pursuant to Art. 13 of EU Regulation 2016/679 (GDPR)
Website: www.ortidipinti.it
1. Data Controller
The Data Controller is Community Garden APS, with registered office at Borgo Pinti, 76 – 50121 Florence (FI), VAT number: 94200270489.
Responsabile del trattamento: Giacomo Salizzoni
E-mail: info@ortidipinti.it
Telefono:
2. Types of Data Collected
The website collects the following personal data:
- Browsing data: IP addresses, browser type, operating system, pages visited, and time of visit. This data is collected automatically by the website’s IT systems.
- Data provided voluntarily by the user: name, email address, and any other data provided at the time of subscription to the newsletter.
3. Purposes and Legal Basis for Processing
Personal data are processed for the following purposes:
a) Newsletter management:
Legal basis: Consent of the data subject (Art. 6, par. 1, point (a) of the GDPR). Consent may be withdrawn at any time via the unsubscribe link found in every email or by writing to info@ortidipinti.it.
b) Statistical analysis and website improvement:
Legal basis: Legitimate interest of the Controller (Art. 6, par. 1, point (f) of the GDPR), to understand website usage and improve its content.
c) Compliance with legal obligations:
Legal basis: Legal obligation (Art. 6, par. 1, point (c) of the GDPR).
4. Processing Methods and Data Retention
Data are processed using electronic and automated tools and are stored on secure servers. The Controller implements appropriate technical and organizational measures to ensure data security.
Newsletter data are retained until consent is withdrawn.Browsing data are retained for a period not exceeding 26 months.
5. Communication and Disclosure of Data
Personal data are not sold to third parties nor disclosed to the public. They may be communicated exclusively to:
- Technical service providers hosting services, newsletter platforms) acting as Data Processors pursuant to Art. 28 of the GDPR.
- Competent authorities, in cases provided for by law.
The website uses Google Analytics for statistical analysis of visits. Data collected by Google are processed in accordance with Google LLC’s Privacy Policy. For more information, please visit: https://policies.google.com/privacy
6. Transfer of Data Abroad
The use of Google Analytics involves the transfer of data to the United States. Such transfers are carried out in compliance with the safeguards provided for by the GDPR (Adequacy Decisions or Standard Contractual Clauses).
7. Rights of the Data Subject
The data subject has the right to:
- Access to their personal data (Art. 15 GDPR)
- Rectification of inaccurate data (Art. 16 GDPR)
- Erasure of data – “right to be forgotten” (Art. 17 GDPR)
- Restriction of processing (Art. 18 GDPR)
- Data portability (Art. 20 GDPR)
- Object to the processing (Art. 21 GDPR)
- Withdraw consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal.
To exercise these rights, requests can be sent to: info@ortidipinti.it
The data subject also has the right to lodge a complaint with the Italian Data Protection Authority (Garante per la Protezione dei Dati Personali) at www.garanteprivacy.it.
8. Updates
This privacy policy is updated as of May 8, 2026. The Controller reserves the right to modify it at any time. Any changes will be published on this page.