Privacy and Cookie Policy
Pursuant to EU Regulation 2016/679 (GDPR) and Italian Legislative Decree 196/2003, as amended
Last updated: 27 May 2026
1. Data Controller
The Data Controller for the processing of personal data is: Alessia Morellini
- Registered office
- Via del Tiglio 26, 41012 Carpi (MO) - Italy
- VAT
- 04240020364
- privacy@alessia-morellini.com
- PEC
- [email pec]
2. Personal Data Collected via the Contact Form
Through the contact form on this website, only the following personal data voluntarily provided by the user are collected:
| Data collected | Required | Purpose |
|---|---|---|
| Full name | Yes | User identification |
| E-mail address | Yes | Replying to the enquiry |
| Message | Yes | Handling the enquiry |
| Record creation timestamp | Automatic | Proof of consent (GDPR art. 7.1) |
Full name
Yes
User identification
E-mail address
Yes
Replying to the enquiry
Message
Yes
Handling the enquiry
Record creation timestamp
Automatic
Proof of consent (GDPR art. 7.1)
3. Purpose and Legal Basis of Processing
Personal data are processed for the following purposes:
3.1 Responding to contact requests
Purpose: managing and responding to enquiries submitted via the contact form.
Legal basis: performance of pre-contractual measures taken at the request of the data subject (Art. 6(1)(b) GDPR) and/or legitimate interest of the Data Controller (Art. 6(1)(f) GDPR).
3.2 Legal obligations
Purpose: complying with obligations arising from law, regulation, or EU legislation.
Legal basis: legal obligation (Art. 6(1)(c) GDPR).
3.3 Anonymous website analytics
Purpose: measuring website traffic and usage patterns to improve the service. No personal data is collected; all measurements are anonymised at collection time (page URL, referrer, browser type, OS, device type, and country derived from IP address; the IP address itself is never stored).
Legal basis: legitimate interest of the Data Controller (Art. 6(1)(f) GDPR). Since no personal data is processed, the ePrivacy cookie consent requirement does not apply.
4. Methods of Processing
Personal data are processed by electronic and/or automated means, following logics strictly related to the stated purposes and, in any case, in a manner that ensures the security and confidentiality of the data, in compliance with the organisational, physical, and logical measures required by applicable regulations.
5. Data Retention Period
Personal data collected via the contact form will be retained for the time strictly necessary to handle the request and, in any event, for a period not exceeding 24 months from collection, unless a longer retention period is required by law.
At the end of the retention period, the data will be deleted or irreversibly anonymised.
6. Disclosure and Transfer of Data
Personal data will not be disseminated. They may be disclosed to:
- Cloud hosting and infrastructure provider
- Amazon Web Services EMEA SARL (Luxembourg) acting as data processor, for infrastructure hosting and transactional e-mail delivery. All data are processed in the Frankfurt (eu-central-1) region.
- Consultants and professionals
- Within the scope of advisory and consultancy relationships (e.g. accountant, lawyer).
- Anonymous analytics provider
- Umami Software Inc. (USA), acting as data processor, for cookie-free anonymous website analytics via cloud.umami.is. Only anonymised, non-personal data is transmitted (page URL, referrer, browser, OS, device type, country). IP addresses are not stored.
- Competent authorities
- Where required by law or upon request by such authorities.
Contact form data are processed exclusively within the European Union (AWS Frankfurt region, eu-central-1) and are not transferred to third countries. Anonymous analytics data is processed by Umami Software Inc. (USA); as this data contains no personal data, GDPR transfer restrictions do not apply.
7. Data Subject Rights
Under Articles 15-22 of the GDPR, the data subject has the right to:
- access their personal data and obtain a copy thereof;
- obtain the rectification of inaccurate data or the completion of incomplete data;
- obtain the erasure of their data (right to be forgotten), where the conditions set out by law are met;
- obtain the restriction of processing;
- receive their data in a structured, commonly used, and machine-readable format (data portability);
- object at any time to processing based on legitimate interest;
- withdraw consent at any time, without affecting the lawfulness of processing carried out on the basis of consent prior to its withdrawal;
- lodge a complaint with the Italian Data Protection Authority (Garante per la Protezione dei Dati Personali).
To exercise these rights, the data subject may send a written request to: privacy@alessia-morellini.com
9. Changes to this Policy
The Data Controller reserves the right to amend this Privacy and Cookie Policy at any time, providing adequate notice by publishing the updated version on this website. Users are encouraged to review this page periodically.