Privacy policy

Data controller

This notice describes how the personal data of elisagamba.com users is processed, under Articles 13 and 14 of Regulation (EU) 2016/679 (GDPR).

The data controller is Elisa Gamba. For any request concerning your personal data you can write to info [at] elisagamba.com.

What data is collected

• Data sent through the contact form or by email: name, email address, organisation and the content of your message.
• Technical browsing data collected by the hosting infrastructure (for example IP address and server logs), needed for the operation and security of the site.
• Statistics on how the site is used (Google Analytics), collected only if you consent through the banner: see the cookie policy.

Purposes and legal basis

• Replying to requests sent through the form or by email: the legal basis is the performance of pre-contractual measures taken at your request (Art. 6.1.b GDPR).
• Ensuring the operation and security of the site: legitimate interest of the controller (Art. 6.1.f GDPR).
• Analysing site usage in aggregate form: consent (Art. 6.1.a GDPR), which you can withdraw at any time.

Data retention

Messages received are kept for as long as needed to handle the request and any follow-up correspondence, and in any case no longer than 24 months after the last contact, unless legal obligations or ongoing contractual relationships require otherwise.

Recipients of the data

Data is processed with tools provided by suppliers acting as data processors:

• Vercel Inc., website hosting.
• Resend, delivery of the contact form emails.
• Google Ireland Ltd., usage statistics (only with your consent).
• Calendly LLC, external booking service for introductory calls: the data you enter when booking is processed by Calendly on its own site.

Transfers outside the EU

Some suppliers may process data outside the European Union. In these cases the transfer takes place on the basis of adequate safeguards, such as Standard Contractual Clauses or the EU-US Data Privacy Framework.

Your rights

You can exercise the rights provided by Articles 15 to 22 of the GDPR at any time by writing to info [at] elisagamba.com:

• access, rectification and erasure of your data
• restriction of and objection to processing
• data portability
• withdrawal of consent, without affecting the lawfulness of previous processing
• complaint to the Italian data protection authority, Garante per la protezione dei dati personali (www.gpdp.it)

Automated decision-making

The site does not use automated decision-making or profiling.

Changes

This notice may be updated: changes will be published on this page with the revision date.