Privacy Policy

1. Data Controller
The Data Controller for personal data collected through this Site is:

• Name: Eliana Salvi
  Registered office / Address: available upon legitimate request
  VAT number / Tax code: Not applicable
  Contact email: info@elianasalvi.com

2. Types of Data Collected
This Site may collect personal data directly or through third parties. The types of data collected may include:

• Navigation data: IP addresses, browser type, device parameters used to connect to the Site, internet service provider (ISP), date and time of visit, referring and exit pages.

• Data voluntarily provided by the user: Name, email address or other contact details submitted through email links or contact forms available on the Site.

• Cookies and tracking technologies: Used for the technical operation of the Site and for statistical analysis.

3. Purposes of Processing
Personal data is collected and processed for the following purposes:

• Ensuring the operation of the Site: Technical optimization of the platform and monitoring of Site performance.

• Responding to user requests: Managing communications voluntarily sent by users, such as contact emails or business inquiries.

• Legal compliance: Complying with obligations set by laws, regulations or European legislation, and protecting the rights of the Data Controller in legal proceedings.

4. Legal Basis for Processing
The Data Controller processes users' personal data when one of the following conditions applies:

• The user has given consent for one or more specific purposes.

• Processing is necessary for the performance of a contract with the user and/or for pre-contractual measures.

• Processing is necessary to comply with a legal obligation to which the Data Controller is subject.

• Processing is necessary for the purposes of the Data Controller's legitimate interest, such as ensuring Site security.

5. Processing Methods and Retention
Processing is carried out using IT and/or telematic tools, with organizational methods and logic strictly related to the purposes stated above, and with appropriate security measures designed to prevent unauthorized access, disclosure, modification or destruction of data.
Data is retained for the time strictly necessary to achieve the purposes for which it was collected:

• Data collected for contact purposes will be retained until the user's request has been resolved.

• Navigation data is deleted or anonymized immediately after processing, unless it must be retained to investigate unlawful activity at the request of competent authorities.

6. Recipients of Personal Data
Personal data will not be disclosed to unauthorized third parties. It may be shared only with:

• Internal parties responsible for managing the Site.

• Third-party service providers necessary for the operation of the platform, such as web hosting services including Wix / Wix Studio, acting as Data Processors.

• Public authorities or law enforcement agencies where required by law.

Since the Site uses the Wix platform, data may be transferred to and stored on servers located outside the European Economic Area (EEA), in accordance with the secure transfer mechanisms provided by the GDPR, such as Standard Contractual Clauses.


7. User Rights
Under the GDPR, users have the right to exercise the following rights at any time in relation to the Data Controller:

• Right of access: Request confirmation as to whether personal data is being processed and obtain a copy of that data.

• Right to rectification: Request that inaccurate data be updated or corrected.

• Right to erasure: Request deletion of personal data when it is no longer necessary for the stated purposes.

• Right to restriction: Request restriction of processing in specific cases provided for by Article 18 of the GDPR.

• Right to data portability: Receive personal data in a structured, commonly used and machine-readable format and transmit it to another controller.

• Right to object: Object to processing on legitimate grounds or for direct marketing purposes.

• Right to lodge a complaint: Lodge a complaint with the competent Data Protection Authority.

To exercise these rights, users may send a written request to the contact details of the Data Controller indicated in Section 1.


8. Changes to this Privacy Policy
The Data Controller reserves the right to update this Privacy Policy at any time by publishing the updated version on this page. Users are encouraged to review this section regularly, referring to the latest update date shown above.