1. Data controller
The data controller is C22 Consulting S.r.l., Via San Tommaso d’Aquino 18A, 09134 Cagliari (CA), Italy, VAT No. 02897690901, acting through its legal representative pro tempore. You can contact the controller through the following channels:
- Post: C22 Consulting S.r.l., Via San Tommaso d’Aquino 18A, 09134 Cagliari (CA), Italy
- Email: info@c22.consulting
- Certified email (PEC): c22consulting@pec.it
2. Data Protection Officer (DPO)
The controller has appointed a Data Protection Officer (DPO) pursuant to Article 37 GDPR, who can be contacted at dpo@c22.consulting.
3. How this website works
This website consists of static pages. It does not use cookies or any other technology that stores information on your device, it contains no analytics, profiling or tracking tools, no data collection forms and no embedded third-party content. Fonts are hosted on the website itself, with no requests to external services. For details on cookies, see the Cookie Policy.
The only personal data processed are those described below.
5. Data you send by email
If you choose to write to one of the email addresses shown on this website, the controller processes your email address and any other data you decide to include in your message.
Purpose: to answer your request and handle any follow-up correspondence.
Legal basis: taking steps at your request prior to entering into a contract (Article 6(1)(b) GDPR) or, for other kinds of request, the controller’s legitimate interest in replying to those who contact it (Article 6(1)(f) GDPR).
Retention: for as long as needed to handle your request and, after that, for any period required by law or to protect the controller’s rights. If a contract follows from your request, your data are processed under the privacy notice provided at that stage.
Providing your data is optional, but without an email address the controller cannot reply to you. Please do not include unnecessary data in your messages, especially special categories of data (Article 9 GDPR).
6. Profiling and automated decisions
Your data are not used for profiling or for decisions based solely on automated processing (Article 22 GDPR).
7. Recipients of the data
Your data are processed by authorised and instructed staff of C22 Consulting S.r.l. They may also be processed on the controller’s behalf by the following processors, under Article 28 GDPR:
- the website hosting provider, for browsing data;
- the email service provider, for email messages.
An up-to-date list of processors is available from the controller on request. Your data are not published or passed on to third parties for their own purposes.
8. Transfers outside the European Union
If the providers listed in section 7 process data outside the European Economic Area, the transfer takes place only with the safeguards required by Articles 44–49 GDPR, in particular on the basis of a European Commission adequacy decision or of standard contractual clauses adopted by the Commission. You can ask the controller for information about the safeguards in place.
9. Your rights
Within the limits set by Articles 15–22 GDPR, you have the right to:
- access your personal data and obtain a copy (Article 15);
- have them rectified (Article 16) or erased (Article 17);
- obtain restriction of processing (Article 18);
- receive your data in a structured format and transmit them to another controller (Article 20), where processing is based on a contract or pre-contractual steps;
- object at any time, on grounds relating to your particular situation, to processing based on the controller’s legitimate interest (Article 21).
You can exercise your rights by writing to info@c22.consulting, to the certified email address c22consulting@pec.it or to the DPO (dpo@c22.consulting). The controller replies without undue delay and in any case within one month of your request, extendable in the cases set out in Article 12 GDPR.
10. Complaints to the supervisory authority
If you believe that the processing of your data infringes the GDPR, you can lodge a complaint with the Italian Data Protection Authority, Garante per la protezione dei dati personali (opens in a new tab, external site) (Article 77 GDPR), or with the supervisory authority of the Member State where you live or work, or bring proceedings before the courts (Article 79 GDPR).
11. Reporting form
The form for reporting gender equality violations (in Italian, opens in a new tab, external site) is not part of this website: it is a Microsoft Forms service reached through an external link. The data entered in the form do not pass through this website and are processed under the form’s own privacy notice and Microsoft’s terms of service.
12. Changes to this notice
The controller may update this notice, for example following changes to the website or to the law. The version in force is always the one published on this page, with the last-updated date shown at the top.