Privacy Notice

1. Data controller and contact

The data controller is Claudio Floris, an independent professional registered for Italian VAT under No. 14527940960.

For privacy enquiries or to exercise your rights, write to privacy@claudiofloris.com. The request is handled directly by the controller.

2. Information processed

The enquiry form collects your name, email address, whether you are enquiring as an individual or a company, the service and format of interest, preferred communication language, optional location, and the message you choose to send.

The website also processes limited technical information, such as IP address, browser or device information, access times and pseudonymised security data, where needed to provide the service and prevent misuse.

3. Purposes and legal bases

The form is not used for newsletters, unrelated marketing, profiling or automated decisions producing legal or similarly significant effects.

• To assess and respond to your enquiry and take steps you request before a possible engagement: Article 6(1)(b) GDPR.
• To operate and protect the website, prevent misuse and establish or defend legal rights: Article 6(1)(f) GDPR, legitimate interests.
• To obtain aggregated statistics about visits and measure website performance through Cloudflare Web Analytics: Article 6(1)(f) GDPR, legitimate interests in improving the website.
• To meet legal obligations where applicable: Article 6(1)(c) GDPR.

4. Providing information

Fields marked as required are needed to understand and answer the enquiry. Without them, the request cannot be handled through the form. Location is optional and is useful mainly for possible in-house work.

Please do not include special-category or highly confidential personal information unless it is genuinely necessary and has been agreed in advance.

5. Who may receive the information

Claudio Floris can access the information submitted through the form. Technical providers, including Cloudflare for DNS, security and Web Analytics, and the website hosting, database and Google email services, process information only as needed to provide their respective services and handle enquiries.

Information may also be disclosed to professional advisers bound by confidentiality or to public authorities where required by law. It is never sold or made public.

6. International transfers

Cloudflare, Google and other technical providers may process information outside the European Economic Area. Where this occurs, the transfer must rely on an adequacy decision, standard contractual clauses or another safeguard recognised by the GDPR. Further details are available in each provider’s privacy documentation.

7. Retention

If an enquiry does not lead to an engagement, its form data is retained for no longer than 12 months after the last relevant contact and is then deleted, unless a longer period is needed to comply with law or protect legal rights. Email messages and copies held in the professional mailbox follow the same criteria.

If work begins, relevant information may be moved to professional and administrative records and retained for the periods required by contractual, accounting, tax or legal obligations.

Technical information used for security and diagnostic logs is retained only for the limited periods required for those purposes.

8. Security

Appropriate technical and organisational measures are used in proportion to the risk, including encrypted HTTPS transmission, restricted access and data minimisation.

9. Your rights

Where applicable, you may request access, correction, deletion, restriction, portability or object to processing. You may also lodge a complaint with the Italian Data Protection Authority. Use the contact route in section 1 to make a request.

10. Web Analytics, optional translation and external links

Cloudflare Web Analytics is used to obtain aggregated statistics about visits and page performance. According to Cloudflare, the service does not use cookies and does not collect or use visitors’ personal data. It is not used for advertising, cross-site tracking or user profiling.

If you activate the optional Google translation service, Google processes the related technical data under its own privacy terms. External links, including the source platform for public reviews, lead to services governed by their own privacy notices.