information notice on the processing of personal data

mario nanni (hereinafter also referred to as “marionanni”) respects your privacy and undertakes to process personal data with the utmost care and in compliance with the applicable provisions on the matter, including Regulation (EU) 2016/679 (“GDPR”) and italian legislative decree 196/2003, as also updated pursuant to legislative decree 101/2018.

the purpose of this notice is therefore to inform you, with the greatest transparency, about the processing of personal data carried out by marionanni through the website www.marionanni.com / www.marionanni.it (hereinafter also referred to as the “website”).

it is important to us to explain how we collect, use and store your personal data in the context of the relationship established between you and marionanni, even simply through your interaction with the website. for this very reason, we invite you to read this notice carefully before submitting any kind of personal data to marionanni through the website.

personal data means any information that makes it possible to identify a person, including indirectly (for example by combining it with other information). personal data are, for example, the email address, the first name and surname, information concerning a person, etc.

data controller

the controller of the personal data you may provide us with is mario nanni, with offices in via santo stefano n. 94, 40121 bologna, who can be reached at the following contact details:

telephone: 051 305102
email address: amministrazione@marionanni.com

types of personal data processed

when you browse, interact or fill in the form for subscribing to the marionanni newsletter available on the website, marionanni processes the following types of personal data:

1. the data you provide to marionanni by contacting him at the contact details given in the “contacts” section of the website, such as, for example, first name, surname, email address and possibly your telephone number;
2. subject to your consent, your email address for subscription to the marionanni newsletter service and, more generally, for the carrying out of marketing activities by the latter;
3. browsing data which, although constituting information that is not collected in order to be associated with identified data subjects, by its very nature could, through processing and association with personal data held by third parties, make it possible to identify users and reveal information about their interactions with the website. these are, in particular, the data collected automatically while browsing the website and necessary for its operation. in this regard, we point out that, in order to speed up the loading of the relevant pages, the website uses the content delivery network (CDN) “jsDelivr”, a tool that entails the transfer of the user’s IP address to the servers of the provider of that tool. here you can find the information notice on the processing of personal data of the provider of the “jsDelivr” tool volentio JSD limited, which processes your personal data as an independent controller.

purposes and optional or mandatory nature of the processing

marionanni processes your personal data for the following purposes:

1. to respond to your requests made by contacting marionanni at the contact details given in the “contacts” section of the website;
2. to comply with legal obligations and to protect his own rights;
3. to allow you to browse the website and for IT security purposes.

providing your data for all the above purposes is not mandatory, but refusing to provide it makes it impossible for marionanni to act on your requests;

4. subject to your consent, to promote his own activity and increase its visibility, as well as to update you on the initiatives and on the projects started through fondazione marionanni ets, for example to invite you to events and to share with you content concerning marionanni and/or fondazione marionanni ets.

providing the personal data that marionanni may process for the above marketing purposes is optional and, in the absence of your explicit consent to such processing, marionanni will not be able to send you promotional communications.

legal basis of the processing

marionanni processes your personal data on the basis of the following conditions of lawfulness:

1. the performance of pre-contractual measures, in particular providing you, at your request, with information about marionanni’s activity, pursuant to art. 6, letter b), of the GDPR;
2. compliance with legal obligations by marionanni pursuant to art. 6, letter c), of the GDPR;
3. the pursuit of legitimate interests of marionanni, pursuant to art. 6, letter f), of the GDPR, consisting in the defence of his own rights and in the use of the website and, more generally, of IT tools to promote his own activity;
4. the consent you may have given to the processing of your personal data by marionanni for marketing purposes pursuant to art. 6, letter a), of the GDPR.

marionanni processes your personal data for marketing purposes solely upon your release of specific consent to carrying out such processing activity. the consent you give is optional and may be withdrawn at any time (in the manner set out in the “withdrawal of consent” section of this notice). in the absence of your consent, marionanni will not carry out any processing of your personal data for marketing purposes.

parties who have access to personal data

marionanni limits access to personal data as far as possible, making it available to his own duly authorised staff who have reason to access it in order to carry out their professional duties.

your personal data may also be made available to the service providers used by marionanni in carrying out his activity.

such parties process personal data as data processors, in accordance with the instructions given to them by marionanni. marionanni provides such parties only with the data necessary to perform the services agreed with each of them.

the service providers in question belong to the following categories:

• companies, consultants and IT service providers;
• communication agencies.

marionanni may also disclose personal data in order to comply with any requests from the Authorities and/or to protect his own rights in litigation.

processing methods and scope of circulation of personal data

marionanni processes personal data in paper form and with the aid of electronic tools, within the limits of the purposes set out in this notice and adopting measures aimed at maintaining the confidentiality and secrecy of personal data.

marionanni pays great attention to the protection and confidentiality of personal data and, also for this reason, does not carry out any dissemination and/or commercialisation of personal data.

in some cases your personal data may be transferred outside the territory of the European Union. such transfer takes place ensuring adequate levels of protection of your personal data, also in accordance with the provisions of articles 45 and 46 of the GDPR.

in particular, transfers of data outside the European Union take place to countries that offer an adequate level of protection of personal data, as established by specific decisions of the European Commission.

the lawfulness of the transfer of personal data to the united states is also guaranteed by the adherence to the EU-US Data Privacy Framework by the service providers used by marionanni. you can find further information on the Data Privacy Framework (the agreement governing the transfer of personal data between the European Union and the USA) by consulting the following links:

• www.garanteprivacy.it/temi/trasferimento-di-dati-all-estero
• www.dataprivacyframework.gov/Program-Overview

in the other cases, transfers of personal data outside the European Union take place against the provision of adequate safeguards for the protection of your personal data by marionanni’s suppliers or sub-suppliers that receive them. such parties have in fact signed the standard contractual clauses for the protection of personal data adopted by the European Commission.

retention period of personal data

your personal data are retained by marionanni for a limited period of time, necessary to pursue the purposes of each processing operation indicated above. at the end of such period your data will be deleted or anonymised.

the personal data processed for the performance of pre-contractual measures will be retained for the time strictly necessary to respond to your requests and then deleted. the personal data processed on that legal basis will in any case be deleted once 2 years have elapsed from the last contact.

within 24 months from the collection of the personal data processed for sending the marionanni newsletter and, more generally, for carrying out marketing activities, marionanni will endeavour to obtain a new consent in order to continue such activities, failing which such personal data will be deleted.

withdrawal of consent

at any time you may object to the processing of your personal data by marionanni for sending newsletters and, more generally, for carrying out marketing activities.

you may withdraw your consent to such processing activities on your data by sending an email to the address or by following the instructions given at the bottom of the newsletters or promotional communications you receive from marionanni.

once we have received your request, we will make sure to promptly cease the processing of your personal data based on the consent you have withdrawn. processing operations that are different or based on conditions of lawfulness other than consent will continue to be carried out as provided for in this notice and in full compliance with the provisions in force.

the withdrawal of consent to the processing of your personal data for marketing purposes does not affect the lawfulness of the processing carried out by marionanni based on the consent given before the withdrawal.

your rights

at any time you may contact marionanni, writing an email to the address amministrazione@marionanni.com, to receive the list of the data processors (that is, of marionanni’s service providers that carry out processing operations on personal data on the basis of the instructions given to them by the latter).

also by writing an email to the address amministrazione@marionanni.com you may ask to exercise the rights provided for by the legislation on the protection of the confidentiality of personal data (as set out in articles 15 to 22 of the GDPR), including those to:

1. obtain confirmation as to whether or not processing of your personal data is taking place, to have access to your data processed by marionanni, to know the purpose of the processing, the categories of personal data processed and the recipients or categories of recipients to whom your personal data have been or will be disclosed. you also have the right to know the retention period of your personal data or, if that is not possible, the criteria used to determine such period;
2. verify the accuracy of your personal data and their origin, request the integration, updating, rectification, erasure or anonymisation of your personal data, as well as the restriction of their processing, or object to their processing (in the cases provided for by articles 17 and 18 of the GDPR);
3. lodge a complaint with the Supervisory Authority (the authority with jurisdiction for italy is the Garante per la protezione dei dati personali, the italian data protection authority);
4. in the event of transfer of your data to a third country, be informed of the existence of adequate safeguards pursuant to article 46 of the GDPR relating to the transfer;
5. object, on grounds relating to your particular situation, to the processing of your personal data carried out on the basis of a legitimate interest of marionanni, provided that there are no overriding grounds for marionanni to proceed with the processing in any case (for example, the need to protect his own rights in litigation);
6. exercise the right to the portability of your personal data.

once your request has been received, marionanni will handle it with the utmost promptness and seriousness in order to facilitate the exercise of your rights, providing you with a reply without delay and in any case within one month of receipt of the request. only in cases of particular complexity may the deadline for replying to your request be extended up to two months from its receipt; in that case marionanni will keep you informed about the status of the process of handling your request.

(last updated 29.05.2026)