Privacy and cookies

Data controller

The data controller is Francesca d’Errico, Gavorrano (GR), Italy. For any request concerning your personal data you can write to fmderrico@gmail.com.

What data I process and why

Contact form

If you write to me through the contact form, I process your name, email address, area of interest and the text of your message in order to reply to your request. Legal basis: your request and the pre-contractual measures you have asked for (Art. 6(1)(b) GDPR). I keep the data for as long as necessary to handle the request and any follow-up contacts, then I delete it, unless required by law.

Email and WhatsApp

If you contact me by email or WhatsApp, I process the address or number and the content of the messages only to reply to you (Art. 6(1)(b)). WhatsApp is a service of Meta Platforms Ireland Limited, which processes data according to its own privacy notice.

Browsing data

The website and its hosting provider record technical data (for example IP address, date and time, pages requested) that are necessary for the site to work and to keep it secure. Legal basis: legitimate interest (Art. 6(1)(f)).

Newsletter

Subscription to the newsletter takes place on Substack, an external platform: the data you enter there are processed by Substack according to its own notice. This site does not collect or store subscribers’ email addresses.

Cookies

This site uses only technical cookies, which are necessary for the site to work (for example to remember the chosen language) and do not require consent. It does not use profiling cookies or statistical analysis tools.

The Instagram feed shown on the home page is loaded by the site itself; clicking on the content takes you away from the site to open Instagram (Meta), which processes data according to its own rules. An animation file (GSAP) is delivered by Cloudflare’s cdnjs network, which receives the visitor’s IP address in order to do so. The typefaces are hosted on the site.

Recipients and transfers

The data are not sold or transferred to third parties for marketing purposes. They may be processed by the site’s hosting provider (Aruba S.p.A.) and by the services listed above, as processors or independent controllers. Where the services involve a transfer outside the European Union (for example Meta, Cloudflare, Substack), this takes place on the basis of the safeguards provided by the GDPR (adequacy decisions or standard contractual clauses).

Your rights

You have the right to request access to your data, rectification, erasure, restriction of processing, to object and, where applicable, portability (Arts. 15–22 GDPR). You can exercise them by writing to fmderrico@gmail.com. If you believe the processing violates the law you can lodge a complaint with the Italian data protection authority, the Garante per la protezione dei dati personali (garanteprivacy.it).

Updates

This notice may be updated. Last updated: 5 October 2026. In case of any discrepancy, the Italian version prevails.