Privacy Notice - Registration at www.bakeryform.com

Data Controller

The Data Controller for personal data for www.bakeryform.com is Andrea Zuozo, residing in Avella (AV) at Via Madonna delle Grazie no. 36, Tax Code ZZUNDR94H10A509X, reachable at the email address bakeryform.inzu@gmail.com. Hereinafter also referred to as the “Controller”.

Categories of data processed

The Controller, for the purpose of user registration on the website www.bakeryform.com, will process the following categories of personal data:

• Personal details (first name and surname) and profile photo, received from Google when signing in with a Google account;
• Contact details (email address).

Purpose of processing and legal basis

The data referred to in point 2 above are processed by the Controller for user registration on the website www.bakeryform.com, as well as to safeguard the rights of the Controller.

The legal basis for processing is identified in Art. 6(1)(b) GDPR, as “processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract”.

Processing methods

Data are processed using IT and telematics tools, in compliance with the principles of lawfulness, fairness, transparency, and data minimization, adopting adequate security measures to guarantee confidentiality, integrity, and availability.

Nature of data provision

The provision of data for the purposes set out in point 3 above is necessary. Any refusal may make it impossible to establish or continue the relationship.

Recipients of data

The data referred to in point 2 above may be disclosed, including but not limited to:

• employees and/or collaborators;
• suppliers and consultants;
• banking, financial, and/or insurance institutions;
• public bodies and/or authorities, in cases provided for by law.

These entities will process personal data, as the case may be, as independent controllers, data processors pursuant to Art. 28 GDPR duly appointed, or persons authorized to process data pursuant to Art. 29 GDPR under the designation of the Controller.

Data transfer

Data may be subject to transfer outside the European Economic Area. Where necessary, the transfer will take place in compliance with current regulations. For further details regarding services that may involve data transfers outside the European Economic Area, please refer to the Privacy Policy.

Retention period

The user may delete their account at any time from the Account page of the website www.bakeryform.com: deletion permanently erases the data referred to in point 2 above, together with the saved creations.

Where the account is not deleted, personal data will be retained for as long as the user remains registered on the website www.bakeryform.com and, from the date of termination of registration, for a further 5 years, without prejudice to any rights recognized to the data subject and to the Controller under the applicable laws from time to time.

Data subject rights

The data subject may exercise their rights provided under Articles 15 to 22 of the GDPR, including:

• access to personal data;
• erasure of data;
• restriction of processing;
• data portability;
• objection to processing;
• withdrawal of consent, where provided.

Requests to exercise these rights may be sent to the email address bakeryform.inzu@gmail.com.

Right to lodge a complaint

The data subject has the right to lodge a complaint with the Italian Data Protection Authority (Garante per la Protezione dei Dati Personali) or to take legal action before the competent judicial authorities if they believe that the processing of their personal data violates current regulations.

Updates to the notice

This notice may be subject to changes and updates.