Privacy Policy

Data controller — identity and contacts

The data controller for personal data processed through this website is Stefania Capobianco.

Address: PIAZZA DEI SATIRI 52, 00186 Roma (RM).

Contact email: info@stefaniacapobianco.com.

Website: https://stefaniacapobianco.channel.markedev.com.

Data Protection Officer: Stefania Capobianco.

What data we collect

Contact form submissions

When you use the contact form we collect the personal data you provide, which typically includes your name, email address, any message content, and any other information you choose to submit through the form. We also collect metadata about the submission such as date and time and technical information needed to deliver and respond to your message.

Newsletter subscriptions

To subscribe to newsletters we collect the contact details you provide for subscription purposes, typically your email address and, where supplied, your name or other optional profile information. We also record when and how you provided consent to receive communications.

Technical and log data

When you visit the site we automatically collect technical and log data necessary for operation and security. This may include your IP address, browser type and version, device identifiers, pages visited, referrer, access times, and error and performance data. Some of these data are processed to provide basic site functionality and to protect the site against abuse or attacks.

Purposes and legal bases

We process personal data for the following purposes and on the indicated legal bases:

Responding to contact inquiries: We use contact form data to communicate with you and to handle and respond to your requests. Legal basis: our legitimate interest in responding to enquiries and, where applicable, performance of pre-contractual measures or the fulfilment of a contract.
Sending newsletters: We use newsletter subscription data to send you marketing and informational emails where you have given consent. Legal basis: consent. You may withdraw consent at any time.
Providing and securing the website: Technical and log data are processed to operate, secure, and improve the website, to detect and prevent fraud and abuse, and to ensure the integrity of our services. Legal basis: our legitimate interests in operating and securing the website.

Third-party processors

We use third-party services to provide features, to analyse site usage, and to protect the site. Each service listed below receives the types of data indicated and has the consent or legal basis category noted.

Google Analytics 4 (ga4)

Purpose: website analytics and usage measurement. Data received: aggregated and pseudonymised usage data, device and browser information, and technical identifiers; in some configurations IP addresses and user identifiers may be processed by the service provider. Consent category: analytics.

Google Tag Manager (gtm)

Purpose: tag management to deploy and manage analytics and other scripts. Data received: triggers and metadata about page events and tags, and interaction metadata passed to tags. Consent category: analytics / necessary depending on the tags deployed.

Meta Pixel (meta-pixel)

Purpose: advertising measurement, conversion tracking and remarketing. Data received: interaction events, page view information, device and browser data, and identifiers used for ad targeting. Consent category: marketing.

YouTube (embedded content)

Purpose: display of embedded video content. Data received: device and usage metadata and identifiers related to video playback and embedding; third party may set cookies or collect data when you interact with embedded content. Consent category: marketing / preferences for personalised content depending on configuration.

Maps (embedded maps)

Purpose: display of interactive maps and location information. Data received: device and request information necessary to load maps and to provide map features; location-related data may be transmitted to the map provider when you interact with the map. Consent category: preferences / necessary for the map functionality.

reCAPTCHA

Purpose: bot detection and site protection. Data received: technical and interaction data used to assess whether a visitor is a human or a bot. Consent category: necessary for security and fraud prevention.

Data retention

We retain personal data only for as long as necessary to fulfil the purposes for which the data were collected, to comply with legal obligations, to resolve disputes, and to enforce our agreements. Retention periods are determined based on the nature of the data and the purpose of processing. When data are no longer required, they are securely deleted or anonymised.

Your rights

Under applicable data protection law in the EU you have a number of rights in relation to your personal data, including:

Right of access: the right to obtain confirmation whether we process your personal data and to access a copy of that data.
Right to rectification: the right to have inaccurate or incomplete personal data corrected.
Right to erasure: the right to request deletion of personal data where processing is no longer necessary or consent is withdrawn and no other legal basis applies.
Right to restriction of processing: the right to request restriction of processing in certain circumstances.
Right to data portability: where processing is based on consent or contract and carried out by automated means, the right to receive your personal data in a structured, commonly used and machine-readable format and to transmit those data to another controller.
Right to object: the right to object to processing based on legitimate interests or to direct marketing at any time.
Right to withdraw consent: where processing is based on consent, you may withdraw consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.

If you consider that our processing of your personal data infringes applicable law, you also have the right to lodge a complaint with a supervisory authority in the EU.

Contacts — how to exercise your rights

To exercise your rights or to ask questions about this policy and our data practices, you may contact us at the address or email provided in the Data controller section above: info@stefaniacapobianco.com. We will respond within the timeframes required by applicable law.

Where applicable, we may ask you to verify your identity before responding to requests to ensure personal data security.

Effective date: the policies described here apply from the date below.

Policy version 1