Privacy Policy

This policy will help you understand what data I collect, why I collect it, and what your rights are regarding it.

Last modified: July 7, 2025

 

Summary

I automatically collect your data, for example, when you visit www.erikagherardi.it.

Trusted third parties that help me process it:

• OVH

• Google

• FontAwesome

How I use it

• Displaying content from external platforms

• Statistics

• Hosting and backend infrastructure

Data Controller

Erika Gherardi
Data Controller’s email address: gherardierika@gmail.com

Types of Data I Collect

Among the Personal Data collected by this Application, either independently or through third parties, are:

• Usage Data

• Tracking Tools

• Number of Users

• Session Statistics

Complete details on each type of Personal Data collected are provided in the dedicated sections of this privacy policy or through specific informational texts displayed before the data is collected.

Personal Data can be freely provided by the User, or, in the case of Usage Data, collected automatically when using this Application.

Unless otherwise specified, all Data requested by this Application is mandatory. If the User refuses to provide it, it may be impossible for this Application to provide the Service. In cases where this Application indicates some Data as optional, Users are free to refrain from providing such Data, without any consequences on the availability or operation of the Service.

Users who are unsure about which Data is mandatory are encouraged to contact the Data Controller.

Any use of Cookies — or other tracking tools — by this Application or by the owners of third-party services used by this Application serves the purpose of providing the Service requested by the User, in addition to the further purposes described in this document and in the Cookie Policy.

The User assumes responsibility for any third-party Personal Data obtained, published, or shared through this Application.

Methods and Location of Data Processing

Methods of Processing

I take appropriate security measures to prevent unauthorized access, disclosure, modification, or destruction of Personal Data.

Processing is carried out using computers and/or IT-enabled tools, following organizational procedures and modes strictly related to the purposes indicated. In addition to me, in some cases, other parties involved in the operation of this Application (administrative, sales, marketing, legal personnel, system administrators) or external parties (such as third-party technical service providers, postal couriers, hosting providers, IT companies, communication agencies) may have access to the Data. These external parties may also be appointed as Data Processors by me, if necessary. You can always request an updated list of these Processors from me.

Location

The Data is processed at my operating offices and in any other places where the parties involved in the processing are located. For further information, please contact me.

Your Personal Data may be transferred to a country different from the one where you are located. To obtain further information on the place of processing, please refer to the section on the details of Personal Data processing.

Retention Period

 

Unless otherwise specified in this document, Personal Data is processed and stored for the time required by the purpose for which it was collected and may be retained for a longer period due to potential legal obligations or based on your consent.

Purpose of Processing Collected Data

Your Data is collected to allow me to provide the Service, comply with legal obligations, respond to requests or enforcement actions, protect my rights and interests (or those of Users or third parties), identify any malicious or fraudulent activity, as well as for the following purposes:

• Displaying content from external platforms

• Statistics

• Hosting and backend infrastructure

Details on the Processing of Personal Data

OVH | Hosting and Backend Infrastructure

This type of service is designed to host Data and files that enable this Application to function and be distributed, or to provide ready-to-use infrastructure to run specific features or parts of this Application.

Some of the services listed below, if applicable, may operate on geographically distributed servers, making it difficult to determine the actual location where Personal Data is stored.

Google | Statistics

The services in this section allow me to monitor and analyze traffic data and serve to keep track of User behavior.

Google and FontAwesome | Displaying Content from External Platforms

This type of service allows me to display content hosted on external platforms directly from the pages of this Application and to interact with it. These services are often referred to as widgets, which are small elements embedded in a website or application. They provide specific information or perform a particular function and often allow for user interaction.

This type of service might still collect web traffic data related to the pages where the service is installed, even when users are not actively using it.

Cookie Policy

This Application makes use of Tracking Tools. To learn more, Users can consult the Cookie Policy.

Additional Information for Users in the European Union

Legal Basis for Processing

I process your Personal Data only if one of the following conditions applies:

• You have given your consent for one or more specific purposes.

• The processing is necessary for the performance of a contract with you and/or for any pre-contractual obligations.

• The processing is necessary to comply with a legal obligation to which I am subject.

• The processing is necessary for a task carried out in the public interest or in the exercise of official authorityvested in me.

• The processing is necessary for the purposes of the legitimate interests pursued by me or by a third party.

You can always ask me to clarify the specific legal basis that applies to each processing operation, and in particular, whether the processing is based on law, required by a contract, or necessary to enter into a contract.

Further Information on Retention Period

Unless otherwise specified in this document, Personal Data is processed and stored for the time required by the purpose for which it was collected and may be retained for a longer period due to potential legal obligations or based on your consent.

Therefore:

• Personal Data collected for purposes related to the performance of a contract between me and you will be retained until such contract has been fully performed.

• Personal Data collected for the purposes of my legitimate interests will be retained until such interest has been fulfilled. You can obtain further information regarding the legitimate interest pursued by me in the relevant sections of this document or by contacting me.

• When processing is based on your consent, I may retain Personal Data for a longer period until such consent is revoked. Furthermore, I may be obliged to retain Personal Data for a longer period to comply with a legal obligation or by order of an authority.

Once the retention period expires, Personal Data will be deleted. Therefore, the right to access, erasure, rectification, and the right to data portability cannot be exercised after this period has expired.

User Rights Under the General Data Protection Regulation (GDPR)

Users can exercise certain rights regarding their Data processed by me.

In particular, within the limits provided by law, you have the right to:

• Withdraw your consent at any time. You can withdraw your consent to the processing of your Personal Data previously expressed.

• Object to the processing of your Data. You can object to the processing of your Data when it is carried out on a legal basis other than consent.

• Access your Data. You have the right to obtain information about the Data processed by me, certain aspects of the processing, and to receive a copy of the Data processed.

• Verify and seek rectification. You can verify the accuracy of your Data and request that it be updated or corrected.

• Obtain restriction of processing. You can request the restriction of the processing of your Data. In this case, I will not process the Data for any purpose other than its storage.

• Obtain the erasure or removal of your Personal Data. You can request that I erase your Data.

• Receive your Data or have it transferred to another controller. You have the right to receive your Data in a structured, commonly used, and machine-readable format and, if technically feasible, to have it transmitted without hindrance to another controller.

• Lodge a complaint. You can lodge a complaint with the competent data protection supervisory authority or take legal action.

Users have the right to obtain information regarding the legal basis for the transfer of Data abroad, including to any international organization governed by public international law or set up by two or more countries, such as the UN, as well as regarding the security measures adopted by me to protect their Data.

Details on the Right to Object

When Personal Data is processed in the public interest, in the exercise of official authority vested in me, or for the purposes of a legitimate interest pursued by me, you have the right to object to the processing on grounds relating to your particular situation.

Please note that if your Data is processed for direct marketing purposes, you can object to that processing at any time, free of charge, and without providing any reason. If you object to processing for direct marketing purposes, the Personal Data will no longer be processed for those purposes. To find out whether I process Data for direct marketing purposes, you can refer to the relevant sections of this document.

How to Exercise Your Rights

Any requests to exercise your rights can be addressed to me using the contact details provided in this document. The request is free of charge, and I will respond as soon as possible, in any case within one month, providing you with all the information required by law. Any rectification, erasure, or restriction of processing will be communicated by me to each recipient, if any, to whom the Personal Data has been disclosed, unless this proves impossible or involves disproportionate effort. I will inform you about those recipients if you request it.

Further Information About Processing

Legal Defense

Your Personal Data may be used by me in legal proceedings or in the stages leading to possible legal action arising from improper use of this Application or related Services by you.

You declare to be aware that I may be required to disclose Data upon request of public authorities.

Specific Information

Upon your request, in addition to the information contained in this privacy policy, this Application may provide you with additional and contextual information concerning specific Services, or the collection and processing of Personal Data.

System Logs and Maintenance

For operational and maintenance purposes, this Application and any third-party services it uses may collect system logs, which are files that record interactions and may also contain Personal Data, such as your IP address.

Information Not Contained in This Policy

Further information concerning the processing of Personal Data may be requested from me at any time using the contact details provided in this document.

Changes to This Privacy Policy

I reserve the right to make changes to this privacy policy at any time by notifying Users on this page and, if possible, within this Application, and where technically and legally feasible, by sending a notification to Users via any of the contact details I hold. Therefore, please check this page frequently, referring to the “Last modified” date listed at the bottom.

Should the changes affect processing activities based on consent, I will collect new consent from you, if necessary.

Definitions and Legal References

Personal Data (or Data) Any information that directly or indirectly, also in connection with any other information, including a personal identification number, makes a natural person identified or identifiable.

Usage Data Information collected automatically through this Application (or third-party applications integrated into this Application), which may include: the IP addresses or domain names of the computers used by the User who connects with this Application, the URI (Uniform Resource Identifier) addresses, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the server’s response (successful outcome, error, etc.), the country of origin, the characteristics of the browser and operating system used by the visitor, various time details per visit (e.g., the time spent on each page) and the details about the path followed within the Application, with particular reference to the sequence of pages visited, and other parameters about the User’s device operating system and/or IT environment.

User The individual using this Application who, unless otherwise specified, coincides with the Data Subject.

Data Subject The natural person to whom the Personal Data refers.

Data Processor (or Processor) The natural person, legal person, public administration, or any other body that processes Personal Data on my behalf, as outlined in this privacy policy.

Data Controller (or Controller) The natural or legal person, public authority, agency, or other body which, alone or jointly with others, determines the purposes and means of the processing of Personal Data and the tools adopted, including the security measures concerning the operation and use of this Application. The Data Controller, unless otherwise specified, is the owner of this Application.

This Application The hardware or software tool by which the Personal Data of Users is collected and processed.

Service The Service provided by this Application as defined in the relevant terms (if any) on this website/application.

European Union (or EU) Unless otherwise specified, all references to the European Union contained in this document include all current member states of the European Union and the European Economic Area.

Cookie Cookies are Tracking Tools consisting of small sets of data stored in the User’s browser.

Tracking Tool Any technology – e.g., Cookies, unique identifiers, web beacons, embedded scripts, e-tags, and fingerprinting – that allows for the tracking of Users, for example, by collecting or saving information on the User’s device.

Legal References Unless otherwise specified, this privacy policy exclusively concerns this Application.