Privacy Policy

Data controller

The data controller is Luisella Rossi. For requests about personal data processing, you can use the website Contacts page.

Data collected

Through the contact form, the website collects the first name, last name, email address and message content voluntarily submitted by the user.

The website may also process technical data strictly necessary for operation and security, such as IP address, browser information and technical logs handled by the hosting infrastructure.

Purposes and legal basis

• Replying to requests submitted through the contact form: performance of pre-contractual measures or legitimate interest in managing received communications.
• Keeping the website secure and operational: legitimate interest in security, abuse prevention and service continuity.

Third-party services

The contact form uses Resend, an email delivery service acting as data processor. Data submitted through the form passes through Resend to deliver the email.

Resend privacy policy: https://resend.com/legal/privacy-policy. Where required, transfers of data outside the European Economic Area must be covered by appropriate safeguards, such as a DPA and standard contractual clauses.

Montserrat and Noto Serif Display fonts are integrated through next/font and served locally by the website; no Google Fonts resources are loaded while browsing.

External links

The website contains links to Instagram, Facebook and Etsy. By clicking those links, the user leaves this website and data processing is governed by the privacy policies of the respective platforms.

Retention

Messages received through the contact form are kept for the time necessary to manage the request and, as a rule, no longer than 24 months, unless legal obligations or the protection of rights require otherwise.

User rights

Users may request access, rectification, erasure, restriction, data portability and objection to processing, in the cases provided by the GDPR. Users may also lodge a complaint with the Italian Data Protection Authority.

Automated processing

No automated decision-making or user profiling is carried out.