According to current legislation, the processing of user data is based on the principles of correctness, lawfulness, transparency and protection of confidentiality and rights.

Collected data: purposes and legal bases of the treatment

1. Data voluntarily provided by the user
These are the data voluntarily provided by the user to Host by filling out forms, sending email messages to our email, telephone and chat boxes.
They are collected and processed to respond to user requests.
The legal basis that legitimizes the processing is the execution of a contract or terms and conditions of which the interested party is a part or the execution of pre-contractual measures adopted at the request of the same.
In the cases expressly indicated, the legal basis is the consent freely provided by the interested party.

2. Data collected during the use of our services
These are the customer data collected during access to the website, the use of our services through the methods (e.g. API) and available protocols, such as:

- Location data obtained from the user's connection IP address or sent from the device or software with which it accesses the services.
- Data on the device or software obtained from the information it sends to our systems when accessing the services.
- Data on the activity that the user performs, through his device, while accessing our services.
- Cookies and similar technologies.
- Log of activities performed by the user while using our services or viewing content provided by Host.

All requests for a Joomla site initiate a session that stores the IP address in the session data and creates a session cookie in the user's browser. The IP address is used as a security measure to help protect against possible session hijacking attacks and this information is deleted when the session expires and the data is deleted. The name of the session cookie is based on a randomly generated hash and therefore does not have a constant identification. The session cookie is deleted when the session expires or when the user exits the browser.

The Joomla log system records the visitor's IP address which led to writing a message in its log files. These log files are used to record various activities performed on the Joomla site, including information about core updates, invalid login attempts, unmanaged errors and development information, such as the use of deprecated APIs. The format of these log files can be customized from any extension that configures a logger.

On a site that supports multiple languages, this plugin can be configured to set a cookie on the user's browser that remembers their language preferences. This cookie is used to redirect users to their preferred language when they visit the site and create a new session. The cookie name is based on a randomly generated hash and therefore does not have a constant identifier.

The collection of such data is functional to the use of the service and forms an integral part of the system's functionality.

The legal basis that legitimizes the processing of such data is the execution of a contract between the parts.

Processing methods and data retention times

The data collected will be processed using electronic or automated, IT and telematic tools, or through manual processing with logic strictly related to the purposes for which the personal data were collected and, in any case, in order to guarantee their safety in any case .
The data are kept for the time strictly necessary for the management of the purposes for which the data are collected in compliance with current regulations and legal obligations.

Authorized subjects to the treatment, responsible and communication of the data
The processing of the collected data is carried out by the owner of the site alcremista.com or by personnel identified and authorized for this purpose of the treatment according to specific instructions given in compliance with current legislation.

Rights of the interested party
At any time it is possible to access the data, oppose the processing or request the cancellation, modification or updating of all personal information collected, exercising the right to limitation of treatment and the right to data portability, by sending a request via the contact form.

Owner and manager of the treatment
The data controller is Massimiliano Pachetti, with registered office in via del Pino 26, Livorno - Italy
The Data Processor, which you can contact to exercise the rights referred to in Art. 12 of the GDPR 2016/679 and / or for any clarifications regarding the protection of personal data, can be reached by sending an email to the above address.