PRIVACY POLICIES

1. Data controller

The data controller is Guido Rossi Monti, Florence, Italy. For any question about this policy or your personal data, write to guidorossimonti@gmail.com.

2. What data is collected

Data you provide. When you use the contact form, you share your first and last name, your email address and, if you choose, your company or property and the content of your message. When you write directly by email, the data contained in your message is collected.

Browsing data. Like any website, this site's systems record technical data such as IP address, browser type and pages visited, which is needed for the site to work and to keep it secure.

Cookies. Information about cookies is provided in the Cookie Policy.

3. Why the data is used and on what legal basis

Your contact details and message are used only to reply to your request and, where relevant, to discuss a possible collaboration. The legal basis is the handling of your request and any steps taken at your request before entering into an agreement (Art. 6(1)(b) GDPR) and the legitimate interest in answering professional enquiries (Art. 6(1)(f) GDPR).

Browsing data is processed to run the website and protect it from abuse, on the basis of legitimate interest (Art. 6(1)(f) GDPR).

Analytics data is processed only with your consent, given through the cookie banner (Art. 6(1)(a) GDPR).

Your data is never sold, used for advertising or added to mailing lists without your explicit consent.

4. Who has access to the data

Your data is handled directly by Guido Rossi Monti. It is also processed by the providers that make the website and email work, acting as data processors: Squarespace Inc., which hosts the website and the contact form, and the email service provider used to receive messages. Data may be disclosed to public authorities only where required by law.

5. Transfers outside the European Union

Some of these providers are based in the United States. Transfers take place under the EU-U.S. Data Privacy Framework or the European Commission's Standard Contractual Clauses, which ensure an adequate level of protection.

6. How long the data is kept

Messages and contact details are kept for as long as needed to handle your request and for up to 24 months after the last exchange, unless a professional relationship follows, in which case they are kept for the period required by law. Analytics data is kept in aggregate form.

7. Your rights

Under Articles 15 to 22 of the GDPR you can ask to access your data, correct it, delete it, restrict or object to its processing, and receive it in a portable format. Where processing is based on consent, you can withdraw it at any time without affecting earlier processing. To exercise these rights, write to guidorossimonti@gmail.com.

You also have the right to lodge a complaint with the Italian Data Protection Authority, Garante per la protezione dei dati personali (garanteprivacy.it).

8. Changes

This policy may be updated. The current version is always published on this page, with the date of the last update.