Privacy Notice and Cookie Policy

01 — Data controller

Orlando Pandolfi
Piazza Duomo 11, 54033 Carrara (MS), Italia
info@orlandopandolfi.it

02 — Data processed

• name and surname and business email;
• company and telephone number, if provided;
• area of interest and message content;
• essential connection data, such as IP address, date/time and security logs, processed by the hosting infrastructure.

Name, email, area and message are required to handle the enquiry. Company and telephone are optional. Please do not include sensitive or unnecessary personal data in the message.

03 — Purposes and legal bases

• replying to the enquiry and assessing a possible project or professional relationship: steps taken at the data subject's request before entering into a contract, Article 6(1)(b) GDPR;
• protecting the website from abuse, spam and security incidents: legitimate interests, Article 6(1)(f) GDPR.

Consent is not requested because the processing is necessary to respond to an enquiry initiated by you. Any future marketing use would require separate, specific and withdrawable consent.

04 — Recipients and service providers

Data is accessible only to the controller and, as needed to provide the service, appointed providers: the hosting infrastructure provider for website delivery and security; Resend, Inc. for transactional message delivery. It is not disclosed to third parties for commercial purposes, except where required by law.

05 — International transfers

Some providers may process data in the United States or other countries outside the European Economic Area. For Resend, the transfer is governed by its Data Processing Addendum and the EU Standard Contractual Clauses. Infrastructure providers apply the GDPR safeguards required for international transfers.

06 — Retention

Enquiries are retained in the mailbox for up to 12 months after the last contact, unless negotiations or a contractual relationship are ongoing or a longer period is required by law. The email delivery provider retains email data for 30 days by default. Technical logs are retained only for the period necessary for service operation and security.

07 — Cookies and tracking

In its current configuration, the website does not use advertising, profiling or analytics cookies and does not include commercial tracking tools. Only technical functions strictly necessary for security and website delivery may be used; therefore, no consent banner is shown. If non-essential services are added in future, they will be blocked until the user makes a choice and this notice will be updated.

08 — Your rights

You may request access, rectification, erasure, restriction and, where applicable, portability of your data; you may also object to processing based on legitimate interests. Requests can be sent to the address above and will normally be answered within one month. You may lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali).

09 — Automated decision-making

Data is not subject to automated decision-making or profiling.