1. Data Controller
The Data Controller is the administrator of the website, who can be contacted through the CONTACTS section.
2. Types of Data Collected
The website collects personal data in two ways:
2.1 Data collected automatically
During browsing, the following information may be collected and stored in the server (hosting) log files:
-
IP address;
-
type of browser used;
-
device parameters used to connect to the site;
-
name of the Internet Service Provider (ISP);
-
date and time of the visit;
-
referring and exit web pages;
-
number of clicks.
These data are processed in aggregated form for statistical and security purposes. The IP address is used exclusively for security reasons and is not cross-referenced with other data.
2.2 Data voluntarily provided by the User
When using services such as contact forms, consultation requests, or comments, the following data may be collected:
-
name;
-
email address;
-
any additional data voluntarily provided by the user.
These data are used solely to provide the requested service.
3. Purposes of Processing and Legal Bases
3.1 Purposes based on consent
Data processing is mainly carried out with the user’s consent, expressed through:
-
the cookie banner;
-
contact or service request forms.
Providing consent is optional and may be withdrawn at any time. Refusal may limit access to certain services.
3.2 Purposes based on legitimate interest
The following data are processed based on the legitimate interest of the Data Controller:
-
data for site security (antispam, firewall, virus detection);
-
aggregated statistical data for traffic analysis.
The user may object at any time.
3.3 Purposes based on contractual or legal obligations
Data provided for consultations or professional assignments are processed for:
-
evaluation of the request;
-
performance of the contract;
-
compliance with legal obligations.
A specific privacy notice is provided in such cases.
3.4 Accessory purposes
Data may be communicated to third parties performing technical, logistical, or operational activities necessary for the functioning of the service. These parties act as Data Processors and process data in compliance with applicable regulations.
4. Place of Processing
Data are processed at:
-
the Data Controller’s premises;
-
the OVH datacenter, located within the European Economic Area and compliant with EU regulations.
5. Data Retention Period
-
Browsing data: retained for the time necessary to fulfil the purposes described.
-
Security data (IP): retained for 30 days.
-
Statistical data: retained only in aggregated form.
-
Data for consultations or professional assignments: retained for the time necessary to perform the assignment and for any related purposes (legal protection, etc.).
6. Data Disclosure to Third Parties
Data may be disclosed to third parties only in the following cases:
-
legitimate request by judicial authorities;
-
necessity to provide a service requested by the user;
-
security checks or site optimization.
7. Transfer of Data Outside the EU
Some services used by the website (e.g., Google, Facebook, Microsoft/LinkedIn) may involve the transfer of data outside the European Union.
Such transfers are carried out in compliance with the GDPR through:
-
adequacy decisions by the European Commission;
-
Standard Contractual Clauses (SCC) adopted by the service providers.
8. Security Measures
The Data Controller adopts appropriate technical and organizational measures to protect personal data, including:
-
use of SSL protocol to encrypt data in transit;
-
protection systems (antispam, firewall, antivirus);
-
restricted access to data by authorized personnel and qualified technical providers.
9. User Rights (Articles 15–22 GDPR)
Users may exercise the following rights at any time:
-
access to personal data;
-
rectification or update;
-
erasure (“right to be forgotten”);
-
restriction of processing;
-
objection to processing;
-
data portability;
-
withdrawal of consent.
Requests may be submitted through the CONTACTS section.
10. Changes to This Privacy Policy
The Data Controller reserves the right to modify this Privacy Policy at any time. Changes will be published on this page.