+39 340 534 0459



Privacy Policy of


Dear user, thank you for visiting our website.


In the following pages we describe the methods used to manage the site, with reference to the processing of the personal data of users who consult it. This information is also provided pursuant to article 13 of Legislative Decree no. 196/03 (Personal Data Protection Code) and Articles 13 and 14 of European Regulation 679/2016 (hereinafter also "GDPR"), to those who interact with the web services provided directly by the Company.


We therefore invite you to read our Privacy Policy, which is reproduced below.


Data Controller

Crisa Cartiera Artigianale di Lo Gioco Giuseppe
via Galileo Galilei, 17
94013 Leonforte - Enna - Italy

Holder's email address:



Types of data collected

The types of Personal Data collected by this Site, either autonomously or through third parties, include: name; first name; email; various types of data; tracking tools; usage data; number of users; session statistics.

Full details of each type of Personal Data collected are provided in the specific sections of this Privacy Policy or by means of specific information texts displayed prior to the collection of such data.
Personal Data may be freely provided by the User or, in the case of User Data, may be collected automatically during the use of this Site.
Unless otherwise specified, all data requested by this website is mandatory. If the User refuses to provide it, it may be impossible for this Site to provide the Service. Where this site indicates that certain data is optional, the user is free not to provide such data, without this having any effect on the availability of the service or its operation.
Users in doubt as to which data is mandatory are encouraged to contact the data controller.
Any use of cookies - or other tracking tools - by this Site or by the owners of third party services used by this Site has the purpose of providing the service requested by the User, in addition to the other purposes described in this document and in the Cookie Policy.

The user is responsible for the personal data of third parties obtained, published or exchanged through this website.


Method and place of processing of the data collected

Methods of processing
The Data Controller shall adopt appropriate security measures to prevent unauthorised access, disclosure, modification or destruction of personal data.
The processing is carried out using computer and/or telematic tools, with organisational methods and logics strictly related to the purposes indicated. In addition to the Data Controller, in some cases other subjects involved in the organisation of this site (administrative, sales, marketing, legal, system administrators) or external subjects (postal couriers, hosting providers, IT companies, communication agencies) may also have access to the data and may be appointed as Data Processors by the Data Controller. The updated list of Data Processors may be requested at any time from the Data Controller.


The data will be processed at the premises of the Data Controller and at any other place where the parties involved in the processing are located. For further information, please contact the data controller.

Retention Period
Unless otherwise stated in this document, personal data will be processed and kept for the time required for the purpose for which it was collected and may be kept for a longer period due to legal obligations or based on users' consent.


Purpose of the data collected

The User's data is collected to enable the Data Controller to provide the Service, to comply with legal obligations, to respond to requests or enforcement actions, to protect its rights and interests (or those of the User or third parties), to detect malicious or fraudulent activity, and for the following purposes Contacting the User, contact management and messaging, statistics and productivity management.


Legal basis of the processing
The Controller processes the User's personal data if one of the following conditions is met:

  • the User has given his/her consent for one or more specific purposes.
  • The processing is necessary for the performance of a contract with the User and/or for the performance of pre-contractual measures;
  • processing is necessary for the performance of a legal obligation to which the controller is subject;
  • processing is necessary for the performance of a task carried out in the public interest or in the exercise of public authority vested in the controller;
  • processing is necessary to safeguard the legitimate interests of the controller or of third parties.

However, it is always possible to ask the data controller to clarify the specific legal basis of each processing operation and, in particular, to specify whether the processing is based on a law, is required by a contract or is necessary for the conclusion of a contract.


User rights under the General Data Protection Regulation (GDPR)
Users may exercise certain rights in relation to the data processed by the Data Controller.

In particular, within the limits provided by law, the User has the right to:


  • Withdraw consent at any time. The User may revoke the consent previously given to the processing of his/her personal data.
  • object to the processing of his/her data. The User may object to the processing of his/her data if it is based on a legal basis other than consent.
  • Access to his/her data. The User has the right to obtain information on the Data processed by the Data Controller, on certain aspects of the processing and to obtain a copy of the Data processed.
  • Verification and rectification. The User may verify the accuracy of his/her data and request that it be updated or corrected.
  • obtain the restriction of the processing. The User may request that the processing of his/her data be restricted. In this case, the Data Controller will not process the data for any purpose other than its conservation.
  • obtain the deletion or erasure of their personal data. The User may request the deletion of his/her data by the Data Controller.
  • receive his data or have it transferred to another data controller. The User has the right to receive his/her data in a structured, commonly used and machine-readable format and, where technically feasible, to have it freely transferred to another data controller.
  • Complaints. The User may lodge a complaint with the competent data protection authority or take legal action.

Users have the right to obtain information about the legal basis for the transfer of data abroad, including to an international organisation governed by international law or composed of two or more countries, such as the UN, and about the security measures taken by the data controller to protect their data.

Details on the right to object


When Personal Data are processed in the public interest, in the exercise of public powers vested in the Controller or in pursuit of a legitimate interest of the Controller, Users have the right to object to the processing for reasons related to their particular situation.

Users are reminded that, should their Data be processed for direct marketing purposes, they may object to the processing at any time, free of charge and without providing any reasons. Should Users object to the processing for direct marketing purposes, the Personal Data shall no longer be processed for such purposes. To find out whether the Controller processes Data for direct marketing purposes, Users may refer to the respective sections of this document.


How to exercise your rights
In order to exercise their rights, users may send a request to the contact details of the Data Controller indicated in this document. The request is free of charge and the data controller will reply as soon as possible, and in any case within one month, providing the user with all the information required by law. Any rectification, cancellation or restriction of the processing will be communicated by the Data Controller to each of the recipients, if any, to whom the personal data has been communicated, unless this proves impossible or involves a disproportionate effort. The Controller will inform the User of such recipients upon request.




Personal data will be processed for the following purposes and services:



Contact form
Personal data: name; email; first name; various types of data.



Manage contacts and send messages
Personal data: Usage data; Email; 



Statistics tools
Google Analytics 4 / Flazio's internal statistics tools


  • Tips and tricks
  • Real time
  • User exploration
  • Devices
  • Behaviour
  • Acquisition
  • E-commerce
  • Blog
  • Targets

Personal data: Usage data; number of users; session statistics; tracking tools



Contact Information

Data Controller
Crisa Cartiera Artigianale di Lo Gioco Giuseppe
via Galileo Galilei, 17
94013 Leonforte - Enna - Italy

Holder's email address:



This document can be printed using the print command in the settings of any browser.





Personal Information (or Data)
Personal Data is any information that, directly or indirectly, including in combination with other information, including a personal identification number, identifies or allows the identification of a natural person.


Usage data
This is the information automatically collected by this site (including by third party applications integrated into this site), including IP addresses or domain names of computers used by users connecting to this site, URI (Uniform Resource Identifier) addresses, the time of the request, the method used to send the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response from the server (successful, error, etc.), the country of origin, the characteristics of the browser and operating system used by the user, the various times at which connections are made. ), the country of origin, the characteristics of the browser and the operating system used by the visitor, the various temporal aspects of the visit (e.g. time spent on each page) and details of the itinerary of the visit (e.g. time spent on each page) and information relating to the user's visit to the site. This information may include the country of origin, the characteristics of the browser and operating system used by the visitor, the various temporal aspects of the visit (e.g. time spent on each page) and details of the itinerary followed within the site, with particular reference to the sequence of pages consulted, the operating system parameters and the user's computer environment.


The person who uses this site, which is the same as the data subject unless otherwise stated.

Data Subject
The natural person to whom the personal data relates.

Data Controller (or Data Processor)
The natural person, legal entity, public administration or any other entity that processes Personal Data on behalf of the Controller, as set out in this Privacy Policy.

Data Controller (or Owner)
The natural or legal person, public authority, service or any other body that, individually or jointly with others, determines the purposes and means of the processing of personal data and the instruments adopted, including the security measures relating to the operation and use of this website. Unless otherwise indicated, the data controller is the owner of this website.


This Site
The hardware or software tool by which users' personal information is collected and processed.

The service provided by this Site as defined in the relevant terms and conditions (if any) on this site/application.

European Union (or EU)
Unless otherwise stated, any reference in this document to the European Union shall be deemed to include all current member states of the European Union and the European Economic Area.

About Cookies
Cookies are tracking tools consisting of small pieces of data stored in the user's browser.

Tracking Tool
A tracking tool is any technology - such as cookies, unique identifiers, web beacons, embedded scripts, e-tags and fingerprinting - that enables users to be tracked, for example by collecting or storing information on the user's device.

Legal references
Unless otherwise stated, this Privacy Policy applies only to this Site.

Copyright © 2023 Cartiera Crisa by Crisa La Carta a Mano. All rights reserved. P.I. 01304940867