This notice is provided pursuant to Art. 13 of EU Regulation 2016/679 (GDPR) to users interacting with the web services accessible through the website diasporaservices.it, operated by Diaspora Medias di Ndiaye Alioune.

1. Data Controller

Diaspora Medias di Ndiaye Alioune
Via Vittorio Bottego 15 — 20132 Milan, Italy (MI) — Italy
VAT: IT04815490265 — REA: MI-2112516
Email: info@diasporaservices.it
PEC: diaspora.medias@pec.it
Phone: +39 350 551 7360

2. Types of Data Collected

2.1 Browsing data

The computer systems and software procedures used to operate this website acquire, during their normal operation, certain personal data whose transmission is implicit in the use of Internet communication protocols (IP addresses, browser type, operating system, pages visited, access times).

2.2 Data voluntarily provided by the user

Through the forms available on the site, the user may submit:

• First and last name
• Email address
• Phone number
• Service of interest
• Free-text message
• Data necessary for the provision of purchased services (housing requests, administrative assistance)

2.3 Payment data

Data related to financial transactions is processed exclusively by the Stripe Inc. platform (PCI-DSS Level 1 certified). The Data Controller does not collect or store payment card data.

3. Purposes and Legal Basis of Processing

4. Processing Methods and Data Retention

Data is processed using IT and telematic tools, following logic strictly related to the purposes indicated. The Data Controller adopts appropriate technical and organizational measures to ensure data security (encryption, restricted access, periodic backups).

Retention periods:

• Contractual and tax data: 10 years (legal obligation, art. 2220 of the Italian Civil Code)
• Contact requests without purchase: 24 months
• Browsing data: 12 months
• Data processed on the basis of consent: until consent is withdrawn

5. Data Sharing and Transfer

Personal data is not shared with third parties for commercial purposes. It may be disclosed to:

• Technical providers (Hostinger hosting, WordPress platform, Stripe) acting as Data Processors
• VAPI AI — operator of the CIAO call center, limited to call-related data
• Competent authorities where required by law
• LBS Senegal SARL (Dakar) for bilateral procedures, subject to the data subject’s consent

Transfers to non-EU countries (Senegal) are carried out in compliance with the safeguards set out in Arts. 46-49 GDPR, using standard contractual clauses approved by the European Commission.

6. Data Subject Rights

Pursuant to Arts. 15-22 GDPR, the data subject has the right to:

To exercise these rights, the data subject may write to info@diasporaservices.it or to the PEC address diaspora.medias@pec.it. The Data Controller responds within 30 days of receiving the request. In case of non-compliance, the data subject has the right to lodge a complaint with the Garante per la Protezione dei Dati Personali (the Italian Data Protection Authority) at www.garanteprivacy.it.

7. Cookies

This website uses technical cookies necessary for its operation and analytics cookies in anonymized form. For the full cookie notice, please refer to the Cookie Policy.

8. Minors

Diaspora Services Italia’s services are intended for persons who have reached the age of 18. The Data Controller does not knowingly collect personal data from minors. Should data from minors be found to have been collected without parental consent, the Data Controller will proceed to its immediate deletion.

9. Changes to This Notice

The Data Controller reserves the right to make changes to this notice at any time. Changes will be published on this page with an updated date at the bottom. Users are invited to periodically review this page.