Privacy Policy
Personal data processing notice pursuant to EU Regulation 2016/679 (GDPR).
This notice describes how personal data of users visiting the website gianmarcoiulietto.com (the «Website») and using the contact form therein is processed.
1.Data Controller
Gian Marco Iulietto
Via dei Giardini 20, 86030 Matrice (CB), Italy
Italian Tax Code: LTTGMR93S19E456N · VAT: 01853960704
Email: info@iulietto.com
The Data Controller does not fall within the cases provided for by Article 37(1) GDPR, therefore a Data Protection Officer (DPO) has not been designated.
2.Personal Data Processed
The Website processes the following categories of personal data:
a) Browsing data. The computer systems and software procedures used to operate the Website acquire, in the course of their normal operation, certain data whose transmission is implicit in the use of Internet communication protocols (IP addresses, domain names of computers used by users, URIs of requested resources, time of request, technical parameters relating to the operating system and IT environment). This data is used exclusively to obtain anonymous statistical information on the use of the Website and to verify its correct functioning, and is deleted immediately after processing.
b) Data voluntarily provided through the contact form. When the user fills in the contact form on the Website, the following data is collected: name, email address, subject of the inquiry, content of the message.
3.Purposes and Legal Basis
Personal data is processed exclusively to:
- Handle the inquiry sent by the user through the contact form and provide a response.
- Ensure the security of the Website and prevent fraudulent activities (via Google reCAPTCHA).
- Comply with any legal obligations.
Legal bases:
- Consent of the data subject (Article 6(1)(a) GDPR) for handling inquiries sent through the contact form.
- Legitimate interest of the Data Controller (Article 6(1)(f) GDPR) for the technical security of the Website.
- Compliance with legal obligations (Article 6(1)(c) GDPR).
The Data Controller does not carry out marketing, newsletter, profiling, or commercial communication activities. No special categories of data (Article 9 GDPR) are processed.
4.Nature of Data Provision
The provision of data through the contact form is optional. Failure to provide such data will make it impossible for the Data Controller to respond to the inquiry sent.
5.Processing Methods
Processing is carried out using electronic means, in compliance with the security measures provided for by Article 32 GDPR, by the Data Controller and any duly authorized parties. No automated decision-making process or profiling is provided for.
6.Data Retention
Data collected through the contact form is retained for the time strictly necessary to handle the inquiry and, in any case, no longer than the time limits provided for by applicable legal obligations. Browsing data is deleted immediately after processing.
7.Data Recipients
Personal data is not disseminated. It may be communicated exclusively: to providers of technical services (e.g., hosting providers, Google reCAPTCHA service) appointed as Data Processors pursuant to Article 28 GDPR; to competent authorities, where communication is mandatory by law.
8.Data Transfers to Third Countries
Data is processed within the European Union. Any transfers to third countries may occur exclusively through the hosting infrastructure and Google reCAPTCHA service, in accordance with Chapter V of the GDPR and on the basis of appropriate safeguards (adequacy decisions of the European Commission or standard contractual clauses).
9.Google reCAPTCHA
The Website uses Google reCAPTCHA to protect the contact form from spam and abuse. Google LLC's Privacy Policy and Terms of Service apply.
10.Data Subject Rights
The data subject has the right, pursuant to Articles 15-22 GDPR, to:
- Access their personal data (Article 15);
- Request its rectification or completion (Article 16);
- Request its erasure (Article 17);
- Request restriction of processing (Article 18);
- Obtain data portability (Article 20);
- Object to processing (Article 21);
- Not be subject to decisions based solely on automated processing (Article 22);
- Withdraw consent at any time, without prejudice to the lawfulness of processing carried out before withdrawal.
The data subject also has the right to lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it, garante@gpdp.it).
Requests to exercise rights may be sent to the Data Controller:
- By email: info@iulietto.com
- By post: Via dei Giardini 20, 86030 Matrice (CB), Italy
11.Changes
This notice may be modified or updated at any time. Users are invited to consult it periodically.
Last updated: October 9, 2026
