Privacy Policy

1. Data controller

The data controller is Andrea Langeli, VAT No. 10036190006.

For privacy requests: andrea.langeli@pfafineco.it.

This policy describes the processing of personal data collected through andrealangeli.com.

2. Data processed

The form collects name, phone number, email, message, language, source page, submission date and time, and the declarations selected. Technical data needed for operation and security may also be processed, including IP address, user agent, URL, date, and request time.

The website does not intentionally use analytics, marketing pixels, embedded maps or videos, reCAPTCHA, or external fonts.

3. Purposes and legal bases

• Responding to requests: Article 6(1)(b) GDPR.
• Keeping evidence of requests and declarations and protecting the controller’s rights: Article 6(1)(f) GDPR.
• Operating and securing the website: Article 6(1)(f) GDPR.
• Complying with legal, regulatory, tax, or professional obligations: Article 6(1)(c) GDPR.

The contact declaration only covers the submitted request and does not authorise newsletters or marketing.

4. Providing data

Mandatory data is required to submit a request and receive a response.

5. Processing methods

Requests are recorded in the website’s protected administration area, sent by email to the configured recipient, and retained to manage the request and related communications.

6. Recipients

Data may be processed by authorised parties and necessary providers: Hostinger for hosting and infrastructure, Resend for contact-form email delivery, and ImprovMX for domain email forwarding and routing. It may also be disclosed to consultants, collaborators, or authorities where necessary.

7. Transfers outside the EEA

Some technical providers may process data outside the European Economic Area. Where applicable, transfers rely on GDPR safeguards including adequacy decisions, the Data Privacy Framework, or standard contractual clauses.

8. Retention

• Requests stored on the website: no longer than 24 months after submission.
• Related emails and communications: up to 24 months after the last communication, unless longer retention is required by law or to protect legal rights.
• Technical logs: for the period set by the hosting provider.

9. Rights

Data subjects may exercise the rights provided by the GDPR, including access, rectification, erasure, restriction, objection, and portability, by writing to andrea.langeli@pfafineco.it. They may also lodge a complaint with the Italian Data Protection Authority.

10. Minors

The website is not directed at minors and the form is not intended to knowingly collect minors’ data.

11. Updates

The policy may be updated when technical, organisational, or legal conditions change. The date above identifies the published version.