Information on the processing of personal data drawn up and provided by Giovanni Carrieri as Data Controller, pursuant to art. 13 of Legislative Decree 196/2003 "Code on the protection of personal data" (hereinafter also the "Code") and pursuant to artt. 13 and 14 of EU Regulation 2016/679 on the protection of the personal data of natural persons (hereinafter also the "Regulation" or "GDPR"), to Users who browse the acquisizioniforensi.com sites (including their subdomains, such as certo.acquisizioniforensi.com and locus.acquisizioniforensi.com) and acquisizioniforensi.it (hereinafter, jointly, also just the "Site").

The following information is provided for the acquisizioniforensi.com sites (and their subdomains, such as certo.acquisizioniforensi.com and locus.acquisizioniforensi.com) and acquisizioniforensi.it, and not for any other websites that the User may consult via links. The Data Controller will collect and process the types of data listed below in accordance with the provisions of the Code and the Regulation.

I. Data Controller and contact information

The Data Controller is Giovanni Carrieri, with registered office in Bari, via Camillo Rosalba no. 49 – tel. +39 351 3608259, certified e-mail (PEC): acquisizioniforensi@pec.it, VAT no. 07669810728.

Data Protection Officer – The role of Data Protection Officer is held by the Data Controller himself. The data subject may contact the DPO for any need regarding the processing of their data, by sending the request to the e-mail: certo@acquisizioniforensi.com

II. Methods of Processing

The Data Controller processes the personal data provided and/or collected from users by means of IT and/or electronic tools, adopting appropriate security measures aimed at preventing unauthorised access to the systems and, therefore, their unauthorised disclosure, modification or destruction.

Personal data is also processed in aggregate form, with organisational methods and logic strictly suited to the purposes indicated in this information notice. On some occasions, the data may be viewed by categories of persons authorised by the Data Controller, also referred to as data processing officers and involved in organising the provision of the services connected to the website (such as, for example, administrative or commercial staff, the marketing department, the legal office or system administrators) or also by external parties (third-party technical service providers, couriers, hosting providers) who will be appointed, where the Data Controller deems it necessary, as Data Processors. The updated list of Processors and officers may always be requested by the data subject and is available at the Data Controller's registered office.

III. Types of Data collected and purposes

a) Contact data

This data is requested from the User when filling in the information request form on the Site and includes: First name, Surname, Location, Nationality, Mobile telephone number, Date of birth and e-mail and personal website, and may be processed by the Data Controller for the following purposes:

to fulfil the User's specific requests;
to comply with legal obligations;
subject to the User's consent, to gauge their level of satisfaction with the products and/or services offered, in relation to the analysis of purchasing habits and choices, as well as to carry out market research conducted directly by the Data Controller.

The purposes referred to in points 2) and 3) above may also be pursued by the Data Controller through the use of cookies, as specified in point V of this notice, prepared pursuant to the Italian Data Protection Authority's Provision of 8 May 2014 "Identification of simplified procedures for providing information and obtaining consent for the use of cookies".

b) Browsing data

The IT systems and software procedures responsible for the operation of the Site acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols. This is information that is not collected to be associated with identified persons, but which by its very nature could, through processing and association with data held by third parties, allow users to be identified.

This category of data includes the IP addresses or domain names of the computers used by users who connect to the Site, the addresses in URI (Uniform Resource Identifier) notation of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (success, error, etc.) and other parameters relating to the User's operating system and IT environment.

This data is used solely to obtain anonymous statistical information on the use of the site and to check its correct operation, and is deleted immediately after processing. The data could be used to establish liability in the event of hypothetical computer crimes against the site: except for this eventuality, the data is kept for the periods defined in point IV below of this notice.

c) Provision of data

The provision of the Contact Data referred to in section III a) of this notice is mandatory and failure to provide it, even partially, will make it impossible for the Data Controller to provide the requested services, as specified in purposes III a.1 and III a.2.

The provision of Registration data for all the purposes referred to in points III a.3, III a.4 and III a.5 is optional and there are therefore no consequences in the event of refusal to provide it, other than the impossibility of informing the User about promotional activities or verifying their level of satisfaction.

The User assumes responsibility for the Personal Data of third parties communicated or shared via the Site and guarantees that they have the right to communicate or disseminate it, releasing the Data Controller from any liability towards third parties.

Personal Data may be entered voluntarily by the User, or collected automatically while browsing the Site.

IV. Place and duration of processing of the collected Data

a) Place

The Data is processed at the Data Controller's operating office and at the service provider Hostinger International Ltd., with registered office at 61 Lordou Vironos st. 6023 Larnaca, Cyprus.

Should personal data be transferred to a third country or an international organisation, the data subject will be informed of the existence of adequate safeguards relating to the transfer pursuant to article 46 of the "Regulation". For further information you may contact the Data Controller.

b) Duration of processing and retention

The Data is processed for the time necessary to perform the service requested by the User, or required by the purposes described in this document, and the User may always request the interruption of Processing or the erasure, updating and modification of the Data.

The Data will not be kept for more than 24 months, limited to personal data and for marketing purposes only, in compliance with the guidance of the Italian Data Protection Authority on the matter. For the exercise of the right of defence, instead, the duration of processing will be equal to the expiry of the limitation period for bringing ordinary legal action.

V. Cookie Policy

This website does not use cookies, other than technical ones and, therefore, the Data Controller is not required to provide specific information on their use.

a) Information about cookies

A cookie (from English, literally "biscuit") is a small, lightweight text file that is generated by web services in order to store users' preferences, activities and tastes. The cookie created by a service may be read and modified by it in order to better characterise its user base and, above all, to recognise the user on their return to the site.

Therefore, various information may be stored in the cookie for different purposes, but only if the user has enabled the installation of cookies from their browser preferences.

It should be clarified that cookies are not and cannot be dangerous in the common sense of the term: in fact, they cannot in any way carry viruses or other kinds of malware. They can, however, be used to track users' behaviour on websites that adopt certain services.

In general, cookies can be completely disabled from your browser settings at any time. For more information, we recommend reading the help and support pages relating to it provided by the browser developers.

VI. Rights of Data Subjects

The persons to whom the Personal Data refers, as Data Subjects, may exercise the rights pursuant to artt. 13, 14, 16, 17, 18, 19, 20 and 21 of the "Regulation" and, therefore, may in summary:

ask the Data Controller for access to the personal data and the rectification or erasure thereof or the restriction of the processing concerning them or to object to their processing, in addition to the right to data portability;
obtain from the individual Data Controller confirmation as to whether or not personal data concerning them is being processed and, in that case, obtain access to the personal data and the following information: a) the purposes of the processing; b) the categories of personal data concerned; c) the recipients or categories of recipients to whom the personal data has been or will be disclosed, in particular if they are recipients in third countries or international organisations; d) where possible, the envisaged retention period for the personal data or, if this is not possible, the criteria used to determine that period; e) the existence of the data subject's right to ask the Data Controller for rectification or erasure of the personal data or restriction of the processing of personal data concerning them or to object to such processing; f) the right to lodge a complaint with a supervisory authority; g) where the data is not collected from the data subject, all available information on its origin; h) the existence of automated decision-making, including profiling, referred to in article 22, paragraphs 1 and 4 of the Regulation and, at least in such cases, meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for the data subject;
obtain from the Data Controller the rectification of inaccurate personal data concerning them without undue delay. Taking into account the purposes of the processing, the data subject has the right to have incomplete personal data completed, including by providing a supplementary statement;
obtain from the Data Controller the erasure of personal data concerning them without undue delay. The Data Controller has the obligation to erase personal data without undue delay where one of the following grounds applies: a) the personal data is no longer necessary in relation to the purposes for which it was collected or otherwise processed; b) the data subject withdraws the consent on which the processing is based pursuant to article 6, paragraph 1, letter a), or article 9, paragraph 2, letter a), of the Regulation and there is no other legal ground for the processing; c) the data subject objects to the processing pursuant to article 21, paragraph 1, of the Regulation and there are no overriding legitimate grounds for the processing, or the data subject objects to the processing pursuant to article 21, paragraph 2 of the Regulation; d) the personal data has been unlawfully processed; e) the personal data must be erased to comply with a legal obligation under Union or Member State law to which the Data Controller is subject; f) the personal data has been collected in relation to the offer of information society services referred to in article 8, paragraph 1 of the Regulation;
obtain from the Data Controller the restriction of processing where one of the cases referred to in art. 18 of the "Regulation" applies;
receive, in a structured, commonly used and machine-readable format, the personal data concerning them provided to the Data Controller, in order to transmit such data to another Data Controller without hindrance where: a) the processing is based on consent pursuant to article 6, paragraph 1, letter a), or article 9, paragraph 2, letter a), of the "Regulation" or on a contract pursuant to article 6, paragraph 1, letter b) of the "Regulation"; and b) the processing is carried out by automated means;
object at any time, on grounds relating to their particular situation, to the processing of personal data concerning them pursuant to article 6, paragraph 1, letters e) or f) of the "Regulation", including profiling based on those provisions;
request the complete erasure of the data concerning them, exercising their right to be forgotten, without prejudice to the Data Controller's ability to keep only the necessary data in a separate database from the one used for processing, in order to exercise its right of defence.

VII. Right to object

Where personal data is processed for direct marketing purposes, the data subject has the right to object at any time to the processing of personal data concerning them carried out for such purposes, including profiling to the extent that it is connected to such direct marketing.

Where the data subject objects to processing for direct marketing purposes, the personal data may no longer be processed for such purposes.

VIII. Changes to this privacy policy

The Data Controller reserves the right to make any changes to this extended notice by publishing them on this page. The date of the last change will be shown at the bottom of this notice to allow the changes to be tracked. A copy of each version of this notice is available to Data Subjects at the Data Controller's registered office.

Should the user not accept the changes made, they may ask the Data Controller to remove their personal data. Unless otherwise specified, the previous privacy and cookie notice will continue to apply to the personal data collected up to that point.

IX. About this privacy policy

The Data Controller is responsible for this privacy notice and for the cookies stored by its services.

X. Legal references

Directive no. 95/46/EC, Directive 2002/58/EC, as amended by Directive 2009/136/EC, provision of the Italian Data Protection Authority no. 229 of 8 May 2014, Legislative Decree 196/2003, EU Regulation 2016/679.

Last revised: 8 April 2026.

Privacy policy