Last updated: 23/04/2025
1. Data Controller
The Data Controller of personal data is:
Letizia Dotti
VAT Number: 02109610382
Email: leti.dotti@gmail.com
Letizia Dotti independently manages this website and related activities, including mediumistic services and book sales.
2. Types of Data Collected
During navigation or through forms on the site, the following data may be collected:
- Personal identification data (name, surname)
- Contact information (email, phone number)
- Transaction data (billing and shipping addresses, order details)
- Data voluntarily provided by the user (messages, service requests)
- Technical data (IP address, browser type, operating system)
- Navigation data via cookies and analytics tools
3. Purpose of Data Processing
Personal data is collected for the following purposes:
- Provision of mediumistic services
- Management of book orders and fiscal obligations
- Responding to information requests
- Compliance with legal and tax obligations
- Traffic analysis and improvement of user experience (via analytics plugins)
- Optional sending of promotional communications (only with explicit consent)
4. Legal Basis for Processing
Personal data is processed:
- For the performance of a contract or pre-contractual measures (Art. 6(1)(b) GDPR)
- To comply with legal obligations (Art. 6(1)(c) GDPR)
- Based on the user’s consent (Art. 6(1)(a) GDPR) for marketing activities
- Based on legitimate interest (Art. 6(1)(f) GDPR) for statistical and security purposes
5. Processing Methods
Data processing is carried out using electronic and paper-based tools, in compliance with security measures to ensure confidentiality, integrity, and availability.
6. Data Retention
Data will be retained:
- For the duration necessary to provide the requested services
- To fulfill fiscal obligations (minimum 10 years for billing data)
- For promotional purposes until consent is withdrawn
7. Data Communication and Transfer
Data will not be disclosed to third parties, except for legal obligations or when strictly necessary for service provision (e.g., couriers, tax consultants).
Data will not be transferred outside the European Union. If such transfer occurs (e.g., plugins with foreign servers), all measures required by the GDPR will be adopted.
8. User Rights
In accordance with Articles 15-22 of the GDPR, users have the right to:
- Access their data
- Request rectification or deletion
- Object to processing or request restriction
- Receive their data in a portable format
- Withdraw consent (where provided)
- Lodge a complaint with the Data Protection Authority (www.garanteprivacy.it)
To exercise these rights, please contact [insert contact email].
9. Cookies and Analytics Tools
This site uses technical cookies and, with the user’s consent, analytical and profiling cookies. For more information, please refer to the separate Cookie Policy.