Information pursuant to European Regulation 2016/679 – General Data Protection Regulation

    Kind regards, we agree with this information, pursuant to the “2016/679 European Regulation concerning the protection of individuals with regard to the Processing of Personal Data, as well as the free circulation of such data” (hereafter referred to as “GDPR”) to those that interact with the form of Villa Sommi Picenardi (hereinafter “Villa Sommi”), accessible by telematic means starting from the address:

    The information is provided only for the forms indicated above on the OpenSymbol website and not for other forms or websites that may be consulted by the user through links and is an integral part of the general Privacy Policy of this website.

    In particular, in accordance with article 13 of the GDPR, we inform you that:

    1. Responsibility

    The Data Controller is xxxx – Via Sommi Picenardi, 8 23887 Lecco (LC)

    VAT code xxxxxx

    Any request regarding this Privacy Policy, the protection of personal data and the security of information can be forwarded to Villa Sommi DPO, which can be contacted at

    2. Treatments

    In the above forms the following macro-types of information are required:

    Contact details;
    Corporate data;
    Data entered through free message areas.
    By filling in the data fields described above and clicking on the Enter button, Villa Sommi stores them and keeps them in its databases for collecting, recording, organizing, preserving, consulting, processing, modifying, selecting, extraction, comparison, use, interconnection, blocking, cancellation, destruction. To these is added the profiling treatment carried out by the interested party but with focus on the company it represents as an employee or collaborator.

    3. Purpose

    Villa Sommi uses its data in order to:

    respond to the commercial requests received;
    profile the company that the user who is completing represents as an employee or a collaborator;
    send behind separate consent newsletters containing news, site updates, security patch communications, surveys, promotional campaigns regarding the activities of Villa Sommi.

    4. Legal Basis, Storage Times

    Pursuant to Article 6 and 7 of the GDPR, the provision of consent to data processing by means of a special check is optional, but essential to proceed with the sending of the forms described above. Subscription to the newsletter is not mandatory and can be refused by simply omitting to tick the appropriate box.

    Pursuant to Article 13 (2) (a), the retention period for personal data is established for a period of 4 years from the date of the individual consensus dates. At the end the data will be physically deleted from all our systems or further consents will be required.

    5. Minor data

    Pursuant to Article 8, Paragraph 1 of the GDPR, the processing of personal data of the child is lawful where the child is at least 16 years old. If the child is under the age of 16, such treatment is lawful only if and to the extent that such consent is given or authorized by the holder of parental responsibility. Villa Sommi requires all users who use the above forms to be at least 16 years of age or to self-certify their consent by the holder of parental responsibility.

    6. Particular Data

    Pursuant to Article 5 (1) (c), Villa Sommi only keeps personal data that is appropriate, relevant and limited to what is necessary with respect to the purposes for which it is processed (“data minimization”); therefore, users are asked not to share personal data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, or union membership, and to process genetic data, biometric data intended to uniquely identify a person physics, data relating to a person’s health or sexual life or sexual orientation. If the user deliberately communicates to Villa Sommi such data, the employees or collaborators of Villa Sommi, who have received specific privacy training sessions, will process such data according to principles of maximum care and confidentiality.

    7. Cookies

    Our cookies help:

    To make our website work as you would expect
    To remember your settings during and between visits
    To improve the speed / safety of the site

    We do not use cookies for:

    Collect personally identifiable information (without your explicit permission)
    Collect all sensitive information (without your explicit permission)
    Pass data to advertising networks
    Pass identifiable personal data to third parties
    Pay sales commissions

    You can learn more about all the cookies we use below

    8. Recipients

    Potential primary suppliers who may have access to, process, store, transmit and generally process data and information from Villa Sommi are also assessed on the aspect of information security (ISO / IEC 27001: 2013 and ISO / IEC 27018 : 2014) and from the point of view of safeguarding the privacy of the Individuals whose data are processed by Villa Sommi.

    Villa Sommi does not transfer its data to third parties for any reason. Within the limits relevant to the processing purposes indicated, your data may be disclosed to specific suppliers appointed as Responsible pursuant to Article 28 of the GDPR. You can request an updated list of interested suppliers at the email address

    9. Location of Treatments

    All the treatments described in this statement and carried out by Villa Sommi take place within the European Union.

    10. Processing methods

    The processing will be carried out in such a way as to guarantee adequate security of personal data, including protection, through appropriate technical and organizational measures, unauthorized or unlawful processing and loss, destruction or accidental damage (“integrity and confidentiality”) .

    11. Rights of the interested party

    The data subject is always entitled to request the Data Controller to access their data, correct or delete them, limit the processing or the possibility of objecting to the processing, requesting data portability, revoking consent to the processing of data. claiming these and other rights provided by the GDPR through a simple communication to the Owner or to the DPO via email at In detail, Villa Sommi will handle the request of the interested party without undue delay and, in any case, no later than one month after receiving the request. This deadline will be extended to 3 months in case of data deletion. The data subject also has the right to lodge a complaint with a supervisory authority. In Italy the Guarantor for the Protection of Personal Data is operative.