This Privacy Policy explains how personal data is collected and processed when you visit this website (the “Site”) or contact its owner. It is provided pursuant to Regulation (EU) 2016/679 (“GDPR”) and Italian Legislative Decree 196/2003 as amended.
Last updated: 10 September 2026
1. Data Controller
The data controller is Manuele Montesanti. For any question about this policy or to exercise your rights you can write to info@www.manuelemontesanti.com.
2. What data we collect
- Contact form data. When you use the contact form we collect the first name, last name, email address, subject and the content of the message you send.
- Technical / navigation data. The Site’s hosting provider automatically records server logs (IP address, browser type, operating system, pages requested, date and time). These data are used only for security, troubleshooting and aggregate statistics and are not used to identify visitors.
- Cookies and similar technologies. The Site uses a strictly necessary technical cookie to store your consent choices, and – only with your consent – third-party cookies set by embedded YouTube videos. Full details, names and durations are in the Cookie Policy.
The Site does not knowingly collect special categories of data and does not carry out profiling or automated decision-making.
3. Purposes and legal bases
- Replying to your enquiries submitted through the contact form – legal basis: performance of steps taken at your request prior to entering into a contract and/or your consent (Art. 6(1)(b) and (a) GDPR).
- Security, diagnostics and prevention of abuse of the Site – legal basis: the legitimate interest of the controller in keeping the Site safe and available (Art. 6(1)(f) GDPR).
- Cookies that are not strictly necessary (YouTube video embeds) – legal basis: your consent (Art. 6(1)(a) GDPR), which you can give or withdraw at any time through the “Cookie settings” link in the footer.
4. How contact messages are handled
Messages sent through the contact form are delivered by email to the controller’s mailbox. They are not stored in a database on the Site. If email delivery temporarily fails, the message content may be written to the server error log and is deleted in the ordinary log rotation. Your email address is used as the reply-to address so the controller can respond to you.
5. Recipients and third-party services
Personal data may be processed on the controller’s behalf by the following categories of recipients, appointed as data processors where applicable:
- Hosting and email provider – the company that hosts the Site and delivers the contact-form emails (Aruba S.p.A., Italy). Please verify and update this reference to match your production provider.
- Google Fonts – the Site loads web fonts from Google’s servers (Google Ireland Limited / Google LLC). This causes your IP address to be transmitted to Google when a page loads.
- YouTube (Google) – video previews are shown as static images; the YouTube player is loaded only after you click play and only if you have accepted the related cookies. Playback uses YouTube’s privacy-enhanced mode (
youtube-nocookie.com).
Data are not sold or disclosed to third parties for their own marketing purposes. Data may be disclosed to public authorities where required by law.
6. Transfers outside the EEA
Some third-party providers (in particular Google) may process data on servers located outside the European Economic Area, including in the United States. Such transfers are covered by adequacy decisions of the European Commission and/or Standard Contractual Clauses.
7. Retention
- Contact messages: kept for the time needed to handle your request and any related follow-up, and thereafter only where necessary to establish, exercise or defend legal claims.
- Server logs: kept for a limited period by the hosting provider for security purposes, then deleted or anonymised.
- Consent cookie: up to 12 months, after which consent is requested again.
8. Your rights
You have the right to request access to your personal data and its rectification or erasure, the restriction of or objection to processing, and data portability. Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of processing carried out beforehand. To exercise these rights, write to info@www.manuelemontesanti.com.
You also have the right to lodge a complaint with a supervisory authority, in Italy the Garante per la protezione dei dati personali (www.garanteprivacy.it).
9. Children
The Site is not directed to children under the age of 16 and does not knowingly collect their personal data. If you believe a child has provided personal data, please contact the controller so it can be deleted.
10. Changes to this Privacy Policy
This Privacy Policy may be updated over time. The current version is always published on this page, with the “Last updated” date shown above.