1. Data Controller
The data controller is Dynami S.r.l., with registered office at Via Montello 47, San Giovanni La Punta - 95037 (CT), Italy, VAT No. 05962330873.
Privacy requests email: privacy@dynami.it
2. Legal References
This privacy notice is provided pursuant to Art. 13 of Regulation (EU) 2016/679 (hereinafter "GDPR") and Italian Legislative Decree No. 196 of 30 June 2003, as amended by Legislative Decree No. 101 of 10 August 2018 ("Privacy Code"), to all individuals who interact with the website dynami.it.
3. Types of Data Collected
Browsing data
The computer systems and software procedures used to operate this website acquire, during their normal operation, certain personal data whose transmission is implicit in the use of Internet communication protocols. This includes: IP addresses, browser type, operating system, domain names and addresses of websites from which access or exit was made, pages visited, time of request, method used to submit the request to the server, and other parameters relating to the user's operating system and computing environment.
Data voluntarily provided by the user
The optional, explicit, and voluntary sending of messages through the website's contact form entails the acquisition of personal data entered by the user, including: first name, last name, email address, and phone number. Submitting the contact form requires explicit acceptance of this privacy notice.
Cookies and tracking technologies
For detailed information about the use of cookies, please refer to the Cookie Policy .
4. Purposes and Legal Basis for Processing
Personal data is processed for the following purposes:
- Website navigation — legal basis: legitimate interest of the controller (Art. 6(1)(f) GDPR) to ensure website functionality and security.
- Responding to contact requests — legal basis: consent of the data subject (Art. 6(1)(a) GDPR) and/or performance of pre-contractual measures (Art. 6(1)(b) GDPR).
- Managing bookings and services — legal basis: performance of a contract to which the data subject is party (Art. 6(1)(b) GDPR).
- Compliance with legal obligations — legal basis: legal obligation (Art. 6(1)(c) GDPR), including tax and accounting obligations.
- Anonymous statistical analysis — legal basis: consent of the data subject (Art. 6(1)(a) GDPR) for analytics cookies; legitimate interest for aggregate and anonymised statistics.
- Marketing and profiling — legal basis: explicit consent of the data subject (Art. 6(1)(a) GDPR), which may be withdrawn at any time.
5. Processing Methods and Retention
Personal data is processed using electronic and/or digital tools, with organisational and logical methods closely related to the stated purposes. Appropriate technical and organisational security measures are adopted to protect data from unauthorised access, loss, destruction, or damage.
Data is retained for the time strictly necessary to achieve the purposes for which it was collected, in compliance with the principle of minimisation set out in Art. 5(1)(e) of the GDPR. Specifically:
- Browsing data: deleted immediately after aggregated processing, except where required for the investigation of offences.
- Contact form data: retained for a maximum of 24 months from the date of the last interaction, unless a different legal obligation applies.
- Contractual data: retained for 10 years from the end of the contractual relationship, in accordance with civil and tax obligations.
- Cookie consent: the expressed preference is
stored for 12 months via the technical cookie
dynami_consent.
6. Data Recipients
Personal data may be disclosed to:
- Authorised personnel of the controller, within the limits of their respective duties.
- Technical service providers (hosting, website maintenance), acting as data processors pursuant to Art. 28 of the GDPR, with whom appropriate contractual agreements have been signed.
- Professional consultants (legal, tax) bound by confidentiality obligations.
- Public authorities, where required by law.
Data will not be disseminated to unspecified parties under any circumstances.
7. Data Transfers Outside the EU
Personal data is processed and stored on servers located within the European Union. Should it become necessary to transfer data to third countries, this will only occur where an adequacy decision by the European Commission exists (Art. 45 GDPR) or where appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission (Art. 46 GDPR).
8. Rights of the Data Subject
Pursuant to Articles 15–22 of the GDPR, users have the right to:
- Access (Art. 15) — obtain confirmation of the existence of processing and access their data.
- Rectification (Art. 16) — obtain correction of inaccurate data or completion of incomplete data.
- Erasure (Art. 17) — obtain deletion of their data, in the cases provided by law.
- Restriction (Art. 18) — obtain restriction of processing in certain circumstances.
- Data portability (Art. 20) — receive their data in a structured, commonly used, and machine-readable format.
- Objection (Art. 21) — object at any time to processing based on legitimate interest.
- Withdrawal of consent (Art. 7) — withdraw consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal.
To exercise these rights, users may send a written request to privacy@dynami.it . The controller will respond within 30 days of receiving the request.
9. Right to Lodge a Complaint
Data subjects who believe that the processing of their personal data infringes the GDPR have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la Protezione dei Dati Personali — www.garanteprivacy.it ), Piazza Venezia 11, 00187 Roma, Italy, email: protocollo@gpdp.it , certified email (PEC): protocollo@pec.gpdp.it .
10. Nature of Data Provision
The provision of browsing data is necessary for the use of the website; failure to provide it prevents access to the site.
The provision of data via the contact form is optional; however, failure to provide data marked as mandatory will make it impossible to fulfil the user's request.
Consent to analytics and marketing cookies is optional and may be withdrawn at any time via the cookie banner or browser settings.
11. Automated Decision-Making
The controller does not employ automated decision-making processes, including profiling, as referred to in Art. 22(1) and (4) of the GDPR, that produce legal effects concerning the data subject or similarly significantly affect them.
12. Changes to This Policy
The data controller reserves the right to amend this privacy notice at any time by publishing the updated version on this page with an indication of the date of last update. Users are advised to check this page periodically for any changes.