privacy policy

Dear Data Subject,

This notice describes the methods used to manage the website with regard to the processing of personal data of users who consult it, as well as the data‑processing practices carried out.
In compliance with Articles 13 (for data collected directly from the data subject) and 14 (for data not collected directly from the data subject) of Regulation (EU) 2016/679 (hereinafter GDPR), the following information is provided to the Users of this Website. It refers exclusively to the processing carried out through this Website and not through other websites that may be visited via links from this one, for which Users are advised to read the respective privacy notices issued by their own Controllers. This Website and any services offered through it are reserved for individuals who are at least eighteen years old. The Controller therefore does not process personal data relating to individuals under the age of 18. Upon request from such Users, the Controller will promptly delete any personal data unintentionally collected.

controller

PF Advisory

Category of Data Collected

Browsing DataIT systems and software procedures responsible for the operation of this website acquire, during their normal functioning, certain personal data whose transmission is implicit in the use of Internet communication protocols. This category of data includes: IP addresses, the type of browser used, the operating system, the domain name and addresses of websites from which access or exit occurred, information on the pages visited by users within the site, access time, time spent on each page, internal navigation paths, and other parameters related to the user’s operating system and IT environment. Such technical/informatic data are collected and used exclusively in aggregated and anonymous form. These data are processed for the purpose of enabling and monitoring the correct use of this website, as well as obtaining anonymous statistical information on its usage, and are deleted immediately after processing.

Cookies: Cookies are packets of information sent by a web server (e.g., the website) to the user’s Internet browser, automatically stored on the user’s computer and automatically returned to the server upon each subsequent visit to the site. For detailed information on the characteristics, types, methods of use, and options for removing, deleting, or disabling the cookies used on this website, please refer to the specific Cookie Policy;

Common data voluntarily provided by the user: including identification data, personal details, billing information, and similar data.

Purposes of the Processing of Collected Data

1. To follow up on specific requests made by the User to the Controller through the Website and its communication tools (contact form, information request forms, and similar tools).
2. To send informational communications regarding the Controller’s services, following a request for information submitted via email, contact form, or other communication tools.
3. To manage registration for events organized by the Controller and any related activities (e.g., verifying participation, sending notices regarding updates or changes to the event, etc.).
4. For other purposes that are accessory or related to those listed above, and in any case falling within the scope of the Website’s activities.

The processing of data provided in a general manner—also following automatic collection during browsing—will be carried out solely for the purpose of verifying and controlling access to the Website. This also applies to technical cookies, understood as session, functionality, or analytics cookies that meet the requirements specified by the Data Protection Authority. In particular, regarding analytics cookies, it is clarified that they may be treated as technical cookies when they are created and used directly by the Website. In any case, for such analytics cookies, the Website—also in accordance with the clarifications of the Data Protection Authority—has implemented IP address anonymization and data‑processing adjustments. The collection and use of such browsing data (with IP anonymization in place) allow monitoring of the Website’s performance and help improve the service offered, providing the User with a better browsing experience. For further details, please refer to the dedicated Cookie Policy.

Legal Basis

Fulfilment of contractual or pre‑contractual obligations related to the User’s request (for example, requests for information regarding the Controller’s services, quotation requests, etc.);
Consentexpressed through the free and informed completion of the relevant information fields in the form dedicated to data collection and through ticking the appropriate checkbox where required;
Legitimate interest, aimed at ensuring the proper functioning of the service by exercising the Controller’s rights within the context of the information society, performing the contractual service, and carrying out direct marketing activities in the manner, by the means, and within the time limits permitted by law.

It should be noted that completing the specific fields provided in the forms for requesting information is inherent to the request itself and therefore constitutes the fulfilment of a pre‑contractual or contractual obligation, depending on the context. Consent may subsequently be requested for the processing of additional data.

Mandatory or Optional Nature of Providing Data

The provision of browsing data by Users, for the purposes described above, depends on the level of privacy enabled or disabled through their browser settings. In some cases, disabling certain settings may affect navigation on this Website. For certain sections or forms on this Website, the provision of browsing data and/or the use of technical cookies is mandatory for the proper functioning of the Website itself.
The provision of certain personal data is, in any case, necessary due to the structure of the Website and its procedures. Any request for additional optional data will be preceded by a specific approval checkbox. The provision of all other data is optional, depending on the type of information the User wishes to provide to the Website.

Notwithstanding the above, the provision of common personal data and contact details (email and telephone) is necessary in order to respond to requests submitted through the contact form, as well as any other mandatory data indicated therein with an asterisk. All other data are optional.
Failure to provide the data necessary for the requested action (for example, an email address when submitting a request for information through the relevant form) makes it impossible for the Controller to process the request.

Recipients or Categories of Recipients

The data may be communicated to companies associated with and/or linked to the Controller, as well as to consultants or third parties who operate, including on behalf of the Controller, for the fulfilment of services connected to the purposes indicated in this notice, with whom an agreement pursuant to Article 28 GDPR has been established. Data may also be communicated to banks and other independent Controllers whose processing is necessary for the purposes indicated, as well as to public bodies and other public authorities where such communication is required by law or by order of an Authority.
Browsing data and similar information (as referenced above), as well as profiling cookies, including those from third parties (as detailed in the Website’s Cookie Policy), will be communicated to the respective third parties concerned, where they do not manage such data directly as Controllers.

In any case, the data will not be disseminated.

Data Retention

Common personal data and contact details voluntarily provided by the Data Subject will be retained for a period not exceeding 1 year, after which they will be deleted if no professional engagement or acceptance of a quotation has followed.
Browsing Data will be retained, in compliance with the principle of proportionality, in a form that allows the identification of the Data Subject for no longer than is necessary for the purposes for which they were collected or subsequently processed (please refer to the Cookie Policy).

The above retention periods do not apply in cases where it is necessary to retain the data for a longer period in order to defend or assert a right, or to comply with legal obligations or orders issued by Authorities.

Data Subject’s Rights

Each Data Subject has the right of access, rectification, erasure (right to be forgotten), restriction of processing, notification in case of rectification, erasure or restriction, data portability, objection, and the right not to be subject to automated individual decision‑making, including profiling, pursuant to Articles 15 to 22 of the GDPR. These rights may be exercised in the manner and within the limits set out in Article 12 GDPR, by sending a written communication to the Controller (see section 10).

The Controller will provide an appropriate response as soon as possible and in any case within 1 month from receipt of the request.

Consent, where applicable, may be withdrawn at any time and/or the Data Subject may exercise their rights by sending:

a) a registered letter with return receipt to the Controller, containing an explicit request;

b) an email to info@pfadvisory.it

Right to Lodge a Complaint with the Supervisory Authority

Each Data Subject has the right to lodge a complaint, pursuant to Articles 77 et seq. of the GDPR, with a supervisory authority, which for Italy is the Garante per la protezione dei dati personali (Italian Data Protection Authority). The procedures, methods, and time limits for submitting a complaint are established and regulated by the applicable national legislation. Lodging a complaint does not affect the right to pursue administrative or judicial remedies, which in Italy may be brought either before the Garante or before the competent Court.

Social Media Plug-ins

This website may contain plug-ins from certain social media platforms. Social plug-ins are special tools that allow the functionalities of social networks to be integrated directly into the website and are identified by the logo of the respective social platform. When you visit a page on this website and interact with the plug-in, the corresponding information is transmitted directly from your browser to the social network platform and stored by it. For information regarding the purposes, types, and methods of collection, processing, use, and storage of personal data by the social network platform, as well as the ways in which you may exercise your rights, please refer to the privacy policy of the respective social network.

Existence of Automated Decision-Making

The processing does not involve any automated decision-making..

Transfer of Data to a Third Country or an International Organisation

The Controller will not transfer personal data to a third country or to an international organisation, except with regard to those third‑party services/components embedded in the website, as described in the sections below together with their respective policies.