Iulietto Legal & Tech logo
Notice

Privacy Policy

Personal data processing notice pursuant to EU Regulation 2016/679 (GDPR).

This notice describes how personal data of users visiting the website gianmarcoiulietto.com (the «Website») and using the contact form therein is processed.

1.Data Controller

Gian Marco Iulietto
Via dei Giardini 20, 86030 Matrice (CB), Italy
Italian Tax Code: LTTGMR93S19E456N · VAT: 01853960704
Email: info@iulietto.com

The Data Controller does not fall within the cases provided for by Article 37(1) GDPR, therefore a Data Protection Officer (DPO) has not been designated.

2.Personal Data Processed

The Website processes the following categories of personal data:

a) Browsing data. The computer systems and software procedures used to operate the Website acquire, in the course of their normal operation, certain data whose transmission is implicit in the use of Internet communication protocols (IP addresses, domain names of computers used by users, URIs of requested resources, time of request, technical parameters relating to the operating system and IT environment). This data is used exclusively to obtain anonymous statistical information on the use of the Website and to verify its correct functioning, and is deleted immediately after processing.

b) Data voluntarily provided through the contact form. When the user fills in the contact form on the Website, the following data is collected: name, email address, subject of the inquiry, content of the message.

3.Purposes and Legal Basis

Personal data is processed exclusively to:

  • Handle the inquiry sent by the user through the contact form and provide a response.
  • Ensure the security of the Website and prevent fraudulent activities (via Google reCAPTCHA).
  • Comply with any legal obligations.

Legal bases:

  • Consent of the data subject (Article 6(1)(a) GDPR) for handling inquiries sent through the contact form.
  • Legitimate interest of the Data Controller (Article 6(1)(f) GDPR) for the technical security of the Website.
  • Compliance with legal obligations (Article 6(1)(c) GDPR).

The Data Controller does not carry out marketing, newsletter, profiling, or commercial communication activities. No special categories of data (Article 9 GDPR) are processed.

4.Nature of Data Provision

The provision of data through the contact form is optional. Failure to provide such data will make it impossible for the Data Controller to respond to the inquiry sent.

5.Processing Methods

Processing is carried out using electronic means, in compliance with the security measures provided for by Article 32 GDPR, by the Data Controller and any duly authorized parties. No automated decision-making process or profiling is provided for.

6.Data Retention

Data collected through the contact form is retained for the time strictly necessary to handle the inquiry and, in any case, no longer than the time limits provided for by applicable legal obligations. Browsing data is deleted immediately after processing.

7.Data Recipients

Personal data is not disseminated. It may be communicated exclusively: to providers of technical services (e.g., hosting providers, Google reCAPTCHA service) appointed as Data Processors pursuant to Article 28 GDPR; to competent authorities, where communication is mandatory by law.

8.Data Transfers to Third Countries

Data is processed within the European Union. Any transfers to third countries may occur exclusively through the hosting infrastructure and Google reCAPTCHA service, in accordance with Chapter V of the GDPR and on the basis of appropriate safeguards (adequacy decisions of the European Commission or standard contractual clauses).

9.Google reCAPTCHA

The Website uses Google reCAPTCHA to protect the contact form from spam and abuse. Google LLC's Privacy Policy and Terms of Service apply.

10.Data Subject Rights

The data subject has the right, pursuant to Articles 15-22 GDPR, to:

  • Access their personal data (Article 15);
  • Request its rectification or completion (Article 16);
  • Request its erasure (Article 17);
  • Request restriction of processing (Article 18);
  • Obtain data portability (Article 20);
  • Object to processing (Article 21);
  • Not be subject to decisions based solely on automated processing (Article 22);
  • Withdraw consent at any time, without prejudice to the lawfulness of processing carried out before withdrawal.

The data subject also has the right to lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it, garante@gpdp.it).

Requests to exercise rights may be sent to the Data Controller:

11.Changes

This notice may be modified or updated at any time. Users are invited to consult it periodically.

Last updated: October 9, 2026