Information on the processing of personal data of users who consult the Company’s website pursuant to Article 13 of Regulation (EU) 2016/679


In accordance with Regulation (EU) 2016/679 (hereinafter “Regulation”), this page describes how treatment:

the personal data of users who visit the site web (hereinafter “Site”) of MADE IN CARCERE (hereinafter “Company”) accessible electronically to the following address:;

the personal data entered or collected through the social pages of the Company.

This information does not concerning other websites, pages or online services reachable through links hypertext possibly published on the site but referring to resources outside the Society domain.



Data controller is:

OFFICINA CREATIVA, as person of the legal representative p.t., with legal office in LECCE (CAP 73010), in Via Abramo Balmes n.24, tax code and VAT number 03992810758, e-mail, certified mail, mobile +39 0832 092187 – +39 335 7650327.


The Company will process the data only if it has a legal basis for doing so.

The legislation on protection of personal data establishes that the processing of personal data shall be lawful only if and to the extent that at least one of the following is used conditions (referred to in art. 6 of the Regulation):

a) the person concerned consent to the processing of your personal data for one or more specific purpose;

b) the treatment is necessary for the performance of a contract to which the person concerned is a party; or the implementation of pre-contractual measures taken at its request;

c) the treatment is necessary to fulfil a legal obligation to which the holder of the treatment;

d) the treatment is necessary for the protection of the vital interests of the data subject or another natural person;

e) the treatement is necessary for the performance of a public or related task the exercise of official authority vested in the holder of the treatment;

f) the treatement is necessary for the pursuit of the legitimate interest of the holder of the treatment or third parties, provided that interests or fundamental rights and freedoms of the data subject who require protection personal data, in particular if the data subject is a minor.

The legal basis for the treatment, therefore, will depend on the reasons why the Company collected and used data.

Those grounds shall consist, in some cases (such as applications received through the section contacts), in the need to provide due response to requests received (in this case, therefore, the legal basis is the execution of a contract and/or pre-contractual measures), in other cases in the duty of following up legal and/or regulatory obligations, or, in other cases, as possibility of pursuing the legitimate interest of the Company which will be identified every time. Where, on the other hand, consent is required of the interested party, such consent will be required in the form of law.


For personal data we mean all information about the user, through which it is possible to identify. Personal data are therefore, for example, the name, the surname, contact details, telephone number, e-mail address, IP address and information regarding your access to the Site.

Following the consultation procedure the Site, as well as following the use of the services made available through the same, the Company may collect personal data of users to follow-up of telephone communications to the contact details on the Website, following receiving mail to the addresses on the Site, or through the filling in the forms in the contacts section, or, again through the use of social network plug-ins used on the Site.

In particular the types of data that are treated may be classified as follows:


Informatic systems and the software procedures for the operation of the Site acquire, during of their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols.

implicita nell’uso dei protocolli di comunicazione di Internet. are not collected to be associated with identified data subjects, but for their same nature, they could, through processing and data association held by third parties, allow to identify users.

This data category includes IP addresses or domain names of computers used by users who connect to the site, addresses in URI/URL notation (Uniform Resource Identifier/Locator) of requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numeric code indicating the status of the response given by the server (successful, error, etc.) and other parameters regarding the operating system and user’s computer environment.

Such data, necessary for the use of web services, are also treated for the purpose of:

obtain information statistics on the use of services (most visited pages, number of visitors for time slot or daily, geographical areas of origin, etc. );

check the correct operation of the offered services;

identify anomalies and/or abuses.

NAvigation data do not persist for more than seven days (except for any need to ascertain offences by the Judicial Authority).


The optional dispatch explicit and voluntary messages to the Company’s contact addresses, the private messages sent by users to institutional profiles/pages on social media (where this possibility exists), and compilation and the submission of the forms on the Company’s website, involve the acquisition of the sender’s contact details needed to reply, and any personal data included in the communications.

specific information will be published in the pages of the Site prepared for the provision of specific services.


No use of cookies is done for user prolifaction and other tracking methods are not used.

Instead it is made use of session cookies (not persistent) strictly limited to what necessary for the safe and efficient navigation of the Site. The storage of session cookies in terminals or browsers is under control user, where on servers, at the end of HTTP sessions, information regarding cookies remain recorded in the service logs, with times of retention for no more than seven days in the same way as other data of navigation.

Specifically, the Website uses the following cookies:

Google AnalyticsThird-party cookies that allows the aggregate analysis of user visits for statistical and informational purposesLink
AdWords Remarketing (Google Inc.)AdWords Remarketing is a service of remarketing and behavioral targeting offered by Google Inc.Link
Facebook account accessThis service allows you to connect with the user’s account on the social network Facebook, provided by Facebook, Inc.Link


Where applicable, the lack of identification of necessary data to meet requests could lead to the impossibility for the Company to provide a comprehensive response or services available.

Where necessary, the Company, will inform, everytime, the user about the mandatory character or optional of the provision of personal data (eg. to make a specific request).

n particular, it will be highlighted the mandatory or optional nature of the communication of data, by means of a notice or a specific character to the information mandatory.


The recipient of the data is the Company’staff acting on the basis of specific instructions provided with regard to the purposes and methods of processing.

They are also recipients of data collected following the consultation of the Site the subjects designated by the Companies, pursuant to Article 28 of the Regulation, as responsible for treatment.

Where the use of social media plug-in on the Site, the data will be shared with the social media service and possibly with the current user profile on social media themselves. In this case please refer to to the Information on the processing of personal data published by social media.

In any case, the data personal processed will not be disclosed.

It is without prejudice, in accordance with to the provisions of the law, the communication or dissemination of the required data by the Police, the Judicial Authority, information bodies and security or other public entities for defence or security purposes the State or the prevention, detection or prosecution of criminal offences.


Data will be processed:

through hand tools, and in such a way as to ensure the availability, integrity and confidentiality of the data;

with organisational arrangements and with logic strictly related to the purposes indicated, in compliance with the principle of minimisation;

by subjects specifically appointed, identified and authorised, properly instructed and made aware the constraints imposed by the legislation in question;

using measures of technical and organisational security to prevent and/or reduce the risks of unlawful access and destruction or loss of data.


The management and storage of personal data will take place in Italy and, in any case, within the European Union.

At the moment the server uses by Company data are located within the european territory

Data will not be object of transfer outside the European Union.

Remains in any case understood that, if it deems it necessary and/or appropriate, the Company will have the right to change the location of servers in Italy and/or the European Union and/or non-EU countries. In this case, the Company will ensure that the transfer of data outside the EU takes place in accordance with the applicable legal provisions, stipulating, if necessary, arrangements ensuring an adequate level of protection, and/or adopting the standard contractual clauses provided by the European Commission, and/or, in any case, meeting the conditions laid down in the legislation applicable.


The data collected by the Site will be used exclusively for the purposes indicated and will be kept for the time strictly necessary to carry out the activities of the Company.

Data will not be stored for a period of time longer than necessary to meet the purpose for which they have been treated. To determine the shelf-life appropriate, the Company will consider the quantity, nature and sensitivity of personal data, the purposes for which they are processed and the the possibility of achieving these objectives by other means.

I dati raccolti dal sito will therefore be kept for the duration necessary to the feedback of requests and, even after termination, to manage all possible contractual, pre-contractual, administrative or legal obligations related to or arising from them, or for the time allowed by Italian law to protection of the Company’s legitimate interests.


The interested have the right to obtain from the Company, in the cases provided, access to their personal data and the rectification or cancellation of the same or the limitation of treatment that concerns them, to oppose the treatment or to request the c.d. data portability.

Interested parties can also, at any time, revoke the consent given (cf. artt. 15 e ss. of the Regulation).

The appropriate request to Company is presented by contacting the Data Controller, at the addresses below.

The iterested party who consider that personal data processing related to them and carried out through the Site occurs in violation of the provisions of the Regulations have the right to lodge a complaint with the Guarantor, as required by art. 77 of the Regulation itself or to refer the matter to the appropriate courts (Art. 79 of the Rules of Procedure).


The Company may amend or simply update, the whole or in part, the present disclosure, also in consideration of any regulatory and/or regulatory changes in the matter.

The Company is commited to not limit any rights previously recognised, without first collecting the explicit consent of the data subject.

The amendments and the updates will be made available on the home page of the Site. The amendaments that are more relevant will be made clear through a clearer warning (for example, where the services and data collected allow, through a notification via mail).