Notice on the processing of personal data
1. Data controller
The controller of personal data collected through www.maurofanfoni.com is Mauro Fanfoni, Borgo delle Colonne 23, 43121 Parma, Italy.
For information about the processing of your data and to exercise your rights, you may write to info@maurofanfoni.com.
2. Data processed and purposes
The website presents the controller’s professional activities and editorial projects. Visitors may contact him by email or through an external link to WhatsApp. The website does not provide contact forms, visitor account registration or visitor comments.
Browsing and security
When you browse the website, the data processed may include your IP address, browser and device information, requested pages, access dates and times, and technical information necessary for the operation and security of the website.
The purposes are to make the pages available, identify malfunctions and protect the website against misuse. The legal basis is the controller’s legitimate interest in keeping the website operational and secure, pursuant to Article 6(1)(f) of the GDPR.
Enquiries by email and WhatsApp
Anyone who contacts the controller voluntarily provides their contact details, the content of their messages and any attachments. These data are used to respond to and handle the enquiry.
For enquiries relating to professional services, the legal basis is taking steps at the data subject’s request before entering into a contract, or performing a contract, pursuant to Article 6(1)(b) of the GDPR. For other communications, the legal basis is the legitimate interest in handling correspondence received.
Providing contact details is optional; without the necessary information, it may not be possible to respond.
3. Providers and services used
WordPress and Aruba
The website uses WordPress, installed on hosting provided by Aruba S.p.A. Aruba also provides the email service associated with info@maurofanfoni.com and processes the data necessary to deliver these services.
Provider information: Aruba privacy notice.
Google Analytics 4
The website uses Google Analytics 4 to analyse visits and how its pages are used. The service may process online identifiers, device and browser information, browsing events and session data.
Processing for statistical purposes that requires consent is based on the user’s consent, pursuant to Article 6(1)(a) of the GDPR.
In the Analytics property that was checked, Google Signals and user-provided data collection are disabled. No linked Google Ads accounts were found.
Information: privacy information for Google services.
Fonts
The website is configured to load the fonts used by Elementor and the Astra theme locally, from the server hosting the website.
Links to WhatsApp and other external websites
The WhatsApp link opens the application or WhatsApp Web. It is not a chat embedded in the website’s pages. When the user opens the service and sends a message, WhatsApp’s processing is described in its privacy policy.
The website also contains links to social networks and external publishing platforms. Browsing those platforms is subject to their respective privacy notices.
4. Cookies and preferences
Information about cookies, their purposes and their lifetimes is available in the Cookie Policy.
Choices relating to processing based on consent can be changed using the consent management control available on the website. Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn.
5. Data retention
Messages received are retained for as long as necessary to handle the enquiry and any subsequent relationship. Any further retention depends on legal obligations and the need to protect rights in the event of disputes.
According to information provided by Aruba, service access logs and application logs may contain IP addresses, dates and times, and information about browsers and operations performed. These data are processed for service provision, diagnostics and security, and are retained for no longer than six months.
In Google Analytics 4, event data retention is set to 2 months and user data retention to 14 months. The user data retention period resets when new user activity occurs. These settings do not apply to most standard reports, which are based on aggregated data.
6. Recipients and transfers
Data may be processed by providers of technical, hosting, email and analytics services, to the extent necessary for their respective functions, as well as by authorised persons and authorities where required by law.
The use of Google Analytics may involve transfers of data outside the European Economic Area, including to the United States. Google states that it relies on applicable adequacy decisions, including the EU–US Data Privacy Framework for certified recipients, and, where necessary, standard contractual clauses approved by the European Commission. Information about the safeguards and how to obtain a copy is available on Google’s Data transfer frameworks page.
If the user chooses to contact the controller through the external WhatsApp link, processing by the platform is governed by the WhatsApp Privacy Policy, which also describes international transfers and the applicable safeguards.
7. Rights of the data subject
In the circumstances provided for by the GDPR, you may request access, rectification, erasure, restriction of processing and data portability, as well as object to processing based on legitimate interests and withdraw consent.
Requests may be sent to info@maurofanfoni.com.
You may also lodge a complaint with the Italian Data Protection Authority or the competent supervisory authority.