This Privacy Policy is provided pursuant to art. 13 of European Regulation no. 679/2016 and applies exclusively to all Data collected through the Website www.holisticharmonyandflow. This Privacy Policy is subject to updates that will be published promptly on the Website. This Privacy Policy and the Cookie Policy, establish the basis on which the User’s Personal Data will be processed.

Data Controller

The Data Controller of the data collected by this website is Stella Yenati with registered office in Segrate (MI), e-mail: info@holisticharmonyandflow.com

Methods of Processing Personal Data

The Personal Data provided or acquired will be subject to Processing based on the principles of correctness, lawfulness, transparency and protection of confidentiality in accordance with current legislation. The Data Controller processes the Personal Data of Users by adopting appropriate security measures to prevent unauthorized access, disclosure, modification or destruction of Personal Data. Processing is carried out using computer and/or telematic tools, with organizational methods and with logic strictly related to the purposes indicated.

Purpose of the Processing of Personal Data and Legal Basis

Personal Data may be collected independently by the Owner or through third parties. In this case, the computer systems and software procedures used to operate this Website acquire some Personal Data of Users, of a technical-IT nature (e.g. the IP address, the type of browser used, the operating system, the domain name and the addresses of websites from which access or exit was made, etc.), the transmission of which is inherent to the normal functioning of the Internet.

Such Data may be processed for the sole purpose of obtaining anonymous statistical information on the use of the site and/or to check its correct functioning and will be deleted immediately after processing.

a) to follow up on specific requests addressed to the Owner by the User for communications of an informative nature and/or for communications aimed at responding to requests for quotes relating to the Services of the same Owner, via email messages or by filling out the contact form and other communication tools such as telephone and social networks. This processing is optional and based on the User’s consent, however failure to communicate one or more Data will make it impossible to respond to the request for information and to use the services offered by the Owner;

b) for sending information and promotional and commercial offers also through the newsletter service, sent by e-mail, post or sms. This processing is based on the consent freely expressed by the User;

c) to carry out statistical analyses on aggregate and anonymous data to analyse the User’s behaviour, to improve the products and services provided by the Data Controller and to satisfy the User’s expectations;

d) for profiling activities for marketing purposes. This Processing is based on the consent freely expressed by the User.

e)to fulfill any type of obligation contemplated and provided for by current laws, regulations, related regulations, commercial practices and tax/fiscal matters. This processing is mandatory to fulfill a legal obligation to which the Data Controller is subject;

f) for other purposes that are ancillary or connected to those indicated above and in any case falling within the scope of the activities of the Website.

Category of Personal Data processed

Among the Personal Data processed by this Website, independently or through third parties, there are Common Data such as: Cookies, Usage Data, name, surname, email. The optional, explicit and voluntary sending of emails via the Contact Form or through the addresses indicated on this Website, involves the subsequent acquisition of the sender’s address, necessary to respond to requests, as well as any other Personal Data included in the email. The User’s consent to the provision of Data is necessary to be included in the Data Controller’s databases and for the purposes of establishing and correctly carrying out what is offered by the same to its Users, as well as to third parties for the fulfillment of the individual activity requested. Failure to provide data therefore prevents registration in the Data Controller’s databases, the completion of any contracts, as well as the execution of the same and any other possible activity.

Data Communication

In addition to the Owner, in some cases, the following may have access to the Data:

a) categories of specifically trained Persons in Charge involved in the organisation of the Website (administrative, commercial, marketing, legal, system administrators);

b) external parties (such as third-party technical service providers, hosting providers, IT companies, communications agencies) also appointed as Data Processors by the Data Controller pursuant to art. 28 GDPR. The updated list of Data Processors, if appointed, may always be requested from the Data Controller;

c) public or private entities that can access the Data in compliance with legal obligations;

d) subjects who carry out tasks that are accessory and instrumental to the Data Controller’s activity;

Treatment Times

As expressly provided for by art. 5, co. 1, lett. e) of the GDPR, the Data are stored for the time necessary for the Processing of the same in relation to the performance of the service requested by the User, or required by the Purposes described in this document and in particular:

– The Data collected for contractual obligations will be retained for the time necessary to complete the aforementioned purposes and as required by law;

– The Data collected for tax/administrative obligations or for contractual obligations will be retained for the time necessary to complete the aforementioned purposes and as required by law;

– The Data collected for Purposes attributable to the legitimate interest of the Owner will be retained until such interest is satisfied; The User can obtain further information regarding the legitimate interest pursued by the Owner by contacting the Owner.

– The Data collected based on the User’s Consent may be retained until such Consent is revoked;

The Data may be retained by the Owner for a longer period in compliance with legal obligations or by order of an authority.
At the end of the retention period, the Personal Data will be deleted and therefore, the rights of access, deletion, rectification and portability of the Data can no longer be exercised

Cookie

This website uses cookies. Cookies are small text files that can be used by websites to make the user experience more efficient and to personalize content and ads, provide social media features, and analyze traffic. Cookie Policy

Place of Processing and Transfer of Data Abroad

The Data is processed at the Data Controller’s operational headquarters. For further information, please contact the Data Controller. The Data may be processed by natural persons and/or legal entities operating on behalf of the Data Controller and under specific contractual obligations and based in EU or non-EU member countries. In the event that the Data is transferred outside the EEA, the Data Controller will adopt any contractual measures suitable to guarantee adequate protection of the Data.

FORM DI CONTATTO

By filling in the contact form with their data, the User consents to their use to respond to requests for information, or for any other purpose indicated by the form header. Personal Data collected through the contact form: Email, Name and Surname.

Fluent Forms (WpManageNinja LLC)

Fluent Forms is a Form creation and management service offered by WpManageNinja LLC that allows this website to integrate such content into its pages. Personal data collected: Name, Surname, Email. Place of processing: USA – Privacy Policy

---

EMAIL ADDRESS MANAGEMENT

These services allow you to manage a database of email contacts, telephone contacts or contacts of any other type, used to communicate with the User. These services may also allow you to collect Data relating to the date and time the messages are viewed by the User, as well as the User’s interaction with them, such as information on clicks on links inserted in messages.

SPAM PROTECTION

These services analyze the traffic of this Website, potentially containing Personal Data of Users, in order to filter it from parts of traffic, messages and contents recognized as SPAM.

SAFETY MEASURES ADOPTED

This Website, to secure the moment in which Personal Data is entered, has an SSL certificate and uses the HTTPS protocol. With the use of this protocol, transactions and data that are transmitted on the websites occur with maximum security and the content of the communication is not read or manipulated in any way by third parties.

reCAPTCHA

This website uses reCAPTCHA which is a service subject to the Google privacy and terms and conditions.

STATISTICS

Statistics services allow the Data Controller exclusively to monitor and analyze traffic data and are used to track User behavior. This Website uses the following services:

1. Google Analytics (Google Ireland Limited)
Google Analytics is an analysis service provided by Google Ireland Limited. Google uses the Personal Data collected for the purpose of tracking and examining the use of this Website, compiling reports and sharing them with other services developed by Google. Google may use the Personal Data to contextualize and personalize the advertisements of its own advertising network. Google may also transfer this information to third parties where required by law or where such third parties process the information on behalf of Google. The IP address anonymization function is active on this site. The IP address transmitted by the browser for purposes related to Google Analytics will not be incorporated into other data already held by Google. At the following link https://tools.google.com/dlpage/gaoptout?hl=it the browser add-on for deactivating Google Analytics is made available by Google. Personal Data collected: Cookies and Usage data. Place of processing: Ireland – Privacy Policy

CONTENT ON EXTERNAL PLATFORMS

These services allow you to view content hosted on external platforms directly from the pages of this Website and interact with them.
In the event that a service of this type is installed, it is possible that, even if the Users do not use the service, it collects traffic data relating to the pages in which it is installed.

This website uses:

1. Youtube (Google Ireland Limited)
Youtube is a video content viewing service managed by Google that allows this Website to integrate such content within its pages. Personal Data collected: Cookies and Usage Data. Place of Processing: Ireland – Privacy Policy 

2. Google Fonts
Google Fonts is a service of visualization of font styles provided by Google Ireland Limited that allows this Website to integrate such contents within its pages. Personal Data collected: Usage data; various types of Data as specified in the privacy policy of the service. Place of processing: Ireland – Privacy Policy 

Exercise of the rights of the interested party

The interested party has the right to exercise the rights provided for in articles 7, 15-22 of the European Regulation 679/2016. In particular, he/she has the right to withdraw his/her consent at any time and, upon simple request to the Data Controller, may request access to the Personal Data, receive the Personal Data provided to the Data Controller and, where possible, transmit them to another Data Controller without impediments (so-called portability), obtain the updating, the limitation of the processing, the rectification of the Data and the cancellation of those processed in breach of the legislation in force. He/she has the right, for legitimate reasons, to oppose the Processing of Personal Data concerning him/her and the Processing for the purposes of sending advertising material, direct sales and for carrying out market research. He/she also has the right to lodge a complaint with the Privacy Guarantor as the supervisory authority in matters of personal data protection. The interested party may exercise his/her rights by contacting the Data Controller by email at the address: info@holisticharmonyandflow.com.

Changes to this Privacy Policy

The Data Controller reserves the right to make changes to this Privacy Policy at any time by giving notice to Users on this page. Therefore, please consult this page often, taking as a reference the date of the last modification indicated at the bottom. In the event of non-acceptance of the changes made to this Privacy Policy, the User is required to cease using this Website and can request that the Data Controller remove their Personal Data. Unless otherwise specified, the previous Privacy Policy will continue to apply to Personal Data collected up to that time. The Data Controller is not responsible for updating all the links that can be viewed in this Privacy Policy, therefore whenever a link is not functioning and/or updated, Users acknowledge and accept that they must always refer to the document and/or section of the websites referred to by that link.

Privacy Policy updated March 2025