1. Data Controller
The Data Controller is Simila Laiatici.
- Email: laiaticisimila@gmail.com
- Telephone/WhatsApp: +39 392 496 4722
- Address: SP 11 delle Colline per Legoli 12, 56036 Palaia (PI), Italia
2. Data processed
The website may process technical browsing and security-log data; contact-form data (name, email, area and message); information voluntarily sent by email or WhatsApp; and cookie preferences. The website does not request special-category data. Please do not include unnecessary health or other sensitive information in an initial message.
3. Purposes and legal bases
- Replying to enquiries and taking pre-contractual steps: Article 6(1)(b) GDPR and, where relevant, legitimate interests in managing communications, Article 6(1)(f).
- Security, abuse prevention and technical operation: legitimate interests, Article 6(1)(f), and applicable obligations.
- Legal compliance and defence of rights: Articles 6(1)(c) and 6(1)(f).
- Statistics through Google Analytics 4: consent only, Article 6(1)(a). The Google tag does not load or send data before consent.
4. Processing, recipients and processors
Data is processed electronically with measures proportionate to risk. Where necessary, it may be accessed by the hosting, domain and email provider (Register.it), confidential technical advisers, and authorities where required by law. Google receives analytics data only after the visitor consents. WhatsApp and social links open external services governed by their own notices.
5. Transfers outside the EEA
After consent, Google may process analytics data outside the European Economic Area. Google Ireland Limited provides the service and may use group companies and subprocessors. Transfers rely on the mechanisms and safeguards identified by Google, including standard contractual clauses where applicable.
6. Retention
- Contact enquiries: normally up to 24 months after the last useful exchange, unless longer retention is required for pre-contractual, contractual or legal-defence purposes.
- Legally required records: for the applicable statutory period.
- Technical logs: for the hosting provider’s configured period and as necessary for security and diagnosis.
- Cookie preference: 6 months, unless deleted by the visitor or the processing changes materially.
- GA4 user-level and event-level data: 2 months in the Analytics property; analytics cookies expire within 13 months.
7. Data-subject rights
Where Articles 15–22 GDPR apply, individuals may request access, rectification, erasure, restriction, portability, objection and withdrawal of consent without affecting prior lawfulness. Send requests to laiaticisimila@gmail.com. A complaint may also be lodged with the Italian Data Protection Authority or another competent supervisory authority.
8. Provision, automated decisions and security
Fields marked as required are necessary for a reply; without them the form cannot be sent. No automated decision-making or profiling takes place. Reasonable technical and organisational safeguards are used, although no online transmission can be guaranteed absolutely secure.
9. Changes
This notice will be updated when services, providers or processing change. Material changes may require a new cookie choice.