Controller and contact details
The controller is Diego Pavanello, VAT number IT05753490282, contact address Via Caravaggio 6, Padova, Italy, presenting his work through Designer di Montagna. For information and personal-data requests: pavanello93@gmail.com.
Data collected and purposes
The form collects your name, email and project description; you may also add services of interest, your current website and timing. This information is used to respond and assess a possible engagement. The legal basis is taking steps at your request before entering a contract (GDPR Article 6(1)(b)). Required fields are necessary to handle the enquiry; other fields are optional.
During browsing, the server receives technical data, such as your IP address and HTTP request information, necessary to deliver and protect the website. Security is based on the legitimate interest in preventing abuse and maintaining the service (Article 6(1)(f)). The form does not subscribe you to a newsletter or authorise advertising messages.
Google Analytics and consent
With optional analytics consent (GDPR Article 6(1)(a)), Google Analytics 4 measures website use: viewed pages, interactions and technical browser and device information associated with service-generated identifiers. We do not intentionally send form contents such as names, emails or project descriptions to Analytics. The tag disables Google Signals and advertising personalisation. You can withdraw consent through “Cookie settings” in the footer without affecting use of the website.
Google processes data under its service terms, including through its international infrastructure. Analytics cookies are configured to last 180 days; event-data retention on Google systems follows the Analytics property settings, available from the controller, and is distinct from cookie lifetime. For the provider’s processing details see Google’s partner-sites notice.
Microsoft Clarity: use and purpose
Only with analytics consent (GDPR Article 6(1)(a)), Microsoft Clarity collects interactions such as clicks, scrolling and navigation, technical browser information and pseudonymous identifiers. Heatmaps and session replays help improve usability and performance. The form is masked; we do not set personal identifiers through Clarity APIs. You can withdraw through the footer, which stops recording. Previously collected data follows the service retention periods described in the cookie policy.
Microsoft may process this data on its international infrastructure, including outside the European Economic Area, under its service terms and applicable transfer safeguards. The tag denies consent for advertising purposes. For further information about recipients, rights and transfers see Microsoft’s privacy statement.
How enquiries are handled
Form data is sent to the WordPress backend through Contact Form 7, forwarded by email and stored in the database through CFDB7. It may be processed by the controller, authorised personnel and hosting and email providers as necessary to provide their services. The website is hosted by Netsons; messages sent to the Gmail address above are also processed through Google’s email service.
Third-party services may involve processing outside the European Economic Area under the provider’s terms. You may ask the controller about recipients and applicable safeguards, including adequacy decisions or standard contractual clauses where relevant. Your details are not published on the website.
Google’s published transfer safeguards: Data Privacy Framework and standard contractual clauses.
Retention
Enquiries that do not result in an engagement are retained for up to 12 months after the last relevant contact, then deleted from email and the operational database. Deletion is handled manually in both email and the WordPress database. If an engagement follows, records needed to perform it, comply with legal obligations or protect rights are retained for the periods applicable to those purposes.
Technical logs and backups follow the providers’ security and recovery cycles; you may request details from the controller. Backups are not used to continue commercial activity on deleted enquiries.
Your rights
Where provided by the GDPR, you may request access, rectification, erasure, restriction and data portability, and object to processing based on legitimate interest. Where processing relies on consent, you may withdraw it without affecting earlier lawful processing. Write to pavanello93@gmail.com.
You may lodge a complaint with the Garante per la protezione dei dati personali or contact your competent supervisory authority.