Privacy Policy

Last updated: March 2026

1. Introduction

This Privacy Policy describes how personal data is collected, used and protected when you visit ettorestani.it (the "Site"). Processing is carried out in accordance with EU Regulation 2016/679 (GDPR) and applicable Italian privacy legislation.

2. Data We Collect

2.1 Contact form

When you submit the contact form on the Site, the following personal data is collected:

• Name
• Email address
• Service of interest
• Message

Data is collected only upon your explicit consent, provided via a dedicated checkbox in the form. You may withdraw your consent at any time by writing to info@ettorestani.it.

2.2 Automatically collected data

• Technical cookies: theme preference (dark/light mode), stored locally in your browser
• Analytics cookies: anonymous browsing data via Google Analytics (only with consent via the cookie banner)
• Navigation data: IP address, browser type, pages visited, session duration, referring website

3. Purposes and Legal Basis

• Handling contact requests — legal basis: consent of the data subject (Art. 6.1.a GDPR)
• Website analytics — legal basis: consent (Google Analytics, only if accepted in the cookie banner)
• Security and technical operation — legal basis: legitimate interest (Art. 6.1.f GDPR)
• Legal compliance — legal basis: legal obligation (Art. 6.1.c GDPR)

4. Data Processors and Third Parties

Contact form data is transmitted to and processed by Formspree (Formspree, Inc.), acting as a data processor under Art. 28 GDPR. Formspree applies appropriate security measures and is GDPR-compliant.
Formspree privacy policy: formspree.io/legal/privacy-policy

Other data recipients:

• Google LLC (Google Analytics): anonymous browsing data, only with consent
• Hosting provider: for the technical operation of the Site
• Professional consultants: only when strictly necessary
• Competent authorities: upon request for legal compliance

Your personal data is never sold, rented or transferred to third parties for commercial purposes.

5. International Data Transfers

Formspree and Google Analytics operate on servers located in the United States. Transfers take place on the basis of Standard Contractual Clauses (SCCs) approved by the European Commission, ensuring an adequate level of protection under the GDPR.

6. Retention Periods

• Contact form data: 24 months from submission, or until consent is withdrawn
• Analytics cookies: 26 months (Google Analytics default setting)
• Theme preference: until manually cleared from the browser
• Security logs: 6 months

7. Your Rights

Under Arts. 15–22 GDPR, you have the right to:

• Access (Art. 15): obtain a copy of your personal data and information on how it is processed
• Rectification (Art. 16): correct inaccurate or incomplete data
• Erasure (Art. 17): request deletion of your data (right to be forgotten)
• Restriction (Art. 18): restrict processing in certain circumstances
• Portability (Art. 20): receive your data in a structured, machine-readable format
• Objection (Art. 21): object to processing based on legitimate interest
• Withdrawal of consent (Art. 7.3): at any time, without affecting the lawfulness of prior processing

To exercise your rights, email: info@ettorestani.it

8. Complaints

You have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la Protezione dei Dati Personali):

• Website: www.gpdp.it
• Email: garante@gpdp.it
• Phone: +39 06.69677.1

9. Changes to This Policy

We reserve the right to update this Privacy Policy at any time. Changes will be published on this page with an updated date. Where changes are material and affect consent-based processing, fresh consent will be requested where required.

10. Contact