This privacy policy explains how personal data is handled when you visit Dossier Thriller and when you write through its contact form. The site owner is established in Italy, in the European Union, so processing is governed by Regulation (EU) 2016/679, the General Data Protection Regulation (GDPR), and by Italian data protection law. The policy applies to every visitor, wherever they connect from.

Data Controller

The data controller, the person who decides why and how personal data is processed on this site, is:

Site owner and data controller
Luca Domenico Catanoso
Via Moro da Fenegrò 3
22070 Fenegrò (CO), Italy
VAT number (Partita IVA) 03942850136
Contact: info@dossierthriller.it

Any request concerning personal data can be sent to the contact address above or through the contact form.

What Data Is Processed

Data you provide through the contact form

Your name, your email address and the text of your message. Please do not include in the message information you do not wish to share, and in particular no health data or other special categories of personal data.

Browsing data

When pages are loaded, the systems that run the site automatically record the technical data that every connection on the internet involves: the IP address of the device, the type and version of the browser, the type of device and operating system, the pages visited and the date and time of each request. This data is used to deliver and protect the site and to produce statistics, not to identify individual visitors.

Cookies

The site uses technical cookies, browsing statistics tools and third-party cookies of the Amazon Associates program. Each category is described in the cookie policy.

Purposes and Legal Bases

• Answering messages sent through the form. Article 6(1)(b) GDPR, because the processing is needed to act on a request you make, together with the legitimate interest of the controller, under Article 6(1)(f), in handling reports of errors, suggestions and correction requests that keep the catalog accurate.
• Running the site, keeping it secure and remembering display preferences, through browsing data and technical cookies. Legitimate interest, under Article 6(1)(f), in providing a website that works and is protected against misuse.
• Browsing statistics that use non-technical cookies, and third-party cookies, including those of the Amazon Associates program. Consent, under Article 6(1)(a), given through the cookie banner and revocable at any time.
• Compliance with legal obligations, where they apply, for example a lawful request from a public authority. Article 6(1)(c).

The Contact Form

The contact form is provided by Zoho, which acts as a data processor on behalf of the controller. Zoho receives the data entered in the form, stores it and delivers it to the controller, under the data processing terms that govern the service, and does not use it for purposes of its own. The form also sets technical cookies that it needs in order to load and to send messages correctly.

Browsing Statistics

The site uses tools that measure visits in aggregate: how many people read a page, which sections are visited most, which devices and browsers are used. The figures help decide which parts of the catalog need work first. When these tools rely on cookies that are not strictly technical, they are activated only after consent has been given in the cookie banner; if consent is refused, no such cookie is set and browsing is not affected.

Amazon Associates

The site takes part in the Amazon Associates program of Amazon.com. When a visitor follows a link to Amazon, Amazon uses its own cookies to recognize that the visit started on this site and to attribute any qualifying purchase. Amazon acts as an independent controller for the data it collects on its own website, under its own privacy notice. The site owner receives from Amazon only aggregated reports of clicks and qualifying purchases, which do not identify the people who made them. How the links work is explained in the affiliate disclosure.

Whether Providing Data Is Required

Using the contact form is optional. If you choose to write, your name and email address are needed to receive an answer, and a message without them cannot be handled. Browsing data is collected automatically as part of how websites work. Consent to non-technical cookies is entirely optional: refusing it does not limit access to any page.

How Long Data Is Kept

• Messages sent through the form are kept for the time needed to handle the request and any correction that follows from it, and are then deleted, unless longer retention is required to comply with a legal obligation or to establish, exercise or defend a legal claim.
• Browsing data recorded by the servers is kept for the limited period needed for security and for investigating faults or misuse, and is then deleted or made anonymous.
• Choices made in the cookie banner are stored for the period set by the banner, after which you are asked again. Each cookie expires according to the duration set by whoever issues it, and the cookie policy explains how to delete cookies at any time.
• Aggregated statistics that do not identify anyone may be kept without a time limit.

Who Receives the Data

Personal data is not sold, rented or shared for marketing purposes. It is processed, as data processors bound by the terms of their service, by the hosting provider that runs the servers of the site and by Zoho, which manages the contact form. Where consent has been given, data is also processed by the providers of the statistics tools and of the third-party cookies described above. Public authorities receive data only where the law requires it. Amazon receives data only when a visitor chooses to follow a link to its website.

Transfers Outside the European Union

Some providers may process data on servers located outside the European Economic Area, including in the United States. Any such transfer takes place only with the safeguards set out in Chapter V of the GDPR: an adequacy decision of the European Commission, such as the EU-U.S. Data Privacy Framework for companies certified under it, or the Standard Contractual Clauses adopted by the Commission, together with any additional measures they require.

Security

The site is served only over an encrypted HTTPS connection, access to its administration is restricted and protected, and its software is kept up to date. Data received through the form is accessible only to the controller and to the processors who need it to provide their service. No system is entirely free of risk; in the event of a personal data breach, the controller will act as required by Articles 33 and 34 of the GDPR.

Your Rights

Under Articles 15 to 22 of the GDPR, you have the right to:

• access the personal data concerning you and receive a copy of it (Article 15);
• have inaccurate data corrected and incomplete data completed (Article 16);
• obtain the erasure of your data, where the conditions of Article 17 apply;
• obtain the restriction of processing, in the cases set out in Article 18;
• receive the data you provided in a structured, commonly used and machine-readable format, and have it transmitted to another controller, where processing is based on consent or on a request of yours and is carried out by automated means (Article 20);
• object at any time, on grounds relating to your particular situation, to processing based on legitimate interest (Article 21);
• not be subject to a decision based solely on automated processing, including profiling (Article 22). The site makes no such decisions.

Where processing is based on consent, you can withdraw it at any time, without affecting the lawfulness of the processing carried out before the withdrawal. Cookie choices can be changed or withdrawn from the consent panel. To exercise any other right, write to the contact address shown in the Data Controller section or use the contact form. You will receive an answer without undue delay and in any case within one month, a period that can be extended by two further months in the cases provided for by Article 12(3) of the GDPR.

Complaints

If you believe that the processing of your personal data infringes the GDPR, you have the right to lodge a complaint with the Italian supervisory authority, the Garante per la protezione dei dati personali, or with the supervisory authority of the EU member state where you live, where you work or where the alleged infringement took place.

Changes to This Policy

This policy may be updated when the site changes or when the law requires it. The version in force is always the one published on this page. Cookies are covered in detail by the cookie policy, and the general conditions for using the site are set out in the terms of use.