Privacy Policy
Information Notice Pursuant to Article 13 of Regulation (EU) 2016/679 (GDPR)
In compliance with Regulation (EU) 2016/679, also known as the General Data Protection Regulation (“GDPR”), we provide the following information regarding the processing of personal data provided by users.
This Privacy Policy does not apply to other websites that may be accessed through links available on this website. The Data Controller shall not be held responsible in any way for third-party websites.
This information notice is provided pursuant to Article 13 of Regulation (EU) 2016/679 and also takes into account Directive 2002/58/EC, as updated by Directive 2009/136/EC, regarding cookies, as well as the provisions issued by the Italian Data Protection Authority concerning cookies.
Personal Data That May Be Processed
“Personal data” means any information relating to an identified or identifiable natural person (“data subject”).
An identifiable natural person is someone who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier, or one or more factors specific to their physical, physiological, genetic, mental, economic, cultural, or social identity.
Browsing Data
The IT systems and software procedures used to operate this website acquire, during their normal operation, certain personal data whose transmission is implicit in the use of Internet communication protocols.
This category of data includes IP addresses or domain names of the computers and devices used by users, URI/URL addresses of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file received in response, the numerical code indicating the status of the server response, and other parameters relating to the user’s operating system and IT environment.
Data Provided by the User
The optional, explicit, and voluntary sending of messages to the contact addresses indicated on this website, as well as the completion and submission of forms available on the website, involves the acquisition of the sender’s contact details, which are necessary to respond, as well as any personal data included in the communications.
Specific Information Notices
Specific information notices may be provided on the website pages in relation to particular services or data processing activities.
Cookies
For more information about the cookies used on this website, please refer to the Cookie Policy.
1. Who Is the Data Controller and How Can You Contact Them?
The Data Controller, pursuant to Articles 4 and 24 of Regulation (EU) 2016/679, is:
Geovanny Vela ItalyVia Fausto Coppi, Orbassano TO, Italy
Rúa Nogueira, 5 CP 15178 Oleiros, Spain
Email: info@geovannyvela.com
Phone: +34 691 67 91 39
For any request regarding the processing of personal data or to exercise your rights under the GDPR, you may contact the Data Controller using the contact details provided above.
2. Purposes of Processing, Legal Basis, Data Retention Period, and Nature of Data Provision
Purpose A: Website Browsing
Legal basis: legitimate interest pursuant to Article 6(1)(f) of the GDPR and Recital 47.
The processing is necessary for the pursuit of the legitimate interest of the Data Controller or third parties, provided that the interests or fundamental rights and freedoms of the data subject requiring the protection of personal data do not override such interest, taking into account the reasonable expectations of the data subject based on their relationship with the Data Controller.
This processing includes activities strictly necessary for the operation of the website and for the provision of browsing services on the platform.
Data retention period: data is retained for the duration of the browsing session. For further details regarding browsing and cookie-related data, please refer to the Cookie Policy.
Nature of data provision: except for browsing data, which is necessary to allow the website to function, users are free to provide their personal data.
Contact Forms and Service Request Forms
When users fill out forms available on the website to request information, contact the Data Controller, or access services, the submitted data may be processed to respond to the request.
Legal basis: performance of pre-contractual measures adopted at the request of the data subject.
Data retention period: 2 years.
Nature of data provision: the provision of data may be optional or necessary depending on the specific purpose for which the data is processed. Failure to provide data marked with an asterisk (*) or indicated as required may make it impossible to obtain the requested information or use the services offered by the Data Controller.
Purpose B: Direct Marketing
If the data subject completes dedicated forms in specific areas for direct marketing purposes, their data may be processed, subject to prior consent and until opposition or withdrawal of consent, for the following activities:
- Direct marketing by the Data Controller
- Market research
- Direct sales
- Customer satisfaction surveys
- Sending newsletters
- Sending promotional, commercial, or advertising material
- Communications regarding events and initiatives
These activities may be carried out by automated means such as email, fax, SMS or similar messages, as well as through operator-assisted or automated phone calls, postal mail, and other informational material.
The Data Controller may use newsletter and promotional communication systems with reporting features in order to compare and improve communication results.
Through these reports, the Data Controller may know, for example:
- The number of readers
- The number of openings
- Unique clickers and clicks
- The devices and operating systems used to read the communication
- Details regarding the activity of individual users
- Details of emails sent, delivered, undelivered, and forwarded
All this data is used to compare and, where appropriate, improve communication performance.
Legal basis: consent pursuant to Article 6(1)(a) of the GDPR.
The data subject has given consent to the processing of their personal data.
Data retention period: until opposition, opt-out, or withdrawal of consent.
Nature of data provision: the provision of data for Purpose B is optional. If consent is not provided, the data will not be processed for this purpose. Refusal to provide consent for marketing purposes does not affect the use of the services described under Purpose A.
3. Who Will the Personal Data Collected Be Shared With?
The personal data provided may be shared with parties that process the data as Data Processors pursuant to Article 28 of Regulation (EU) 2016/679 and/or with natural persons acting under the authority of the Data Controller or Data Processor pursuant to Article 29 of Regulation (EU) 2016/679, for the purposes listed above.
In particular, data may be shared with:
- Parties that provide services for the management of the information systems used by Geovanny Vela Italy and telecommunications networks, including email, newsletters, and website management
- Freelancers, professional firms, or companies providing assistance and consultancy services
- Competent authorities for compliance with legal obligations and/or provisions issued by public bodies, upon request
The updated list of Data Processors is available upon request by contacting the Data Controller at: info@geovannyvela.com
4. Does Geovanny Vela Italy Transfer Data Outside the EEA?
The personal data provided will not be transferred to countries outside the European Economic Area.
If, in the future, the use of third-party providers involves transfers outside the EEA, such transfers will be carried out only in compliance with the safeguards provided under the GDPR, including adequacy decisions, Standard Contractual Clauses, or other legally recognized mechanisms.
5. Is There an Automated Decision-Making Process?
We do not use decision-making processes based solely on automated processing, including profiling.
6. What Are Your Rights and How Can You Exercise Them?
You may exercise your rights under Articles 15, 16, 17, 18, 19, 20, and 21 of Regulation (EU) 2016/679 by contacting the Data Controller at:
You have the right, at any time, to request from the Data Controller:
- Access to your personal data
- Rectification of your personal data
- Deletion of your personal data
- Restriction of processing
- Data portability, where applicable
- Opposition to the processing of your data based on consent and/or legitimate interest
To stop receiving automated direct marketing communications, such as emails or SMS, you may write at any time to:
with the subject line:
“Unsubscribe from automated communications”
You may also use the automatic unsubscribe systems provided in marketing emails, where available.
To stop receiving traditional direct marketing communications, such as operator-assisted phone calls or postal mail, you may write at any time to:
with the subject line:
“Unsubscribe from traditional communications”
Without prejudice to any other administrative or judicial remedy, if you believe that the processing of your personal data violates Regulation (EU) 2016/679, you have the right to lodge a complaint with the competent supervisory authority.
For users located in Italy, the competent authority is the Italian Data Protection Authority:
Garante per la protezione dei dati personaliwww.garanteprivacy.it
Additional Information
The Data Controller reserves the right to modify, update, add, or remove parts of this Privacy Policy at its discretion and at any time.
To facilitate verification, this Privacy Policy will indicate its latest update date.
Last updated: July 29, 2025