Privacy Policy

1. Controller

The controller responsible for the processing of personal data on this website is:

Sabine Patscheider – Stone Passion
Via Conte von Mohr 6/B, 39021 Laces (BZ), Italy
Email: [email protected]
Phone: +39 335 6089987

Further information can be found in the Legal Notice.

2. What data is processed

This website does not use analytics or marketing tools, tracking services, social media plugins or embedded maps.

In particular, the following data is processed:

• technically necessary data when the website is accessed, in particular server log data and technical data processed as part of the security service used;
• personal data that you voluntarily provide to us when contacting us by phone, email or via LinkedIn.

3. Hosting, server log data and Cloudflare

Hosting by Namecheap

This website is operated using a shared hosting plan from Namecheap, Inc. (Stellar). The hosting location selected for this website is located in Namecheap's European data center in Amsterdam. Namecheap processes technical data and server log data generated during the operation of the website as part of the hosting service.

The data processed may include, in particular, IP address, date and time of access, file or page accessed, amount of data transferred, browser type and version, operating system used, referring URL (if available) and HTTP status code.

The processing is carried out for the technical provision of the website, to ensure its secure and reliable operation, for error diagnosis and to defend against attacks. The legal basis is the legitimate interest in providing the website securely and reliably.

The log data is stored only for as long as necessary for secure and reliable operation, error analysis and defence against attacks, unless longer storage is required by law or for the establishment, exercise or defence of legal claims.

With regard to the processing of personal data initiated by us as part of the hosting service, Namecheap acts as a processor. Namecheap may process personal data in connection with its services and contractual processing in the USA or other countries, or transfer data to those countries. For transfers to countries without an adequate level of data protection, Namecheap states that it uses appropriate transfer mechanisms, in particular Standard Contractual Clauses.

Cloudflare

Cloudflare, Inc. is used for DNS resolution and as an upstream security and proxy service. Cloudflare protects the website in particular against bots, abuse, automated attacks and overload and processes technical connection data, in particular IP addresses and information about requests to the website.

Cloudflare may use technically necessary cookies for security functions. These are not used for analytics or marketing.

The processing is carried out to provide the website securely and reliably and to defend against attacks on the basis of the legitimate interest in the security and functionality of the website.

Cloudflare is a company based in the USA. Cloudflare states that transfers of personal data from the EEA to the USA are carried out on the basis of its certification under the EU-U.S. Data Privacy Framework. If this certification is no longer valid, Cloudflare refers to Standard Contractual Clauses including supplementary measures.

4. Contact by phone, email or LinkedIn

If you contact us by phone or email, the personal data you provide, in particular your name, contact details and the content of your request, is processed to handle your request and for any necessary follow-up questions.

The processing is carried out, insofar as it is necessary to take pre-contractual measures at your request, on the basis of the legitimate need to process your request. For other enquiries, the processing is based on the legitimate interest in handling and responding to the request.

Email communication is currently handled via Gmail. The data you transmit is also processed by Google. Google states that Google Ireland Limited is generally responsible for users in the European Economic Area and that international transfers are based, among other things, on the EU-U.S. Data Privacy Framework or other appropriate transfer mechanisms.

If you contact us via LinkedIn, personal data is also processed by LinkedIn. LinkedIn's privacy policy applies to processing carried out by LinkedIn.

Providing personal data is voluntary. Without the information required to process the request, it may not be possible to process or respond to it.

The data is deleted as soon as it is no longer required to handle the respective request, unless statutory retention obligations apply or the data is required for the establishment, exercise or defence of legal claims.

5. Cookies

This website does not use cookies for analytics, tracking or marketing purposes. Cloudflare may use technically necessary cookies required for security and technical functions.

6. External links and locally embedded web fonts

This website contains simple links to a LinkedIn profile and to the CLI Technologies website. Merely accessing our website does not establish a connection to the linked websites through these links. Only when you click on a link do you leave our website and get redirected to the respective external website. From that point onwards, the privacy policy of the respective provider applies.

The web fonts used on this website are fully embedded locally on our own server. Therefore, no connection to external font services is established.

7. Recipients and disclosure of data

Personal data is not disclosed to third parties for advertising or marketing purposes.

As part of the technical provision and protection of the website, personal data may be transmitted to Namecheap as the hosting provider and to Cloudflare as the security and proxy service.

When contacting us by email, the data transmitted is also processed by the email service provider Google. When contacting us via LinkedIn, LinkedIn processes the data transmitted there in accordance with its own privacy policy.

Other recipients may be involved where this is necessary to fulfil legal obligations.

8. Your rights as a data subject

Subject to the statutory requirements, you have in particular the following rights:

• Access to the processing of your personal data;
• Rectification of inaccurate personal data;
• Erasure of your personal data;
• Restriction of processing;
• Objection to processing based on legitimate interests;
• Data portability, insofar as the statutory requirements for this are met.

To exercise your rights, you can contact the controller using the contact details provided above.

9. Right to lodge a complaint with a supervisory authority

You have the right to lodge a complaint with a data protection supervisory authority. For Italy, the Garante per la protezione dei dati personali is the relevant authority in particular. Information on the complaint procedure is provided by the Garante on its website: Complaint to the Garante Privacy.

10. Automated decision-making

No automated decision-making, including profiling, takes place.

11. Updates and changes to this Privacy Policy

This Privacy Policy will be amended if this becomes necessary due to changes to the website or the data processing carried out through it.

12. Notes, errors and uncertainties

If you notice errors, uncertainties or other problems in this Privacy Policy, or if you have suggestions for improving data protection, you can contact the controller at any time using the contact details provided above.

Back to home page