Privacy Policy
This policy describes how personal data of users visiting carlapinna.com is processed, pursuant to Regulation (EU) 2016/679 (“GDPR”) and applicable Italian law.
Data controller
The data controller is Carla Pinna, based in via Vittorio Veneto 138 Oristano (OR), VAT IT 01157860956. Contact email: info@carlapinna.com.
Types of data collected
- Navigation and log data. The systems running the site automatically collect, during normal operation, data implicit in internet communication protocols (e.g. IP addresses, browser/device type, user-agent, request times, pages requested). This data is processed for security purposes and traffic analysis.
- Data collected via cookies and analytics tools. See the Cookie Policy for details. In particular, the site uses Google Analytics 4 (see below), enabled only after consent.
- Data provided voluntarily. When you contact us by email (or via a contact form, if enabled), we process the data you provide (e.g. name, email address, message content).
Purposes and legal bases
- Site operation and security (log data) — legal basis: legitimate interest of the controller (Art. 6.1.f GDPR).
- Statistical traffic measurement (Google Analytics 4) — legal basis: the user’s consent (Art. 6.1.a GDPR), given via the cookie banner.
- Responding to contact requests — legal basis: responding to your request / pre-contractual measures (Art. 6.1.b) or legitimate interest.
Google Analytics 4
The site uses Google Analytics 4, an analytics service provided by Google Ireland Ltd. (and Google LLC). GA4 uses cookies and identifiers to collect aggregate information about site usage (pages visited, duration, source, device type). GA4 is enabled only after your consent via the cookie banner and is disabled by default.
Processing may involve transferring data to non-EU countries (United States). Further information on Google’s processing is available in Google’s privacy policy.
Data retention
Data is kept only for as long as necessary for the stated purposes: logs for 24 months; GA4 data according to the retention settings configured in the Analytics property (14 months); contact data for as long as needed to handle the request and meet legal obligations.
Recipients and processors
Data may be processed by providers acting as data processors: the hosting provider Aruba, Google (for Analytics), and any other services listed in the Cookie Policy. Data is neither disclosed nor sold to third parties for their own marketing purposes.
Your rights
You have the right to access your data, request its rectification or erasure, restriction of or objection to processing, and portability (Arts. 15-22 GDPR). You may also withdraw your consent for cookies/analytics at any time. To exercise your rights, write to info@carlapinna.com. You also have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali, www.garanteprivacy.it).
Changes
This policy may be updated. Changes will be published on this page with the updated date indicated.