(EU 2016/679 – GDPR)

1. Data Controller
The Data Controller of personal data is:
Sergio Contini
Email: info@sergiocontini.com
Website: www.sergiocontini.com

2. Types of data processed
Through the website, only the following data are processed:
– common personal data voluntarily provided by the user via the contact form (name, email address, and any other information included in the message);
– technical browsing data (IP address, access logs, and security-related data), automatically collected by IT systems and the hosting server.
The website is not intended for the collection of sensitive or health-related data.

3. Purpose and legal basis of processing
Personal data are processed exclusively for the following purposes:
a) responding to requests for information, contact, or professional collaboration submitted by the user;
b) technical management and security of the website.
The legal basis for processing is:
– the performance of pre-contractual measures requested by the data subject (Article 6(1)(b) GDPR);
– the legitimate interest of the Data Controller in managing and securing the website (Article 6(1)(f) GDPR).

4. Provision of data
The provision of data is voluntary.
Failure to provide the data may result in the inability to respond to the user’s requests.

5. Methods of processing
Personal data are processed using electronic and telematic tools, in compliance with the principles of lawfulness, fairness, and transparency, and with the adoption of appropriate security measures to prevent unauthorized access, loss, or unlawful use of data.

6. Data retention
Personal data are retained for the time strictly necessary to process user requests and, in any case, for a period not exceeding 12 months, unless a longer retention period is required by law.

7. Disclosure of data
Personal data are not disclosed and are not communicated to third parties, except for technical service providers (e.g. hosting providers) acting as Data Processors pursuant to Article 28 GDPR.

8. Data transfer
Personal data are primarily processed within the European Union.
However, the use of certain third-party services (e.g. security systems such as hCaptcha) may involve data transfers to countries outside the EU.
In such cases, data are processed in compliance with applicable GDPR provisions, including the adoption of appropriate safeguards such as Standard Contractual Clauses.

9. Cookies

This website uses only technical cookies necessary for its proper functioning and security.

No profiling cookies are used.
No direct user tracking or marketing cookies are implemented.

However, third-party security services (such as hCaptcha) may collect technical data necessary to ensure protection against automated abuse.

10. Data subject’s rights
Users may exercise at any time the rights provided for by Articles 15–22 of the GDPR, including:
– the right of access to personal data;
– the right to rectification or erasure;
– the right to restriction of or objection to processing;
– the right to data portability, where applicable.
Users also have the right to lodge a complaint with the competent Data Protection Authority.
Requests may be submitted using the contact details provided on the website.

11. Data Protection Officer
A Data Protection Officer (DPO) has not been appointed, as it is not required under applicable law.

12. Updates
This Privacy Policy may be updated at any time.
Users are encouraged to review it periodically.
Last updated: 03/2026