Privacy Policy

This notice explains how the personal data of users who visit the website or use the contact form is processed.

Data processed while browsing

During the normal operation of the website, its IT systems may collect certain technical data, such as the IP address, browser and device type, operating system, date and time of the request, pages visited, and information relating to the operation and security of the website.

This data is processed to enable the website to function correctly, ensure its security, and identify errors or abnormal use. The legal basis is the Controller's legitimate interest in managing and protecting the website.

Technical data is retained for as long as necessary for these purposes, without prejudice to any security requirements, the establishment of liability, or legal obligations.

Contact form

When a user submits the contact form, we process their name, email address, message, and the technical information required to send and protect the form.

Providing this data is necessary so that we can receive and respond to the request. The data is processed in order to take pre-contractual steps at the user's request and on the basis of the Controller's legitimate interest in managing the communications received.

Acknowledging this notice through the contact form does not constitute consent for promotional purposes. The data is not used to send marketing communications.

Messages sent through the contact form are retained for as long as necessary to manage the request and any subsequent correspondence, and in any event for no longer than 12 months from the last contact, unless a professional relationship is established or retention is required by law.

Users are advised not to include unnecessary personal data in their messages, particularly sensitive information. If the request leads to the establishment of a professional relationship, subsequent processing will be governed by the information provided in connection with that relationship.

Spam protection

The contact form uses Google reCAPTCHA to limit automated messages, spam, and misuse. The service may process technical data relating to the device, connection, and interaction with the website.

This processing is based on the Controller's legitimate interest in protecting the website and contact form. For more information, please refer to Google's Privacy Policy and Terms of Service.

Usage statistics

The website uses Umami Cloud to collect aggregate statistics about the use of its pages, such as page views, visit sources, browsers, operating systems, device types, and countries of origin.

Umami does not use analytics cookies and collects anonymized data. The website does not send custom events or user identifiers.

The processing of aggregate statistics is carried out on the basis of the Controller's legitimate interest in understanding how the website is used and improving its content and functionality.

Statistical data are processed through Umami Cloud on infrastructure in the EU region and are retained for 6 months.

For more information about the service, please refer to Umami's Privacy Policy.

Links to external websites

The website contains links to websites and services operated by third parties. A connection to these services is established only when the user selects the relevant link. Once the external website or service is opened, any data processing is carried out by its operator in accordance with its own privacy policy.

Parties that may process the data

The operation of the website may involve technical service providers acting for specific purposes:

Data may also be disclosed to professional advisers or public authorities where necessary to comply with legal obligations or protect the Controller's rights.

Some providers may process data outside the European Economic Area, using the instruments and safeguards provided for by applicable law.

Data subject rights

Users may ask the Controller for information about their personal data and, where provided for by law, request its rectification, erasure, or restriction, object to its processing, or request data portability.

Requests may be sent using the contact details below. Users may also lodge a complaint with the Italian Data Protection Authority.

No automated decision-making or profiling activities intended to make decisions concerning the user are carried out.

Changes to this notice

This notice may be updated to reflect changes in the law or in the services used by the website. The updated version will be published on this page.

Data Controller and contact details

Address:
Avv. Roberta Caruso
Piazza dei Re di Roma, 3
00183 Rome (RM), Italy

Email: avv.robertacaruso@gmail.com

Last updated: 12 September 2026.