Privacy Policy

Introduction

Therness considers the protection of its customers' and potential customers' personal data to be of fundamental importance, ensuring that the processing of personal data, whether automated or manual, complies fully with the protections and rights recognized by Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016, concerning the protection of natural persons with regard to the processing of personal data and the free movement of such data (hereinafter referred to as the "Regulation"), as well as other applicable data protection laws.

This "Privacy Policy" aims to describe how the website therness.com manages the processing of users' and visitors' personal data in accordance with the Regulation. Therness, in compliance with applicable regulations, intends to ensure protection and security in processing personal data for each visitor. Unless otherwise specified and governed by a specific privacy notice provided under Article 13 of the Regulation, this Privacy Policy should also be understood as a document providing the necessary information under Articles 13 and 14 of the Regulation for those who navigate the website and interact with the data controller through the offered services.

Data Processing Methods

The processing of personal data is mainly carried out using electronic procedures and tools for the strictly necessary period, in accordance with Article 5 of the Regulation. Personal data will be processed by the data controller only as necessary to achieve the main purpose.

Specifically, personal data will be processed for the minimum period necessary, as indicated in Recital 39 of the Regulation, that is, until the termination of any contractual relationship between the data subject and the data controller, subject to an additional retention period that may be required by law, as also provided in Recital 65 of the Regulation.

Types of Processed Data and Purposes Related to Website Navigation

The website provides informational and sometimes interactive content. While browsing the website, user information may be collected in the following ways:

Browsing Data

The IT systems and software procedures that operate the website acquire, during their normal functioning, certain personal data whose transmission is implicit in the use of Internet communication protocols. This category of data includes IP addresses, the type of browser used, the operating system, domain names and addresses of websites from which access or exit occurred, information on the pages visited within the site, access times, time spent on each page, internal path analysis, and other parameters related to the user's operating system and IT environment. These technical/informatic data are collected and used exclusively in an aggregated and non-identifying manner and may be used to ascertain responsibility in the event of hypothetical cybercrimes against the site.

Data Provided Voluntarily by the Visitor

This includes all personal data freely provided by visitors on the website, such as in the "Contact" section. Examples include personal details, email addresses, phone numbers, and other contact details provided through the website. These data will be used to respond to users' inquiries. The processing of such personal data will be carried out based on all information contained in the specific privacy notices provided in accordance with Articles 13 and 14 of the Regulation by the data controller during the registration process via designated forms.

‍

Data Subject Rights

As established by Article 15 of the Regulation, the data subject has the right to access their personal data, request rectification or updates if incomplete or incorrect, request deletion if the data was collected in violation of a law or regulation, and object to the processing for legitimate and specific reasons.

In particular, below are all the rights that can be exercised at any time against the data controller:

• Right of access: The right to obtain confirmation from the data controller whether or not personal data concerning them is being processed and, if so, access to such data and related information.
• Right to rectification: The right to obtain the correction of inaccurate personal data and to complete incomplete data.
• Right to erasure ("right to be forgotten"): The right to request the deletion of personal data without undue delay in specific circumstances outlined in Article 17 of the Regulation.
• Right to restriction of processing: The right to request the limitation of data processing under certain conditions specified in Article 18 of the Regulation.
• Right to data portability: The right to receive personal data in a structured, commonly used, and machine-readable format and to transmit it to another data controller.
• Right to object: The right to object at any time to the processing of personal data for direct marketing purposes, including profiling.
• Right to lodge a complaint with a supervisory authority: If the data subject believes that the processing of their personal data by the data controller violates the Regulation, they may lodge a complaint with the competent Data Protection Authority.

To exercise any of these rights, the data subject can contact the data controller, Pietro Paolo De Crescenzo, using the following methods:

• Sending an email to info@thernness.com

Google Analytics with Anonymized IP (Google Inc.)

This integration anonymizes your IP address. The anonymization works by shortening users' IP addresses within EU member states or other countries participating in the European Economic Area agreement. In exceptional cases, the IP address is sent to Google's servers in the United States and then shortened there.

Collected data: Cookies and usage data.
Processing location: USA

Changes to the Privacy Policy

This Privacy Policy applies to the website from the date of its publication. The entry into force of new regulations, as well as the continuous review and updating of the website’s terms of use, may require modifications to this document. Therefore, this Privacy Policy may change over time, and we encourage users to periodically check this page. Any changes to the privacy policy regarding the collection of personal data will be communicated to the data subjects by the data controller using the appropriate methods.

‍