disclosure, modification or destruction of Personal Data.
The processing is carried out using IT and/or telematic tools, with organizational methods and with logic strictly related to the purposes indicated. In addition to the Data Controller, in some cases, other parties involved in the organization of this Application (administrative, commercial, marketing, legal, system administration personnel) or external parties (such as third party technical service providers, mail carriers, hosting providers, IT companies, communications agencies) may have access to the Data, also appointed, if necessary, as Data Processors by the Data Controller. The updated list of Data Processors may always be requested from the Data Controller.

Place

The Data is processed at the Data Controller's operating offices and in any other places where the parties involved in the processing are located. For further information, contact the Data Controller.
The User's Personal Data may be transferred to a country other than the one in which the User is located. To obtain further information on the place of processing, the User can refer to the section containing details on the processing of Personal Data.

Retention period

Unless otherwise stated in this document, Personal Data is processed and stored for the time required by the purpose for which it was collected and may be stored for a longer period due to any legal obligations or on the basis of the consent of the Users.

Purposes of the Processing of Collected Data

The User's Data is collected to allow the Owner to provide its Service, comply with legal obligations, respond to requests or enforcement actions, protect its rights and interests (or those of Users or third parties), identify any malicious or fraudulent activity, as well as for the following purposes: Platform and hosting services and Contacting the User.

To obtain detailed information on the purposes of the processing and on the Personal Data processed for each purpose, the User may refer to the section "Detailed information on the processing of Personal Data".

Detailed information on the processing of Personal Data

Personal Data is collected for the following purposes and using the following services

Contacting the User

Contact form (this Application)

By filling in the contact form with their Data, the User consents to their use to respond to requests for information, quotes, reservations or any other kind of request as indicated by the form header.

Personal Data processed: last name, first name, email, navigation data.

SPAM protection

This type of service analyzes the traffic of this Site, potentially containing Personal Data of Users, in order to filter it from parts of traffic, messages and contents recognized as SPAM.

Statistics

The services contained in this section allow the Data Controller to monitor and analyze traffic data and are used to keep track of User behavior.

Google Analytics (Google Ireland Limited)

Google Analytics is a web analysis service provided by Google Ireland Limited ("Google"). Google uses the Personal Data collected for the purpose of tracking and examining the use of this Site, compiling reports and sharing them with other services developed by Google.

Google may use Personal Data to contextualize and personalize the advertisements of its own advertising network.

Personal Data collected: Cookies and Usage Data.

Place of treatment: Ireland – Privacy Policy – Opt Out. Subject adhering to the Privacy Shield.

Platform and hosting services

These services have the purpose of hosting and running key components of this Application, making it possible to provide this Application from a single platform. These platforms provide the Owner with a wide range of tools such as analytics, user registration management, commenting and database management, e-commerce, payment processing, etc. The use of such tools involves the collection and processing of Personal Data.

Some of these services work through geographically distributed servers in different locations, making it difficult to determine the exact location where the Personal Data is stored.

Wix (Wix.com, Ltd.)

Wix is a platform provided by Wix.com, Ltd. that allows the Owner to develop, operate and host this Application. Wix is an extremely versatile and customizable tool that allows you to host various types of websites ranging from simple blogs to complex e-commerce platforms.

Personal Data processed: billing address; email address; shipping address; payment information; first name; last name; phone number.

Place of treatment: Israel – Privacy Policy.

Hosting and backend infrastructure

This type of service has the function of hosting Data and files that allow this Application to function, allow its distribution and provide a ready-to-use infrastructure to provide specific features of this Application.

Some of the services listed below, if any, may work on geographically distributed servers, making it difficult to determine the actual location where the Personal Data is stored.

Google Ad Manager

Google Ad Manager is an advertising service provided by Google LLC or by Google Ireland Limited, depending on how the Owner manages the processing of the Data, with which the Owner may run advertising campaigns in conjunction with external advertising networks with which the Owner, unless otherwise specified in this document, has no direct relationship.
Users who do not wish to be tracked by different advertising networks can use Youronlinechoices. In order to understand Google's use of data, please consult the Google partner policy.
This service uses the "DoubleClick" Cookie, which tracks the use of this Application and the User's behavior in relation to advertisements, products and services offered.

The User can decide at any time to disable all DoubleClick cookies by going to: Ad Settings.

Personal Data processed: Cookies; Usage data.

Place of treatment : United States – Privacy Policy; Ireland – Privacy Policy.

Category of personal information collected under the CCPA: Internet or other network activity information.

This type of treatment constitutes:

a sale under the CCPA, VCDPA, CPA, CTDPA, and UCPA
a sharing under the CCPA
targeted advertising under the VCDPA, CPA, CTDPA, and UCPA

Google Ads Conversion Tracking

Google Ads Conversion Tracking is a statistics service provided by Google LLC or by Google Ireland Limited, depending on how the Owner manages the Data processing, which connects data from the Google Ads advertising network with actions performed within this Application.

Personal Data processed: Usage Data; Tracking Tools.

Place of treatment: United States – Privacy Policy; Ireland – Privacy Policy.

Category of personal information collected under the CCPA: Internet or other network activity information.

This type of processing constitutes:

a sale under the CCPA, VCDPA, CPA, CTDPA, and UCPA

targeted advertising under the CPA, CTDPA, and UCPA

Displaying content from external platforms

This type of service allows you to view content hosted on external platforms directly from the pages of this Application and interact with them.
In the event that a service of this type is installed, it is possible that, even if the Users do not use the service, it collects traffic data relating to the pages in which it is installed.

• Instagram (Meta Platform Inc.) - United States - Privacy Policy

Additional information for users

Legal basis for processing

The Owner processes Personal Data relating to the User if one of the following conditions applies:

the User has given consent for one or more specific purposes.
Processing is necessary for the performance of a contract with the User and/or for the execution of pre-contractual measures;
Processing is necessary for compliance with a legal obligation to which the Owner is subject;
Processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the Owner;
Processing is necessary for the pursuit of the legitimate interests pursued by the Owner or by third parties.

In any case, it is always possible to ask the Owner to clarify the specific legal basis of each treatment and in particular to specify whether the treatment is based on the law, provided for by a contract or necessary to conclude a contract.

Further information on the retention period

Unless otherwise indicated in this document, Personal Data are processed and stored for the time required by the purpose for which they were collected and may be stored for a longer period due to any legal obligations or on the basis of the consent of the Users.

Therefore:

Personal Data collected for purposes related to the performance of a contract between the Owner and the User will be retained until such contract has been fully performed.
Personal Data collected for purposes related to the legitimate interest of the Owner will be retained until such interest is fulfilled. The User may obtain further information regarding the legitimate interest pursued by the Owner in the relevant sections of this document or by contacting the Owner.

When the processing is based on the User's consent, the Owner may retain Personal Data for a longer period until such consent is revoked. Furthermore, the Owner may be obliged to retain Personal Data for a longer period to comply with a legal obligation or an order of an authority.

At the end of the retention period, Personal Data will be deleted. Therefore, at the expiration of such period, the right of access, cancellation, rectification and the right to data portability can no longer be exercised.

User rights under the General Data Protection Regulation (GDPR)

Users may exercise certain rights with respect to the Data processed by the Owner.

In particular, within the limits set by law, the User has the right to:

Withdraw consent at any time. The User may withdraw consent to the processing of their Personal Data previously expressed.
Object to the processing of their Data. The User may object to the processing of their Data when it occurs pursuant to a legal basis other than consent.
Access their Data. The User has the right to obtain information on the Data processed by the Owner, on certain aspects of the processing and to receive a copy of the Data processed.
Verify and request rectification. The User can verify the accuracy of their Data and request its updating or correction.
Obtain the restriction of processing. The User may request the restriction of the processing of their Data. In this case, the Owner will not process the Data for any purpose other than its storage.
Obtain the deletion or removal of your Personal Data. The User can request the deletion of their Data by the Owner.
Receive their Data or have it transferred to another owner. The User has the right to receive their Data in a structured, commonly used and machine-readable format and, where technically feasible, to have it transferred without hindrance to another owner.
File a complaint. The User can file a complaint with the competent data protection supervisory authority or take legal action.

Users have the right to obtain information regarding the legal basis for the transfer of Data abroad including to any international organization governed by international law or consisting of two or more countries, such as the UN, as well as regarding the security measures adopted by the Owner to protect their Data.

Details on the right to object

When Personal Data is processed in the public interest, in the exercise of public authority vested in the Owner or to pursue a legitimate interest of the Owner, Users have the right to object to the processing for reasons related to their particular situation.

Users are informed that, if their Data is processed for direct marketing purposes, they can object to the processing at any time, free of charge and without providing any justification. If Users object to the processing for direct marketing purposes, the Personal Data is no longer processed for such purposes. To learn whether the Owner processes Data for direct marketing purposes, Users can refer to the relevant sections of this document.

How to exercise your rights

To exercise their rights, Users may send a request to the Data Controller's contact details indicated in this document. The request is free of charge and the Data Controller will respond as soon as possible, in any case within one month, providing the User with all the information required by law. Any corrections, cancellations or limitations of the processing will be communicated by the Data Controller to each of the recipients, if any, to whom the Personal Data have been transmitted, unless this proves impossible or involves a disproportionate effort. The Data Controller will inform the User of these recipients if he/she requests it.

Additional information for users in Switzerland

This section applies to Users in Switzerland and, for such Users, replaces any other information that may be divergent or conflicting in the privacy policy.

Further details regarding the categories of Data processed, the purposes of the processing, the categories of recipients of the personal data, if any, the retention period and other information on Personal Data can be found in the section entitled "Detailed information on the processing of Personal Data" within this document.

User rights under the Federal Act on Personal Data Protection

Users may exercise certain rights regarding their data within the limits of the law, including the following:

Right to access Personal Data;
The right to object to the processing of their Personal Data (which also allows Users to request the restriction of the processing of Personal Data, the erasure or destruction of Personal Data, the prohibition of disclosure of Personal Data to third parties);
The right to receive their Personal Data and to transfer it to another controller (data portability);
The right to request the rectification of incorrect Personal Data.

How to exercise these rights

Any requests to exercise the User's rights can be addressed to the Owner through the contact details provided in this document. These requests are free of charge and the Owner will respond as soon as possible, providing Users with the information required by law.

More information about processing

Defense in court

The User's Personal Data may be used by the Owner in court or in the preparatory stages of its possible establishment for the defense against abuse in the use of this Application or related Services by the User.
The User declares to be aware that the Owner may be required to reveal the Data by order of public authorities.

Specific information

Upon request of the User, in addition to the information contained in this privacy policy, this Application may provide the User with additional and contextual information regarding specific Services, or the collection and processing of Personal Data.

System logs and maintenance

For needs related to operation and maintenance, this Application and any third-party services used by it may collect system logs, which are files that record interactions and may also contain Personal Data, such as the User's IP address.

Information not contained in this policy

Further information in relation to the processing of Personal Data may be requested at any time from the Data Controller using the contact details.

Changes to this privacy policy

The Data Controller reserves the right to make changes to this privacy policy at any time by giving notice to Users on this page and, if possible, on this Application and, if technically and legally feasible, by sending a notification to Users via any contact information available to the Data Controller. Please therefore consult this page frequently, referring to the date of the last modification indicated at the bottom.
If the changes affect processing based on consent, the Data Controller will collect the User's consent again, if necessary.

Last updated: April 15th 2025