At Barbiere Roma, we are committed to protecting your personal data in compliance with the General Data Protection Regulation (GDPR). This page outlines your rights and how we ensure compliance with European data protection laws.
Data Controller
Barbiere Roma acts as the data controller for personal data collected through this website. We determine the purposes and means of processing your personal data.
Contact details:
Barbiere Roma
Via della Conciliazione 24
00193 Roma, Italy
Email: [email protected]
Your Rights Under GDPR
Under the GDPR, you have the following rights regarding your personal data:
Right to Access
You have the right to request a copy of the personal data we hold about you. We will provide this information free of charge within one month of receiving your request.
Right to Rectification
If you believe that any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or complete it.
Right to Erasure
Also known as the "right to be forgotten," you can request that we delete your personal data when it is no longer necessary for the purpose for which it was collected, or if you withdraw your consent.
Right to Restrict Processing
You have the right to request that we restrict the processing of your personal data in certain circumstances, such as when you contest the accuracy of the data.
Right to Data Portability
You have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit that data to another controller.
Right to Object
You have the right to object to the processing of your personal data, particularly for direct marketing purposes or when processing is based on legitimate interests.
Right to Withdraw Consent
Where we rely on your consent to process personal data, you have the right to withdraw that consent at any time. This will not affect the lawfulness of processing carried out before the withdrawal.
Legal Basis for Processing
We process your personal data based on the following legal grounds:
- Consent: When you have given clear consent for us to process your personal data for a specific purpose.
- Contract: When processing is necessary to perform a contract with you or to take steps at your request before entering into a contract.
- Legal Obligation: When processing is necessary to comply with a legal obligation.
- Legitimate Interests: When processing is necessary for our legitimate interests, provided these do not override your fundamental rights.
Data Retention
We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected. The retention period depends on the nature of the data and the purpose of processing. When data is no longer needed, it will be securely deleted or anonymized.
Data Security
We implement appropriate technical and organizational measures to ensure a level of security appropriate to the risk, including protection against unauthorized or unlawful processing and against accidental loss, destruction, or damage.
International Transfers
If we transfer your personal data outside the European Economic Area, we will ensure that appropriate safeguards are in place to protect your data in accordance with GDPR requirements.
Exercising Your Rights
To exercise any of your rights under GDPR, please contact us using the details provided above. We may need to verify your identity before processing your request. We will respond to your request within one month, although this period may be extended in complex cases.
Complaints
If you believe that your data protection rights have been violated, you have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali) or the supervisory authority in your country of residence.
Updates to This Page
We may update this GDPR compliance information from time to time. Any changes will be posted on this page with an updated revision date.