Privacy Policy

Introduction

Welcome to lucabertelli.consulting. This Privacy Policy explains how I, Luca Bertelli (Data Controller), collect, use, and protect your personal information when you visit this website. I am committed to ensuring your privacy is protected in compliance with the General Data Protection Regulation (GDPR - EU Regulation 2016/679), the Italian Privacy Code (Legislative Decree 196/2003, as amended by Legislative Decree 101/2018), and the ePrivacy Directive.

Data Controller

The Data Controller for this website is:

Personal Data Collected

I may collect the following types of personal data:

Purpose of Data Processing

Your personal data is processed for the following purposes:

• To respond to your contact requests and inquiries
• To provide information about consulting services
• To ensure the security and proper functioning of the website
• To comply with legal obligations

Legal Basis for Processing

The processing of your personal data is based on:

• Your consent (Art. 6(1)(a) GDPR) - for contact form submissions
• Legitimate interest (Art. 6(1)(f) GDPR) - for website security and analytics
• Legal obligations (Art. 6(1)(c) GDPR) - for compliance with applicable laws

Data Retention

Personal data collected through the contact form is retained for the time necessary to fulfill the purpose for which it was collected, and in any case no longer than 24 months from collection, unless a longer retention period is required by law or for the establishment, exercise, or defense of legal claims.

Your Rights

Under the GDPR, you have the following rights:

• Right of access - to obtain confirmation of processing and access your data
• Right to rectification - to correct inaccurate or incomplete data
• Right to erasure - to request deletion of your data ("right to be forgotten")
• Right to restriction - to limit the processing of your data
• Right to data portability - to receive your data in a structured, commonly used format
• Right to object - to object to processing based on legitimate interests
• Right to withdraw consent - to withdraw consent at any time without affecting the lawfulness of processing based on consent before its withdrawal

To exercise these rights, please contact me at info@lucabertelli.consulting.

You also have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence. In Italy, the supervisory authority is the Garante per la Protezione dei Dati Personali (www.garanteprivacy.it).

Data Security

I implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. The website uses HTTPS encryption to ensure secure data transmission.

International Data Transfers

This website is hosted on Cloudflare infrastructure. Any international data transfers are conducted in compliance with Chapter V of the GDPR, relying on appropriate safeguards such as Standard Contractual Clauses or adequacy decisions.

Third-Party Services

This website may use the following third-party services:

• Cloudflare - for website hosting, CDN, and security services
• Google Maps - embedded maps on the contact page (subject to Google's Privacy Policy)

Each third-party service has its own privacy policy governing the use of your data.

Minors

This website and its services are not directed to individuals under the age of 16. I do not knowingly collect personal data from minors. If you are a parent or guardian and believe your child has provided personal data, please contact me to request deletion.

Changes to This Policy

This Privacy Policy may be updated from time to time to reflect changes in legal requirements or my practices. Any changes will be posted on this page with an updated revision date. I encourage you to review this policy periodically.