Types of Data Collected

It is possible to visit our website anonymously.
Among the personal data collected by www.corteanna.com, either independently or through third parties, are: Cookies, usage data, Email, Name, and various types of Data.

Complete details on each type of collected data are provided in the dedicated sections of this privacy policy or through specific informative texts displayed prior to the collection of such data.

Personal Data may be freely provided by the User or, in the case of Usage Data, collected automatically during the use of the site.

In cases where the site indicates certain data as optional, Users are free to refrain from communicating such data, without this affecting the availability or functioning of the Service.

Users who have doubts about which data are mandatory are encouraged to contact the Data Controller.

Any use of Cookies – or other tracking tools – by the site or by third-party service providers used by the site, unless otherwise specified, is aimed at providing the Service requested by the User, in addition to any other purposes described in this document and in the Cookie Policy, if available.

The User assumes responsibility for the Personal Data of third parties obtained, published, or shared through the site and guarantees to have the right to communicate or disseminate them, releasing the Owner from any liability to third parties.

Methods and Place of Processing of Collected Data

Processing Methods

The Data Controller processes the Personal Data of Users by adopting appropriate security measures to prevent unauthorized access, disclosure, alteration, or destruction of Personal Data.
Processing is carried out using computers and/or IT-enabled tools, with organizational methods and logics strictly related to the purposes indicated.

In addition to the Data Controller, in some cases, certain categories of persons involved in the organization of the site (administrative, commercial, marketing, legal, system administrators personnel) or external parties (such as third-party technical service providers, postal couriers, hosting providers, IT companies, communication agencies) may have access to the Data, appointed, if necessary, as Data Processors by the Data Controller. An updated list of these parties may always be requested from the Data Controller.

Legal Basis of Processing

The Data Controller processes Personal Data relating to the User if one of the following conditions exists:

1. The User has given consent for one or more specific purposes; Note: In some jurisdictions, the Data Controller may be authorized to process Personal Data without the User’s consent or another legal basis specified below, as long as the User does not object (“opt-out”) to such processing. However, this is not applicable if the processing of Personal Data is governed by European legislation on the protection of Personal Data;
2. Processing is necessary for the performance of a contract with the User and/or for the execution of pre-contractual measures;
3. Processing is necessary to comply with a legal obligation to which the Data Controller is subject;
4. Processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the Data Controller;
5. Processing is necessary for the purposes of the legitimate interests pursued by the Data Controller or by a third party.

Nevertheless, it is always possible to ask the Data Controller to clarify the specific legal basis of each processing and in particular to specify whether the processing is based on the law, provided for by a contract, or necessary to conclude a contract.

Location

• The Data is processed at the Data Controller’s operating offices and in any other places where the parties involved in the processing are located. For further information, contact the Data Controller.
• The User’s Personal Data may be transferred to a country other than the one in which the User is located. To obtain further information regarding the location of the processing, the User can refer to the section concerning details about the processing of Personal Data.
• The User has the right to obtain information regarding the legal basis of the transfer of Data outside the European Union or to an international organization governed by public international law or established by two or more countries, such as the United Nations, as well as regarding the security measures adopted by the Data Controller to protect the Data.
• If one of the aforementioned transfers takes place, the User can refer to the respective sections of this document or request information from the Data Controller by contacting them using the details provided at the beginning.

Data Retention Period

Data is processed and stored for the time required by the purposes for which it was collected.
Therefore:

• Personal Data collected for purposes related to the performance of a contract between the Data Controller and the User will be retained until the completion of such contract.
• Personal Data collected for purposes related to the legitimate interests of the Data Controller will be retained until such interests are fulfilled. The User can obtain further information regarding the legitimate interest pursued by the Data Controller in the relevant sections of this document or by contacting the Data Controller.

When processing is based on the User’s consent, the Data Controller may retain Personal Data for a longer period until such consent is revoked. Additionally, the Data Controller may be required to retain Personal Data for a longer period in compliance with a legal obligation or by order of an authority.
At the end of the retention period, Personal Data will be deleted. Therefore, upon expiration of this period, the right to access, delete, rectify, and the right to data portability cannot be exercised.

Purposes of Processing Collected Data

User Data is collected to allow the Data Controller to provide its Services, as well as for the following purposes: Statistics, Address Management and Email Sending, Payment Management, Interaction with social networks and external platforms, Contacting the User, Spam Protection, Affiliate Marketing, Landing Page and Invitation Page Management, Content and Feature Performance Testing (A/B testing), User Database Management, Heat mapping and session recording, Interaction with online survey platforms, and Interaction with live chat platforms.
For further detailed information on the purposes of processing and the Personal Data relevant to each purpose, the User can refer to the relevant sections of this document.

Details on the Processing of Personal Data

Personal Data is collected for the following purposes and using the following services:

Facebook Permissions requested by this Site

This Site may request certain Facebook permissions that allow it to perform actions with the User’s Facebook account and to collect information, including Personal Data, from it.
For more information about the following permissions, refer to the Facebook permission documentation and the Facebook privacy policy.

The requested permissions are as follows:

Basic information

Basic information of the User registered on Facebook, which normally includes the following Data: ID, name, picture, gender, language, and, in some cases, the User’s Facebook “Friends.” If the User has publicly provided additional Data, it will be available.

Sharing

Sharing on behalf of the User.

Insights

Provides access to Insight data for pages, applications, and domains owned by the User.

Likes

Provides access to the list of all pages that the User has liked.

Friends’ about me

Provides access to the “about me” section of friends’ profiles.

Access to private data

Allows access to the User’s and friends’ private data.

Access to activities

Provides access to the User’s activity list.

Access to friends lists

Provides access to lists of friends created by the User.

Access to requests

Provides read access to the User’s friend requests.

Access to News Feed

Provides access to the News Feed posts and allows the application to search it.

Status update

Updates the User’s status.

Implementation for Contacting the User and being contacted by the User.

Mailing List or Newsletter (This Site)

By registering for the mailing list or newsletter, the User’s email address is automatically added to a list of contacts to whom email messages containing information, including commercial and promotional information, regarding this Site may be transmitted. The User’s email address may also be added to this list as a result of registering for this Site or after making a purchase.
Personal data collected: Email and Name.

Contact form (This Site)

By filling in the contact form with their Data, the User consents to their use for responding to requests for information, quotes, or any other kind of request as indicated by the form’s header.
Personal data collected: Email and Name.

Whatsapp WEB (Facebook Inc.)

The “Contact us with Whatsapp” button, and associated widgets, are messaging services for interacting via the web application “Whatsapp.”
Location of processing: USA

1. Update of Terms of Service and Privacy Policy for users in the European Union
2. Whatsapp Privacy Policy

Facebook Messenger (Facebook Inc.)

The “Contact us with Facebook Messenger” button, and associated widgets, are messaging services for interacting via the web application “Facebook Messenger.”
Location of processing: USA

Policy on data collected by Facebook (This policy describes the information we process to support Facebook, Instagram, Messenger, and other products and functions offered by Facebook Inc.)

Address Management and Email Sending

• These services allow for the management of a database of email contacts, phone contacts, or contacts of any other type used to communicate with the User.
• These services may also allow for the collection of data concerning the date and time of message viewing by the User, as well as the User’s interaction with them, such as information on clicks on links inserted in the messages.

MailChimp (The Rocket Science Group, LLC.)