Skip to main content

Privacy Policy

Confidentiality is a cornerstone of Elena Colombo Milano's relationship with its clients. We want you to understand what information we obtain, how we use it and how we protect your privacy.

Privacy Notice

Pursuant  Data Protection Act 2018  and Reg. UE 2016/679 (General Data Protection Regulation) we provide you the deserved information concerning processing of collected personal data. The notice is not valid for external links; Data Controller is not to be considered responsible for third parties’ web pages.

Personal data

Any information relating to an identified or identifiable natural person (‘data subject’); an identifiable natural person is one who can directly or indirectly be identified, in particular by reference to an identifier such as a name, an identification number, a location data, an online identifier or to one or more specific factors to the physical, physiological, genetic, mental, economic, cultural or social identity.

Navigation data

Computer systems and procedures software preceded to the operation of this site, acquire, during their normal exercise, some personal data whose transmission is implicit using Internet communication protocols. This category includes: IP addresses, URI/URL (Uniform Resource Identifier/Locator), time of request, type of request, outgoing packet size, server status of response (received, error, etc…) and other parameters related to the operating system.

Data provided by data subject

The optional, explicit and voluntary dispatching of messages to contact-addresses, as well as compilation and forwarding of  forms , involves the acquisition of sender’s personal data necessary to reply, as well as all the personal data included in messages themselves.

Detailed Notices

Detailed notices related to specific services or processing are available on specific pages of the site.

1. Who is the data controller? How to contact him?

Data Controller is Elena Colombo Milano

2. Has the Data Protection Officer been nominated? How to contact him?

The company has arranged to appoint a Data protection officer. - Contact: This email address is being protected from spambots. You need JavaScript enabled to view it.

3. Purposes, legal basis & data retention

Purpose A)

  1. Website browsing
  2. Contact form

Legal Basis

  1. Website browsing: Legitimate interest: processing is necessary for pursuing data controller’s (or third party) legitimate interest, provided that the interests or the fundamental rights and freedoms of the data subject are not overriding, taking into consideration his reasonable expectations based on the relationship with controller. Activities strictly necessary for site operation and platform browsing services.
  2. Contact form: Execution of pre-contractual measures also adopted on data subject’s request;

 Data Retention

 Website browsing: Single session. See cookie policy

 Contact form: 1 year

Nature Of Conferral

Apart from what specified on navigation data, the subject is free to furnish personal data.

The provision of personal data is mandatory or optional depending on the purpose for which the data is processed. Whether contacts data are not provided, the data processor won’t be able to supply his service. Data conferral for purpose B) is optional and, where lacking, personal data won’t be processed for such purpose; the denial of conferral will not undermine benefit from purpose A).

Purpose B)

Direct marketing

Whether the data subject fills any forms ment to collect data related to Direct Marketing purposesprior consent and until opposition for direct marketing, market research, direct sales, surveys on satisfaction degree, newsletters and promotionals, commercial and advertising material or regarding events and initiatives, through automated means of E-Mail or other types, as well as operator-phone calls, paper mail or other information pack. The Data Controller uses newsletters and promotional communication reports to compare and possibly improve results. Thanks to reports, the Data Controller will be able to discover, for example: the number of readers, single openings, unique “clickers” and clicks; devices and operating systems employed to read the communication; user’s detailed activity; details of sent, delivered and forwarded emails; All these data are employed with the purpose of comparing, and possibly improving, the result of communication.

Legal Basis

Consent: the data subject has given consent to the processing of his or her personal data for one or more specific purposes;

Data Retention

Until opposition (opt-out)

Nature Of Conferral

Data conferral for purpose B) is optional and, where lacking, personal data won’t be processed for such purpose; the denial of conferral will not undermine benefit from purpose A).

4. Who the collected data will be communicated to?

Provided data will be shared with recipients who will treat them as data processors and/or as natural person acting under the controller’s or processor’s authority for former purposes.

Namely, data will be shared with: Subjects providing services for information system management and communication networks (including E-mail boxes, newsletter services, among which MailUp S.p.a., freelancers, Offices or companies in the context of assistance and consultancy; Competent authorities for compliance with legal obligations and / or provisions of public bodies, upon request;

The list of data processors is constantly updated and available writing to the controller.

5. Does Controller transfer data to a third country and/or to international organisations?

Personal data will be transferred to countries within or outside the Uk or SEE, in order to fulfill contractual obligations and purposes within limits and under the conditions provided by art. 44 (General principle for transfers) od GDPR; art. 45 (Transfers on the basis of an adequacy decision) of GDPR. Data subject can obtain information regarding data transfer guarantees sending an E-Mail to Elena Colombo Milano

6. Are personal data processed by an automated mean?

We do not process data by automated mean, profiling included.

7. Which rights am I entitled to? How can I exercise them?

You may freely exercise your rights, at any time, addressing Data Protection Officer, sending an E-Mail to Contact: This email address is being protected from spambots. You need JavaScript enabled to view it.

You have the right, at any time, to obtain from the Data Controller the access to your personal data, request their rectification, erasure or processing restriction. Furthermore you have the right to object anytime to your personal data processing as well as to data portability. You have the right to oppose to the processing based upon consent and/or legitimate interest.

8. More information

Data controller retains the right to modify, update, add or remove parts of this statement at his own discretion, in any moment.