Privacy Policy

Thank you for your interest in our webssite. The protection of your personal data during the collection, storage and other processing during your visit to our website is important to us. Your data is protected in accordance with legal data protection regulations. Since 25 May 2018, the uniform requirements of the General EU Data Protection Regulation ("GDPR") applies throughout Europe in the area of data protection. The following privacy policy informs you ("you" and/or "user" and/or "data subject") about the processing of personal data carried out by, (and/or "us" and/or "Controller").
Please take a moment to read the privacy policy below. The privacy policy provide you with information on how we handle your personal data, how and for what purpose this personal data is used, to whom we pass this personal data on and how we protect your personal data. Your personal rights are our highest priority and we make every effort to protect and provide these rights.


This privacy policy applies to data processing by Lorenzo Leonelli.

Personal data, purposes of data processing, legal bases, recipients:

Scope of processing of personal data

Personal data is information that can reveal or disclose the identity of the user. We only process personal data of our users if this is necessary to provide a functional website as well as our contents and services. The processing of personal data of our users takes place regularly only after consent of the user. An exception applies in those cases where prior consent cannot be obtained for factual reasons and the processing of the data is permitted by law.

Legal basis for the processing of personal data

Insofar as we obtain the consent of the data subject for the processing of personal data, Article 6(1)(a) GDPR serves as the legal basis. For the processing of personal data necessary for the performance of a contract to which the data subject is a party, Article 6(1)(b) GDPR shall serve as the legal basis. This also applies to processing operations that are necessary to carry out pre-contractual measures. Where the processing of personal data is necessary to fulfil a legal obligation to which theinfosecvault is subject, Article 6(1)(c) GDPR serves as the legal basis. Where the vital interests of the data subject or another natural person require the processing of personal data, Article 6(1)(d) GDPR shall serve as the legal basis. If processing is necessary to safeguard a legitimate interest of or a third party and if the interests, fundamental rights and freedoms of the data subject do not outweigh the first interest, Article 6(1)(f) GDPR serves as the legal basis for processing. The concretely applicable legal basis for the processing of personal data is always mentioned in this privacy policy with the respective concrete data processing.

Data deletion and storage duration

The personal data of the data subject will be deleted or blocked as soon as the purpose of storage ceases to apply. Furthermore, data may be stored if this has been provided for by the European or national legislator in EU regulations, laws or other provisions to which the data subject is subject. The data will also be blocked or deleted if a storage period prescribed by the aforementioned standards expires, unless there is a need for further storage of the data for the conclusion or fulfilment of a contract.

Data Processing for advertising purposes

We are not using your information for marketing purposes and our website does not offer you the chance to register for a newsletter. Only technical cookies brovided by our ISP are un use and we are not collecting any data of you.

Your Statutory Rights

Overview of the individual statutory rights under Article 15 et seq. GDPR

In addition to the right to revoke your consent given to us, you have the following further rights if the respective legal requirements are met: the right to obtain information about your personal data stored by us (Art. 15 GDPR), in particular you can request information about the purposes of processing, the category of personal data, the categories of recipients to whom your data was or will be disclosed, the planned storage period, the origin of your data if these were not collected directly from you; the right to correct inaccurate or complete correct data (Art. 16 GDPR), the right to delete your data stored with us (Art. 17 GDPR), as far as no legal or contractual retention periods or other legal obligations or rights for further storage are to be observed by us, the right to restrict the processing of your data (Art. 18 GDPR) if you dispute the accuracy of the data, if the processing is unlawful but you refuse to delete it; the data controller no longer needs the data, but you need them to assert, exercise or defend legal claims or you have filed an objection to the processing in accordance with Art. 21 GDPR, the right to tranfer data in accordance with Art. 20 GDPR, i.e. the right to receive selected data stored by us about you in a common, machine-readable format, or to request the transfer to another Controller.

Right to Object

Under the conditions of Art. 21 (1) GDPR, data processing may be objected for reasons arising from the special situation of the data subject. The above general right to object applies to all processing purposes described in this Privacy Policy which are processed on the basis of Article 6(1)(f) GDPR. In contrast to the special right to object directed at data processing for advertising purposes, according to the GDPR we are only obliged to implement such a general objection if you give us reasons of superior importance (e.g. a possible danger to life or health).

Right to withdrawal

Insofar as we process data on the basis of a consent given by you, you have the right to revoke the consent given at any time. The revocation of the consent does not mean that the data processing carried out on the basis of the consent up to the time of the revocation becomes ineffective.

Right to appeal

Without prejudice to any other administrative or judicial remedy, you have the right of appeal to a supervisory authority, in particular in the Member State of your place of residence, employment or suspected infringement, if you believe that the processing of personal data concerning you is contrary to the GDPR.