Privacy Policy

Data controller

The controller of personal data collected through this website is Michele Cassata, Via Barone 52, 90023 Ciminna (PA), Italy, VAT no. 04844700825.

For any matter concerning your data you may write to info@michelecassata.it or call +39 091 820 4221.

What data we collect

This website collects personal data in one case only: when you voluntarily fill in the contact form. The data requested are your name, email address, type of enquiry and the text of your message. If you reach the form from the catalogue, your message may also contain references to the works you selected.

There are no analytics, advertising, profiling or tracking systems of any kind. We do not collect data about your browsing and we do not build user profiles.

As with any website, the hosting provider's server automatically records certain technical connection data (IP address, date and time of the request, page requested, browser type). These logs serve security and the correct operation of the service only.

Why we process it and on what legal basis

Form data is processed in order to answer your enquiry and, where it concerns a commission, to handle pre-contractual negotiations. The legal basis is the performance of pre-contractual measures taken at your request, under Article 6(1)(b) of Regulation (EU) 2016/679.

Technical server logs are processed on the basis of the controller's legitimate interest in ensuring the security of the infrastructure, under Article 6(1)(f).

Providing your data is optional, but without a name, an email address and a message we simply cannot reply.

How it is processed

The content of the form is forwarded by email to info@michelecassata.it and handled there as ordinary correspondence. The website keeps no copy of messages in any archive or database.

To counter automated unsolicited messages, the system performs some technical checks on the request and temporarily stores, in hashed form and for no more than one hour, a reference to the originating IP address, for the sole purpose of limiting repeated submissions. This data is not used for any other purpose.

Processing is carried out by electronic means, with security measures appropriate to prevent unauthorised access, loss or disclosure of data.

Who it is shared with

Data is never disseminated, sold or transferred to third parties for commercial purposes.

It may be accessed, as a processor under Article 28 GDPR, by the hosting and email provider Aruba S.p.A. (Via San Clemente 53, 24036 Ponte San Pietro — BG, Italy), which hosts the website and the mailbox.

Data is stored on servers located within the European Union. No transfers to third countries take place.

How long we keep it

Messages received through the form are kept in the mailbox for as long as is necessary to handle the enquiry and, where a commission follows, for the duration of the relationship and the subsequent periods required by tax and civil law.

Technical anti-spam references are deleted automatically within one hour. Server connection logs follow the hosting provider's retention policy.

Your rights

At any time you may request access to your data, its rectification or erasure, restriction of processing, portability in a machine-readable format, or object to processing, under Articles 15 to 22 of Regulation (EU) 2016/679.

To exercise these rights simply write to info@michelecassata.it. We will reply within one month of your request.

If you believe the processing of your data infringes the law, you have the right to lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it).

Changes to this notice

Any updates will be published on this page together with the revision date. We invite you to consult it from time to time.