Privacy Policy

Privacy notice pursuant to Articles 13-14 of Regulation (EU) 2016/679 ("GDPR"). Last updated: 12 July 2026.

Data controller

Elena Castellet — email: elenacslt@gmail.com

Data processed, purposes and legal bases

• Contact form: name, email, subject (optional) and message, provided voluntarily in order to be contacted back. Legal basis: pre-contractual measures taken at the data subject's request (Art. 6.1.b) and consent given via the dedicated checkbox (Art. 6.1.a).
• IP address and user-agent: stored together with the message for security and abuse/spam prevention. Legal basis: legitimate interest of the controller (Art. 6.1.f).
• Browsing data: technical logs generated by the hosting provider and by the site protection services. Legal basis: legitimate interest (Art. 6.1.f).

No profiling, marketing or transfer of data to third parties is carried out.

Retention period

Messages sent through the form (including IP and user-agent) are kept for 12 months from receipt, then automatically deleted. Technical logs are kept for the periods defined by the providers.

Recipients

• Netsons S.r.l. (Italy) — website hosting and email service.
• Cloudflare, Inc. — content delivery and protection (CDN). Data transit may involve transfers outside the EU with the safeguards provided by the GDPR (EU-US Data Privacy Framework / standard contractual clauses).

Third-party content

Some pages may embed YouTube or Vimeo videos. Videos are loaded only after your consent (cookie banner or "Load video" button): at that point the providers may set their own cookies. Details in the Cookie Policy.

Your rights

Under Articles 15-22 GDPR you may request access, rectification, erasure, restriction, objection and portability of your data, and withdraw consent at any time, by writing to elenacslt@gmail.com. The controller responds within 30 days (one month) of the request, a period that may be extended by a further two months for particularly complex requests (Art. 12.3 GDPR). You also have the right to lodge a complaint with the Italian supervisory authority (garanteprivacy.it).

Provision of data

Providing data through the form is optional, but necessary to receive a reply. The site can be browsed without providing any data.