GDPR Compliance
Last updated: January 2024
About GDPR
The General Data Protection Regulation (GDPR) is a regulation in EU law on data protection and privacy. It gives individuals control over their personal data and simplifies the regulatory environment for international business.
Data Controller
Barbiere Firenze acts as the data controller for personal information collected through this website. We determine the purposes and means of processing personal data in accordance with GDPR requirements.
Contact Information
For data protection inquiries:
Email: [email protected]
Address: Via dei Calzaiuoli 45, 50122 Florence, Italy
Your Rights Under GDPR
Right to Access
You have the right to request copies of your personal data. We may charge a small fee for this service in certain circumstances.
Right to Rectification
You have the right to request that we correct any information you believe is inaccurate. You also have the right to request that we complete information you believe is incomplete.
Right to Erasure
You have the right to request that we erase your personal data under certain conditions, such as when the data is no longer necessary for the purpose it was collected.
Right to Restrict Processing
You have the right to request that we restrict the processing of your personal data under certain conditions, such as when you contest the accuracy of the data.
Right to Object to Processing
You have the right to object to our processing of your personal data under certain conditions, particularly when processing is based on legitimate interests.
Right to Data Portability
You have the right to request that we transfer the data we have collected to another organization, or directly to you, under certain conditions.
Exercising Your Rights
To exercise any of these rights, please contact us using the information provided above. We will respond to your request within one month. In some cases, we may need to verify your identity before processing your request.
Lawful Basis for Processing
We process personal data based on one or more of the following legal grounds:
- Consent: You have given clear consent for us to process your personal data for a specific purpose
- Contract: Processing is necessary for a contract we have with you, or because you have asked us to take specific steps before entering into a contract
- Legal obligation: Processing is necessary for us to comply with the law
- Legitimate interests: Processing is necessary for our legitimate interests or the legitimate interests of a third party, unless there is a good reason to protect your personal data which overrides those legitimate interests
Data Transfers
We do not transfer personal data outside the European Economic Area (EEA). If this changes, we will ensure appropriate safeguards are in place in accordance with GDPR requirements.
Right to Complain
If you believe that we have not complied with your data protection rights, you have the right to make a complaint to the Italian Data Protection Authority (Garante per la Protezione dei Dati Personali) or your local supervisory authority.
Updates to This Information
We may update this GDPR information from time to time. We encourage you to review this page periodically for the latest information on our data protection practices.