The processing connected to the web services of this site takes place at the headquarters of Data Controller or at the offices of the suppliers who support the Controller. Personal data shall not be transmitted abroad to Countries or International Organisations not based on the European Union, which countries or organisations are incapable of providing an adequate level of protection, as per art. 45 GDPR, in accordance with a decision regarding adequacy issued by the EU Commission. If required for provision of the Site’s services, transfer of personal data to non-EU Countries or International Organisations, in respect of which the Commission has issued no decision regarding adequacy as per art. 45 GDPR, shall take place only in the presence of adequate guarantees provided by the addressee Country or Organisation, as per art. 46 GDPR, on condition furthermore that the subjects concerned effectively enjoy rights to seek judicial remedy and to appeal. In the absence of a decision regarding adequacy issued by the Commission, pursuant to art. 45 GDPR, or in the absence of adequate guarantees pursuant to art. 46 GDPR, including binding corporate rules, transfer abroad is conditional upon efficacy of one of the terms set forth in art. 49 GDPR. The data collected during use are processed, exclusively by authorized persons, with automated and non-automated means, and for the time necessary to achieve the purposes for which they were collected. In order to prevent the loss of data, as well as unlawful or incorrect use thereof, specific security measures are implemented to ensure confidentiality and to avoid illegitimate access by third parties or unauthorized personnel, in accordance with legal obligations.