This Privacy Policy describes the methods of processing personal data within the KotaWorld site and is provided in accordance with Regulation (EU) 2016/679 (GDPR) and applicable legislation.
Data Controller
The data controller is:
Eugenio Maria Zanatta
Administrator and KotaWorld manager
Types of data processed
Browsing data
The systems and procedures used for the operation of the site may acquire technical data whose transmission is implicit in the use of Internet communication protocols.
This may include, but is not limited to, IP addresses, requested URIs/URLs, date and time of the request, browser and device characteristics, information relating to the server's response and other technical parameters related to browsing.
This information may be processed to enable the operation of the site, ensure its security, diagnose technical problems, prevent misuse and, where applicable, obtain statistical information.
Data provided voluntarily
The voluntary sending of communications to the addresses indicated on the site involves the acquisition of the data necessary to receive and manage the request, including the address used by the sender and any data contained in the communication.
This data may be processed to respond to requests, manage editorial, professional or technical communications, evaluate proposals and manage relationships with users, collaborators, publishers, developers, agencies, event organizers and other subjects.
Any use for other purposes is carried out on the basis of the conditions of lawfulness provided for by the applicable legislation and, when necessary, subject to the consent of the interested party.
Special categories of data
KotaWorld does not ordinarily require the communication of special categories of personal data pursuant to art. 9 GDPR or data relating to criminal convictions and offences.
Users are therefore urged to avoid sending such information when it is not needed.
If they are voluntarily transmitted, the relevant processing is assessed in relation to the nature of the communication and the conditions provided for by the applicable legislation.
Purposes and legal bases
Personal data may be processed, depending on the circumstances, to:
- operation and security of the site, on the basis of the need to provide the requested service and/or the legitimate interest in security and proper functioning;
- management of requests, to follow up on the communications of the data subject and, where applicable, to adopt pre-contractual measures requested by the same;
- management of professional, editorial or contractual relationships, based on the relevant contractual and pre-contractual needs or the applicable legitimate interest;
- compliance with legal obligations;
- establishment, exercise or defence of rights;
- statistics, measurement and tracking tools, according to the conditions applicable to the relevant services;
- additional purposes subject to consent, when required by applicable law.
Cookies and tracking tools
KotaWorld may use cookies and other technical tools necessary for the operation of the site and, depending on the configuration adopted, additional statistical, functional, advertising or third-party technologies.
When required, the use of the tools concerned is managed according to the preferences expressed by the user.
For more information, see the Cookie Policy.
Automated technology tools and services
In carrying out its activities, KotaWorld may make use of technological tools and services also provided by third parties, including, where used, automated or artificial intelligence-based systems.
Any processing of personal data through these tools is carried out according to the purposes, legal bases and guarantees applicable to the relevant processing.
If automated processing subject to specific information obligations pursuant to applicable legislation is introduced, the data subjects will be provided with the requested information.
Processing methods and security
The processing is mainly carried out by means of IT and telematic tools and, where necessary, through organisational procedures.
Technical and organisational measures shall be adopted taking into account the nature of the data, the purposes of the processing and the risks reasonably associated with the activities carried out.
Data retention
Personal data are stored for the period necessary for the purposes for which they were collected and for any further periods required or permitted by applicable legislation.
In particular:
- technical and navigation data are stored according to the requirements of operation, security, diagnostics and prevention of misuse;
- communications are kept for the time necessary for their management and, when relevant, for the management of the consequent relationship;
- data subject to legal obligations is stored according to the relevant terms;
- the data necessary for the protection of rights may be kept within the limits of the applicable terms;
- The duration of cookies and similar tools depends on their configuration and the service used.
Recipients of the data
The data may be communicated, to the extent necessary for the relevant purposes, to providers of technical services, hosting, email, security, statistics, technological platforms, consultants, collaborators and other parties involved in the activities of the site.
The data may also be communicated to authorities or legitimate subjects in the cases provided for by law.
Depending on the circumstances, third parties may operate as data processors or as independent data controllers.
The data are not disseminated except in the cases provided for by law or when the dissemination derives from the nature of the request or from a voluntary action of the data subject intended for publication.
International transfers
The use of services provided by international operators may involve processing or transfer of data outside the European Economic Area.
Where applicable, such transfers are carried out on the basis of the conditions and safeguards provided for in Chapter V of the GDPR, also taking into account the measures taken by the relevant provider.
Rights of the data subject
In the cases and within the limits provided for by Articles 15-22 GDPR, the data subject may exercise the applicable rights, including:
- access to personal data;
- rectification;
- cancellation;
- restriction of processing;
- opposition;
- portability, where applicable;
- withdrawal of consent, where processing is based on consent.
Requests can be sent to:
The exercise of rights is subject to the conditions, limitations and any exceptions provided for by applicable law.
Complaint to the supervisory authority
The data subject may lodge a complaint with the Guarantor for the protection of personal data in the cases and according to the procedures provided for by the applicable legislation.
Third-Party Services and Sites
KotaWorld may contain links or integrate services operated by third parties.
The processing carried out independently by these parties through their websites or services is governed by their respective policies and conditions.
Updates
This Policy may be amended to reflect changes in the regulatory, technical, organizational, or related to the services you use.
The version published on this page is the one currently applicable.
