Privacy
Privacy policy
Last updated: 10 August 2026
Pursuant to Articles 13 and 14 of Regulation (EU) 2016/679 (the “GDPR”) and Italian Legislative Decree 196/2003 as amended by Legislative Decree 101/2018, this notice describes how personal data of visitors to this website is processed.
01Data controller
The data controller is Katia Prandi, reachable at katia@prandi.net. Any further contact details, including full identification data, are provided on request by the data subject. No Data Protection Officer has been appointed, the conditions of Art. 37 GDPR not being met.
02Categories of data processed
Browsing data: the IT systems operating this website acquire, during normal operation, certain data whose transmission is implicit in Internet communication protocols (IP address, browser type and operating system, date and time of the request, page requested, response status). Such data is used solely to ensure correct delivery of the service and the security of the infrastructure. Data provided voluntarily: optionally sending a message to the email address shown on the site entails acquiring the sender’s address and any further data contained in the message. The site hosts no contact form and collects no data through form submission.
03Purposes and legal basis
Browsing data is processed for technical delivery of the service and IT security, on the basis of the controller’s legitimate interest (Art. 6.1.f GDPR). Data contained in email correspondence is processed to reply to the data subject’s request (Art. 6.1.b GDPR). Data collected via third-party analytics tools is processed solely on the basis of the data subject’s consent (Art. 6.1.a GDPR), which may be withdrawn at any time.
04Measurement tools
Subject to consent, the site uses Google Analytics 4 (Google Ireland Limited) and Microsoft Clarity (Microsoft Ireland Operations Limited) to record in aggregate form the number of visits, pages consulted and interaction patterns. Advertising and profiling features are disabled and IP addresses are processed in anonymised form. Without consent none of these tools is loaded.
05Recipients and non-EU transfers
Data is neither disseminated nor sold to third parties for commercial purposes. It may be processed by the analytics providers indicated above, appointed as data processors. Those providers may transfer data to third countries: transfers take place under the EU-US Data Privacy Framework and the Standard Contractual Clauses approved by the European Commission. The site is hosted on the controller’s own infrastructure located in Italy.
06Retention period
Technical server logs are retained for no longer than twelve months, save where required to establish criminal offences. Email correspondence is retained for as long as necessary to handle the request and to comply with any legal obligations. Statistical data is retained for the periods indicated in the cookie notice.
07Nature of provision
Provision of browsing data is necessary for the site to work. Provision of data by email is optional; failure to provide it merely means no reply can be sent. Consent to analytics tools is optional and its absence in no way limits consultation of the site.
08Rights of the data subject
Data subjects may exercise at any time the rights under Articles 15-22 GDPR: access to their data, rectification, erasure, restriction of processing, portability, objection to processing based on legitimate interest, and withdrawal of consent, without prejudice to the lawfulness of processing carried out before withdrawal. Requests may be sent to katia@prandi.net and receive a reply within one month.
09Complaint to the supervisory authority
Should they consider that the processing of their data infringes applicable law, data subjects have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali, Piazza Venezia 11, 00187 Rome — www.garanteprivacy.it) or to bring proceedings before the competent courts.
10Amendments
This notice may be updated to reflect regulatory changes or changes to the services used. The version in force is always published on this page, stating the date it was last updated.