Privacy Policy

This Privacy Policy describes how personal data is collected and processed through this website, pursuant to Article 13 of Regulation (EU) 2016/679, General Data Protection Regulation, GDPR.

Data controller.
The Data Controller is Stefano Bergomi, VAT ID 11106220962, Via Sant’Abbondio 3, 23823 Colico (LC), Italy. For any request related to personal data processing, users can contact the Data Controller through the contact page of this website.

Types of personal data collected.
This website may collect navigation data, such as IP address, browser type, device information, operating system, pages visited, date and time of access and other technical information generated through normal website use. The website may also collect contact data, such as name, email address and any information voluntarily provided through the contact form or direct communication. Analytics data may also be collected through analytics and performance tools, according to the user’s cookie consent preferences.

Purpose of processing.
Personal data may be processed to allow the website to function correctly, manage contact requests, reply to messages or professional enquiries, improve website performance, structure, content and user experience, protect the website from technical issues, spam, abuse or security risks and comply with legal obligations where applicable.

Legal basis.
The legal basis for processing personal data may include the execution of pre-contractual measures requested by the user, the legitimate interest of the Data Controller for website security and technical management, the user’s consent for analytics or third-party cookies where required and compliance with legal obligations where applicable.

Processing methods.
Personal data is processed using electronic and digital tools, with appropriate technical and organisational measures designed to protect data against unauthorised access, loss, alteration, disclosure or misuse. Data is processed only for the purposes described in this Privacy Policy and only for the time necessary to achieve those purposes.

Contact forms and communications.
When users send a message through the contact form, the data provided is used to manage and reply to the request. Data sent through contact forms may include name, email address, message content and technical information related to submission. Providing this data is optional, but missing contact information may make it impossible to reply.

Analytics and tracking tools.
This website may use analytics tools, such as Google Analytics 4, Google Search Console, Microsoft Clarity or similar services, to understand how users interact with the website and improve content, performance and user experience. Analytics tools may collect information such as visited pages, session duration, device type, browser, approximate location and interaction data. Where required, these tools are activated according to the user’s cookie consent preferences.

Cookies.
This website uses cookies and similar technologies. Further details are available in the Cookie Policy. Users can manage cookie preferences through the cookie banner or through browser settings.

Data recipients.
Personal data may be processed by external service providers strictly related to website management and professional activity, such as hosting providers, email service providers, website management tools, analytics and performance tools, security and anti-spam tools, technical consultants or collaborators where necessary. These subjects process data according to applicable data protection rules and, where required, act as data processors.

Data transfer outside the European Economic Area.
Some third-party services used by the website may process data outside the European Economic Area. Where this occurs, the transfer takes place according to the safeguards required by the GDPR, such as adequacy decisions, standard contractual clauses or other appropriate legal mechanisms.

Data retention.
Personal data is retained only for the time necessary to fulfil the purposes for which it was collected. Contact request data may be retained for the time necessary to manage the request and any subsequent professional relationship. Technical and analytics data may be retained according to the retention periods set by the tools used and the applicable cookie preferences. Data may be retained for longer periods where required by legal, accounting, administrative or defensive needs.

Data subject rights.
Users may exercise the rights provided by Articles 15 to 22 of the GDPR, including the right to access personal data, request rectification of inaccurate data, request erasure of personal data, request restriction of processing, object to processing, request data portability where applicable and withdraw consent at any time where processing is based on consent. To exercise these rights, users can contact the Data Controller through the contact page of this website.

Right to lodge a complaint.
Users have the right to lodge a complaint with the competent supervisory authority. In Italy, the competent authority is the Garante per la protezione dei dati personali.

Updates to this Privacy Policy.
This Privacy Policy may be updated over time to reflect changes in the website, services, tools used or applicable regulations.

Last update: 04/06/2026