Privacy Policy

This notice explains how Larry the Comosaurus collects, uses, and protects your personal data, in accordance with EU Regulation 2016/679 (GDPR) and Italian Legislative Decree 196/2003 (Italian Privacy Code).

Last updated:

1. Data controller

The data controllers (joint controllers) are Lorenzo Zanutto and Riccardo Petri, creators of the website and the Larry the Comosaurus brand.

To exercise your rights, you can contact us via the Contacts page.

2. Types of data collected

The website may collect the following categories of data:

  • Browsing data: IP address, browser type, pages visited, date and time of access (automatically collected through system logs)
  • Data you provide: name, email, and message if you fill in the contact form
  • Cookies and similar technologies: for website operation and usage statistics (see Cookies section)

3. Legal basis and purposes

Your data is processed for the following purposes and legal bases:

  • Service delivery: providing website features (map, legend, content). Basis: legitimate interest (Art. 6(1)(f) GDPR)
  • Responding to contact requests: managing messages sent via forms. Basis: steps prior to entering into a contract (Art. 6(1)(b) GDPR)
  • Analytics and improvements: aggregated anonymous statistics. Basis: consent (Art. 6(1)(a) GDPR), where required

4. Processing methods

Data is processed using electronic tools, with logic strictly related to the purposes above and with appropriate security measures to prevent loss, unlawful use, or unauthorized access.

5. Data recipients

Data may be shared with providers of technical services (hosting, analytics) acting as data processors, under agreements that ensure adequate protection levels.

6. Transfers outside the EU

If any services involve transferring data to non-EU countries, such transfers will take place only where an adequacy decision exists or appropriate safeguards are in place (standard contractual clauses, certifications).

7. Data retention

Browsing data (logs) is kept only for the time strictly necessary for website operation and security, in any case no longer than 12 months. Data sent via contact forms is kept for the time needed to handle the request and for any legal obligations.

8. Your rights

As a data subject, you have the right to:

  • Access (Art. 15 GDPR): obtain confirmation and a copy of your data
  • Rectification (Art. 16 GDPR): correct inaccurate or incomplete data
  • Erasure (Art. 17 GDPR): obtain deletion where applicable
  • Restriction (Art. 18 GDPR): restrict processing in certain circumstances
  • Portability (Art. 20 GDPR): receive your data in a structured format and transmit it to another controller
  • Objection (Art. 21 GDPR): object to processing on legitimate grounds
  • Withdraw consent: withdraw consent at any time, without affecting the lawfulness of processing based on consent before withdrawal

To exercise your rights, contact us via the Contacts page. You also have the right to lodge a complaint with the Italian Data Protection Authority.

10. Changes

This notice may be updated from time to time. The “last updated” date is shown at the top. We encourage you to check this page periodically to stay informed about any changes.