Privacy Policy
Contents
1. Data controller
Norne Legacy is a brand of Videolance di Riccardo Lancialonga, which acts as the controller of the personal data collected through this website.
Videolance di Riccardo Lancialonga
Registered office: Via Francesco Filelfo 11, 00135 Rome, Italy
Operating office: Via Raffaele Lambruschini 31, Rome, Italy
VAT number: IT15077711008
Email: restore@nornelegacy.com
No Data Protection Officer has been appointed, as the conditions set out in Article 37 of Regulation (EU) 2016/679 do not apply.
2. Data we collect
Browsing data
In their normal operation, the systems and software procedures running this website acquire certain data whose transmission is inherent in the use of internet communication protocols: IP addresses, browser type and operating system, addresses of the resources requested, time of the request, response status code. This data is kept in the server logs and is not used to identify individual users.
Data you provide voluntarily
Through the contact form we ask for your first name, last name, email address, subject and message. Only the email address and the message are required; the other fields are optional. The form does not record your IP address or your device.
If you write to us directly by email, we process the data contained in your message in order to reply.
Cookies and measurement tools
The website uses technical cookies, necessary for it to work, and — only with your consent — statistics cookies. Full details are set out in the Cookie Policy.
We do not carry out profiling or automated decision-making within the meaning of Article 22 of the Regulation.
3. Purposes and legal bases
| Purpose | Legal basis | Data processed |
|---|---|---|
| Delivering the website and keeping the infrastructure secure | Legitimate interest — Art. 6(1)(f) | Browsing data, server logs |
| Replying to enquiries sent through the contact form or by email | Pre-contractual measures at your request — Art. 6(1)(b) | Name, email, subject, message |
| Protecting the form from automated submissions | Legitimate interest — Art. 6(1)(f) | Technical browser signals |
| Aggregate statistics on the use of the website | Consent — Art. 6(1)(a) | Statistics cookie identifiers, pages viewed |
| Accounting and tax obligations, defence of legal claims | Legal obligation — Art. 6(1)(c); legitimate interest — Art. 6(1)(f) | Contact and contractual data |
Providing the data marked as required in the form is necessary for us to reply: without it we cannot follow up on your enquiry. Consent to statistics cookies is entirely optional and can be withdrawn at any time.
4. Who receives the data
Your data is not disclosed publicly nor sold to third parties for commercial purposes. It may be processed on our behalf and on our instructions by the following providers, appointed as processors under Article 28 of the Regulation.
Data may also be disclosed to professionals and advisers assisting us in accounting, tax and legal matters, and to public authorities in the cases provided for by law.
5. Transfers outside the European Economic Area
Data is ordinarily processed within the European Economic Area. In a limited number of cases it may be transferred to third countries, always with the safeguards required by Chapter V of the Regulation:
- MailChannels Corporation (Canada): the transfer relies on the European Commission’s adequacy decision for Canada, under Article 45.
- Cloudflare, Inc. (United States): the transfer relies on the Standard Contractual Clauses approved by the European Commission under Article 46(2)(c), together with the provider’s certification under the EU-US Data Privacy Framework.
- Google: the service is provided by Google Ireland Limited; any transfers to the United States rely on the Standard Contractual Clauses and on certification under the EU-US Data Privacy Framework.
6. Retention periods
| Category | Retention |
|---|---|
| Server logs | According to the hosting provider’s policy, normally no longer than 12 months |
| Contact form enquiries | 24 months from the last contact, unless a contractual relationship follows |
| Email correspondence | 24 months from the last contact |
| Contractual and accounting data | 10 years, as required by Italian civil and tax law |
| Google Analytics statistics | 14 months |
| Cookie consent record | 6 months, after which consent is requested again |
7. Your rights
As a data subject you may exercise at any time the rights set out in Articles 15 to 22 of the Regulation:
- Access: find out whether we process your data and obtain a copy of it.
- Rectification: correct inaccurate data or complete incomplete data.
- Erasure: have your data deleted in the cases set out in Article 17.
- Restriction: ask for processing to be suspended pending verification.
- Portability: receive, in a structured format, the data processed on the basis of your consent or of a contract.
- Objection: object at any time to processing based on legitimate interest.
- Withdrawal of consent: withdraw consent already given, without affecting the lawfulness of processing carried out beforehand.
To exercise these rights write to restore@nornelegacy.com. We will reply within one month of receiving your request, a period that may be extended by two months where the request is particularly complex.
If you believe that the processing of your data infringes the Regulation, you may lodge a complaint with the Italian supervisory authority, Garante per la protezione dei dati personali (Piazza Venezia 11, 00187 Rome — garanteprivacy.it), or with the supervisory authority of the country where you reside.
8. Restoration project materials
This notice concerns data processed through the website. The audiovisual and photographic materials entrusted to us for restoration and preservation work are governed by a separate relationship: in that context we normally act as processor on behalf of the archive, institution or rights holder who instructs us, as set out in the individual contract and in the corresponding appointment under Article 28 of the Regulation.
For information on that area please write to restore@nornelegacy.com.
9. Changes and contact
This notice may be updated to reflect changes in legislation or in the services we use. The version published on this page is always the one in force; the date at the top of the document indicates the last update.
For any question about the processing of your data you can write to restore@nornelegacy.com.
Videolance di Riccardo Lancialonga — VAT IT15077711008 — Via Francesco Filelfo 11, 00135 Rome, Italy