Private access
Legal document

Privacy notice

Last updated: 15 September 2026

This notice describes how personal data collected through this website is processed, pursuant to Articles 13 and 14 of Regulation (EU) 2016/679 (GDPR).

  1. 01

    Data controller

    Giacomo Carbonara, [full address], [VAT number / tax code]. Privacy contact: [privacy email].

  2. 02

    Data processed

    Data provided voluntarily when writing to Giacomo Carbonara by WhatsApp, phone or email: name, the contact detail used to write and the content of the message (service requested, dates, locations, indicative budget). This site contains no forms and neither collects nor stores data entered by visitors. Technical browsing data strictly necessary for the site to work, such as the IP address in server logs.

  3. 03

    Purposes and legal basis

    Responding to your request and arranging the services requested (pre-contractual and contractual measures, Art. 6(1)(b) GDPR); complying with legal obligations (Art. 6(1)(c)); website security and abuse prevention (legitimate interest, Art. 6(1)(f)). Data is not used for marketing or profiling.

  4. 04

    Recipients

    Technical providers acting as data processors: website hosting (Hetzner Online GmbH, Germany). WhatsApp conversations travel through the infrastructure of WhatsApp Ireland Ltd.; emails through the sender's mail provider and Giacomo Carbonara's own. Operators, owners and captains involved in delivering a service receive only the data strictly necessary, after a request is confirmed.

  5. 05

    Transfers outside the EU

    Where a provider processes data outside the European Economic Area, the transfer takes place on the basis of an adequacy decision or standard contractual clauses approved by the European Commission.

  6. 06

    Retention

    Requests that do not result in a service are deleted within 12 months. Data relating to services provided is retained for the period required by tax and civil law obligations. Technical logs are kept for a maximum of 30 days.

  7. 07

    Cookies

    The website uses a single technical cookie to remember your chosen language. There are no profiling cookies or third-party analytics tools, so no consent banner is required.

  8. 08

    Data subject rights

    You may request access, rectification, erasure, restriction of processing and data portability, and you may object to processing, by writing to the privacy contact indicated above. You also have the right to lodge a complaint with the Garante per la protezione dei dati personali (Italian Data Protection Authority), www.garanteprivacy.it.