Privacy notice

The data controller is Giacomo Lombardo — Geometra, with registered office at Via Cesare Battisti 19, 50025 Montespertoli (FI), VAT number IT03905200485, tax code LMBGCM65B07E974N.

For any matter concerning your data you can write to info@lombardocavadas.com or to the certified address —.

No data protection officer has been appointed: none of the cases set out in Article 37 of the Regulation applies.

When you write to us through the form we collect name, email address, phone number if given, subject and the text of the message, together with the site language and the page the form was sent from.

Why: to read your enquiry and reply to it. None of this data is used to send you marketing.

Legal basis: pre-contractual measures taken at your request under Article 6(1)(b) of the Regulation, together with the consent you give by ticking the box before sending.

Provision: name, email and message are needed in order to reply; phone and subject are optional.

Retention: 24 months from the last exchange, after which the enquiry is deleted automatically. If the contact leads to a professional engagement, the data becomes part of that file and follows the retention periods for professional and tax records (ten years, Article 2220 of the Italian Civil Code).

Alongside the message we keep a cryptographic hash of your IP address, not the address itself. It serves only to count how many submissions come from the same source and to stop automated ones. The address cannot be recovered from the hash.

We collect none. There is no analytics software on this site: no Google Analytics, no self-hosted counter, nothing. No one counts how often a page is opened and no one knows which page you came from.

The practical consequence is that no cookie at all is placed on the device of anyone visiting the site: the ones listed in the cookie policy concern only those who log into the editor panel, that is, us.

This is why the site asks you for no consent when it opens: there is nothing to give it for. If we ever switch statistics on, the panel will come back and this page will say so.

Like any web server, ours records the requests it receives: IP address, time of the request, address requested, outcome and browser type.

Why: to notice faults and intrusion attempts. They are not used to analyse visitor behaviour and are not cross-referenced with other data.

Legal basis: the legitimate interest in keeping the site working and secure, under Article 6(1)(f) of the Regulation.

Retention: 30 days, after which they are deleted.

When you make a choice in the cookie panel we keep a record of it: a random identifier — which is also in the cookie on your device and is not linked to any personal data —, the categories accepted, the version of the notice and the time of the choice.

Why: the Regulation requires being able to demonstrate that consent was given. Without a record there would be no way to prove it.

Retention: 12 months, the same as the validity of the consent itself.

As few people as possible. In detail:

• No third-party service is loaded by the site. There is no Google Analytics, Google Fonts, Google Maps, reCAPTCHA, content delivery network or social platform pixel. The typefaces are hosted by us. Maps open only if you click the relevant link, and at that point you are visiting the destination site, under its own rules.
• The site is hosted on servers located in the European Union. The infrastructure provider acts as a processor, appointed under Article 28 of the Regulation.
• Enquiry notifications pass through our email provider, also a processor.
• Data may be disclosed to legal, tax or insurance advisers, and to the authorities where the law requires it.

No data is transferred outside the European Economic Area. We do not sell, hand over or exchange data with anyone. An up-to-date list of processors can be requested by writing to info@lombardocavadas.com.

At any time you can ask to:

• know what data concerns you and obtain a copy (Art. 15);
• have inaccurate or incomplete data corrected (Art. 16);
• have your data erased (Art. 17);
• restrict processing while a complaint of yours is being examined (Art. 18);
• receive the data in a machine-readable format (Art. 20);
• object to processing based on legitimate interest (Art. 21);
• withdraw consent at any time, without affecting what was done beforehand (Art. 7).

An email to info@lombardocavadas.com is enough. We reply within 30 days; if the request is complex we may take a further two months, letting you know within the first. Exercising these rights is free of charge.

If you believe the processing infringes the Regulation, you may turn to the Italian Garante per la protezione dei dati personali (Piazza Venezia 11, 00187 Rome — garanteprivacy.it) or to the supervisory authority of your country of residence, or bring the matter before a court.

Traffic travels encrypted (HTTPS). Access to the editor panel requires a password stored only in an encrypted, non-reversible form, has a limit on login attempts, and is protected against form submissions from external sites. Backups are made daily and remain on our own systems.

No measure is perfect: should a breach occur with a risk to your rights, we will tell you and inform the supervisory authority within the deadlines set by Articles 33 and 34 of the Regulation.

If the way we handle data changes, we update this page and the date at the foot of it. Where the change concerns cookies or statistics, the consent panel reappears and asks you to choose again: consent given on a different text does not carry over to the new one.