Privacy Policy

Last updated: February 25, 2026

This Privacy Policy explains how personal data are collected, used, disclosed, and protected when you visit or interact with this website (the "Website").

The Website is operated in compliance with Regulation (EU) 2016/679 (General Data Protection Regulation – GDPR) and applicable Italian data protection laws.

By using the Website, you acknowledge that you have read and understood this Privacy Policy.

1. Data Controller

The data controller responsible for the processing of personal data is:

Name / Professional Name: Paulo Del Poso

For any privacy-related request, please contact the data controller using the details above.

2. Types of Personal Data Collected

The Website may collect and process the following categories of personal data:

a) Data voluntarily provided by the user

  • name and surname

  • email address

  • phone number

  • business information

  • project details or messages sent via contact forms

  • any other information voluntarily provided

b) Automatically collected data

When visiting the Website, certain technical data may be collected automatically, including:

  • IP address

  • browser type and version

  • operating system

  • referring URLs

  • pages visited

  • date and time of access

  • device information

c) Cookies and tracking technologies

The Website may use cookies and similar technologies to ensure functionality, improve performance, and analyze usage. See the Cookie section below.

3. Purposes of Data Processing

Personal data may be processed for the following purposes:

  • responding to inquiries or contact requests

  • providing freelance services or preparing quotations

  • managing contractual or pre-contractual relationships

  • administrative and accounting obligations

  • legal compliance

  • improving website performance and user experience

  • security monitoring and fraud prevention

4. Legal Basis for Processing

Processing of personal data is based on one or more of the following legal grounds:

  • consent of the data subject

  • performance of a contract or pre-contractual measures

  • compliance with legal obligations

  • legitimate interests of the data controller (e.g., website security, service improvement)

5. Data Retention

Personal data are retained only for as long as necessary to fulfill the purposes for which they were collected, including legal, administrative, and contractual obligations.

Retention periods may vary depending on:

  • legal requirements

  • contractual obligations

  • legitimate business needs

Data that are no longer necessary will be securely deleted or anonymized.

6. Data Sharing and Recipients

Personal data may be shared with:

  • service providers and technical partners (hosting, email services, analytics tools)

  • professional advisors (accountants, legal consultants)

  • public authorities when required by law

All third-party processors act under appropriate contractual safeguards and process data only as instructed.

Personal data will not be sold or rented to third parties.

7. International Data Transfers

Where personal data are transferred outside the European Economic Area (EEA), such transfers will occur only where appropriate safeguards are in place, such as:

  • adequacy decisions by the European Commission

  • standard contractual clauses

  • other legally approved transfer mechanisms

8. Data Security

Appropriate technical and organizational measures are implemented to protect personal data against:

  • unauthorized access

  • loss or destruction

  • alteration

  • disclosure

  • misuse

Security measures include, where appropriate, encryption, access control, and secure hosting infrastructure.

9. Rights of Data Subjects

Under the GDPR, users have the following rights:

  • right of access to personal data

  • right to rectification of inaccurate data

  • right to erasure ("right to be forgotten")

  • right to restriction of processing

  • right to data portability

  • right to object to processing

  • right to withdraw consent at any time

  • right to lodge a complaint with the competent supervisory authority

Requests to exercise rights may be submitted to the data controller using the contact details provided above.

10. Cookies

The Website may use:

  • technical cookies necessary for operation

  • analytics cookies

  • third-party cookies

Where required by law, cookies are used only with user consent. Users may manage cookie preferences through browser settings or consent tools provided on the Website.

11. Third-Party Services

The Website may use third-party services that process data on behalf of the data controller, including hosting providers, analytics services, communication tools, and payment processors where applicable.

Each third party processes data according to its own privacy policy and applicable data protection laws.

12. Children’s Data

The Website is not intended for individuals under the age of 18. Personal data of minors are not knowingly collected. If such data are identified, they will be promptly deleted.

13. Changes to this Privacy Policy

This Privacy Policy may be updated at any time to reflect legal, technical, or operational changes.

Updated versions will be published on the Website with a revised "Last updated" date.

14. Contact

For questions regarding this Privacy Policy or the processing of personal data, please contact the data controller using the information provided in Section 1.