This Privacy Policy provides information about the processing of personal data in connection with our website and services. It describes the purposes and means of processing, the categories of personal data concerned, the legal bases for processing, and your rights under applicable data protection law, including the General Data Protection Regulation (GDPR), where applicable.
Controller
The controller responsible for the processing of your personal data within the meaning of Art. 4(7) GDPR is:
Le Colibrì di Nuti Maria Giulia Sole trader/Individual
Via Mazzatinti, 1, 06024 Gubbio (PG), Italia
Email: edizioni@lecolibrieditrice.eu · Sito web: https://www.lecolibrieditrice.eu
Data Protection Officer
We have not appointed a Data Protection Officer. For all data protection matters, please use the contact details in the Controller section above.
Server log files
When you visit our website, our server automatically records the following information transmitted by your browser: the IP address of the requesting device; the date and time of the request; the page or file requested; the HTTP status code and volume of data transferred; the website from which you reached us, where transmitted; and your browser type, version and operating system.
Purpose: Delivering the website to your device, maintaining the security and stability of our systems, detecting and investigating attacks and misuse, and diagnosing faults.
Legal basis: Art. 6(1)(f) GDPR. Our legitimate interest lies in the secure, stable and functional operation of our website.
Retention: Log data is stored only for as long as it is required for these purposes, and is deleted as soon as it is no longer necessary for security analysis or troubleshooting. Retention is determined by our hosting provider.
Orders, payment and delivery
To process your order we use the data you provide at checkout: your name, billing and delivery address, email address, telephone number where given, and the details of your order.
Purpose: Concluding and performing the purchase contract, processing payment, arranging delivery, handling returns, refunds and warranty claims, and meeting our commercial and tax record-keeping obligations.
Legal basis: Art. 6(1)(b) GDPR for performance of the contract, and Art. 6(1)(c) GDPR for retention required by commercial and tax law.
Retention: Order and invoice data is retained for the statutory commercial and tax retention periods applicable to us, after which it is deleted. During that period the data is restricted and used only to meet those obligations.
Payment: Stripe, PayPal
Delivery: Post Italiane
Further recipients: Our tax adviser and, where applicable, our auditor, each bound by professional confidentiality.
Newsletter
We send a newsletter containing information about our products, services and offers. We process your email address, your first name, your last name, your telephone number, your country or region e your postcode, together with the date, time and IP address of your registration and of your confirmation.
How we obtain your consent: We use a double opt-in procedure. After you enter your address, we send you an email containing a confirmation link. Your address is added to our distribution list only once you have clicked that link. We record the registration and confirmation events, including the timestamp and IP address, because we are required to be able to demonstrate that valid consent was given.
Measurement: Our newsletters contain a tracking pixel and individualised links that tell us whether and when you opened a message and which links you clicked. We use this to tailor future content to the interests of our recipients. This measurement is covered by the consent you gave on signup.
Legal basis: Art. 6(1)(a) GDPR. The logging of the confirmation procedure rests on Art. 6(1)(f) and Art. 6(1)(c) GDPR, our interest and obligation being to evidence consent. Tracking of opens and clicks likewise rests on Art. 6(1)(a) GDPR.
Retention: We keep your address until you withdraw your consent. Records of your registration and confirmation are kept for as long as claims arising from the subscription may be asserted.
Withdrawal: You may withdraw your consent at any time with effect for the future, by using the unsubscribe link in any message or by writing to us at segreteria@lecolibrieditrice.eu. Withdrawal does not affect the lawfulness of processing carried out before it.
Recipients: Brevo, acting as our processor under Art. 28 GDPR.
Cookies
Some technologies store information on your device or access information already stored there – cookies, local storage, pixels and comparable methods. Under § 25(1) TDDDG this requires your prior consent, unless the technology is strictly necessary to provide a service you have expressly requested (§ 25(2) TDDDG). Separately, the GDPR governs what we do with any personal data obtained.
Strettamente Necessari – used without consent on the basis of § 25(2) TDDDG and Art. 6(1)(f) GDPR:
No cookies found for the requested category.
Requiring consent – set only after you have actively consented:
No cookies found for the requested category.
Managing your choices: We use the consent management platform WPLP Cookie Consent. No technology requiring consent is activated before you have given it. You can review and change your choices at any time, including withdrawing consent entirely, via the Cookie Settings button on our website. Withdrawing is as easy as giving consent and takes effect immediately for the future.
You can also configure your browser to refuse or delete cookies. Please note that this may impair the functionality of our website.
Protection against automated access
We use Cloudflare Turnstile to distinguish human visitors from automated access, in order to protect our forms and services against spam, misuse and automated attacks, and thereby to maintain the security and availability of our website. For this purpose your IP address, your interaction with the page, and the characteristics of your device and browser are processed.
Legal basis: Art. 6(1)(f) GDPR, our legitimate interest being to protect our services against automated misuse. Where the service stores or accesses information on your device beyond what is strictly necessary, we obtain your consent under § 25(1) TDDDG.
Role of the provider: The provider processes this data exclusively on our behalf, as our processor under Art. 28 GDPR, for the purpose of maintaining the security of the service described above.
Recipients of your data
We disclose your personal data only where this is necessary for the purposes described in this policy, where you have consented, or where we are legally required to do so.
Processors acting on our instructions: These providers process your data solely on our documented instructions under a contract meeting the requirements of Art. 28 GDPR, and may not use it for their own purposes.
Providers acting under their own responsibility: These providers determine the purposes of their own processing and are responsible for it under their own privacy policies.
We do not sell your personal data, and we do not disclose it to third parties for those parties’ own advertising purposes.
Professional advisers and public authorities: We may disclose personal data to our accountants, auditors and legal advisers where necessary, and to courts, tax authorities and law enforcement where we are required to do so by law.
Transfers outside Europe
Your personal data is processed exclusively within the European Economic Area.
Automated decisions
We do not use your personal data for automated decision-making within the meaning of Art. 22(1) GDPR, including profiling that produces legal effects concerning you or similarly significantly affects you.
I tuoi diritti
You have the right to object at any time to the processing of your personal data for direct marketing purposes. This right is unconditional and you do not need to give reasons. If you object, we will cease using your data for direct marketing immediately and permanently. To exercise it, use the unsubscribe link in any of our messages or write to us at segreteria@lecolibrieditrice.eu.
- Access — Art. 15. You may ask us to confirm whether we process personal data concerning you and to provide a copy. This covers not only the data you gave us but also data we have observed or derived about you.
- Rectification — Art. 16. You may require us to correct inaccurate data without undue delay, and to complete data that is incomplete.
- Erasure — Art. 17. You may require erasure where one of the grounds in Art. 17(1) applies. This right does not apply where we are legally required to retain the data, or where processing is necessary to establish, exercise or defend legal claims. Where we cannot erase data, we will tell you which exception applies and will restrict the data instead.
- Restriction — Art. 18. You may require us to store your data without otherwise using it, in the circumstances set out in Art. 18(1).
- Portability — Art. 20. Where we process your data by automated means on the basis of your consent or a contract with you, you may require it in a structured, commonly used and machine-readable format.
- Objection — Art. 21. Where we rely on legitimate interests, you may object on grounds relating to your particular situation. For direct marketing, see above.
- Withdrawal of consent — Art. 7(3). You may withdraw consent at any time, as easily as you gave it, with effect for the future.
- Complaint — Art. 77. You may complain to the authority in the Member State of your habitual residence, your place of work, or the place of the alleged infringement.
How to exercise your rights
Please send any request to segreteria@lecolibrieditrice.eu.
We respond without undue delay and in any event within one month of receiving your request. Where a request is complex, or where we have received a number of requests from you, we may extend this period by up to two further months, and will inform you of the extension and the reasons within the first month.
Exercising your rights is free of charge. Where a request is manifestly unfounded or excessive, in particular because it is repetitive, we may charge a reasonable fee or decline to act, and we will explain why.
We may need to verify your identity before acting on a request, so that we do not disclose your data to someone else. We will ask only for what is necessary for that purpose.
Security
We apply appropriate technical and organisational measures pursuant to Art. 32 GDPR to protect your data against unauthorised access, loss, alteration and disclosure. These include access controls with role separation and regular updating of our systems.
Children
Our services are not directed at persons under the age of 16, and we do not knowingly collect their personal data. If you believe that a child has provided us with personal data, please contact us at segreteria@lecolibrieditrice.eu and we will delete it.
Changes to this policy
We review this policy regularly and update it when our processing changes or the legal framework develops.
Where a change is material — in particular where we introduce a new purpose, a new category of recipient, or a new transfer outside the EEA — we will inform you before it takes effect, by a notice on this website. Where a change requires your consent, we will ask for it and will not proceed without it. Minor and clarifying amendments are published here with an updated version number and date.
Earlier versions of this policy are available from us on request.