This information notice is provided pursuant to Regulation (EU) 2016/679 (“GDPR”) and the applicable national legislation on personal data protection.

Data controller: Stefania Leoni
Address: Via Giulio Arata 22, 29122 Piacenza (PC), Italy
Phone: +39 333 288 9289
Email: info@stefanialeoni.com
Website: www.stefanialeoni.com

Through this website the following categories of data are processed:

• Browsing data: IP addresses, date and time of access, pages visited, type of browser and device, technical information necessary to use the website (system logs).
• Data voluntarily provided by the user: first name, last name, email address and any other data entered in the contact form or voluntarily communicated via email or phone.
• Data collected through cookies and similar technologies: information on preferences, interactions with the website, usage statistics, as described in the Cookie Policy section.

Personal data are processed for the following purposes:

• Responding to contact requests (contact form or email): to provide information on services, quotes and support. Legal basis: performance of pre‑contractual or contractual measures at the data subject’s request (art. 6.1.b GDPR).
• Technical management of the website: website security, prevention of abuse and spam, operation of forms and multimedia content (including reCAPTCHA). Legal basis: legitimate interest of the Controller (art. 6.1.f GDPR) in ensuring security and proper functioning of the website.
• Statistics and usage analysis (Google Analytics or similar tools): collection of aggregated data to improve content and performance of the website. Legal basis: user consent (art. 6.1.a GDPR), where required via the cookie banner.
• Compliance with legal obligations: accounting, tax or other mandatory requirements. Legal basis: compliance with a legal obligation (art. 6.1.c GDPR).

Data are processed by electronic and/or paper means, using methods strictly related to the purposes described above and with suitable security measures to ensure confidentiality and integrity.

• Contact data: stored for the time necessary to handle the request and, if a professional relationship is established, for the entire duration of the relationship and the subsequent statutory periods.
• Browsing data and logs: normally deleted within 12 months, unless needed longer for security reasons or upon request of judicial authorities.
• Data collected via cookies: stored for the period indicated in the cookie banner or in the settings of each cookie.

Data may be disclosed to:

• Collaborators and consultants supporting the Controller in managing the website and the services offered (e.g. developers, marketing consultants, accountant).
• Technical service and hosting providers, email service providers, analytics and security tools.
• Competent authorities, where required by law or following an official request.

Providers processing data on behalf of the Controller are appointed as Data Processors pursuant to art. 28 GDPR, where required.

Some of the services used on this website (for example Google LLC for Analytics, reCAPTCHA, Google Fonts) may involve the transfer of personal data to non‑EU countries (e.g. the United States).

In such cases, transfers are carried out within the limits set by the GDPR, on the basis of adequacy decisions, Standard Contractual Clauses approved by the European Commission or other appropriate safeguards. For more details, please refer to the privacy policies of each provider.

The user, as data subject, may exercise at any time the rights under articles 15–22 GDPR, including:

• Right of access to personal data.
• Right to rectification or erasure of data.
• Right to restriction of processing.
• Right to object to processing.
• Right to data portability, where applicable.
• Right to withdraw consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal.

To exercise these rights, the user may send a request by email to info@stefanialeoni.com. The user also has the right to lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it).

The website provides a contact form through which the user can request information about services or schedule an appointment.

The data usually required in the form are: first name, last name, email address and the content of the message. Providing such data is optional, but failure to do so will make it impossible to process the request. Data are used exclusively to handle the request and are not disclosed to third parties for independent marketing purposes.

9.1 WordPress platform

This website is built on the WordPress platform, which uses technical and functional cookies required for the proper operation of the CMS and its components (e.g. admin login management, security, display preferences).

9.2 Google Fonts

The website may use Google Fonts to embed typefaces. The service may collect the IP address and technical data about the browser and device, which are necessary to properly deliver the fonts.

9.3 Self‑hosted videos

Some video content is hosted directly on the website’s server space and played through an integrated player. When viewing such content, technical browsing data may be processed, such as IP address, browser type, device type and aggregated data on views.

9.4 Google Analytics

The website may use Google Analytics (a web analytics service provided by Google LLC) to collect anonymous and aggregated statistical information on the use of the website (pages visited, time spent on the website, device used, approximate geographical area, etc.). The IP address can be anonymised, if configured accordingly. The use of these cookies is based on the user’s consent, where required through the cookie banner.

9.5 Google Search Console

Google Search Console is used to monitor the website’s performance in Google search results and detect any technical issues. The tool provides the Controller with aggregated statistical data and does not allow direct identification of individual users.

9.6 Google reCAPTCHA

The website may use Google reCAPTCHA to protect forms from automated access and spam. The service analyses user behaviour (for example IP address, mouse movements, time spent on the page, browser settings) in order to distinguish human users from bots.

The use of reCAPTCHA may involve the installation of cookies and the transmission of certain data to Google LLC. Use of the service is subject to Google’s Privacy Policy and Terms of Service. Where required, such cookies are used on the basis of the consent given through the cookie banner.

Cookies are small text files that websites visited by the user send to the user’s device, where they are stored to be sent back to the same websites upon subsequent visits. This website uses different types of cookies.

10.1 Types of cookies used

• Technical cookies: necessary for the operation of the website and for the use of its contents (e.g. session cookies, preference cookies, security cookies).
• Functionality cookies: allow the website to remember certain choices (e.g. language, settings), improving the browsing experience.
• Analytics cookies: used to collect aggregated statistical information on use of the website (e.g. Google Analytics). Depending on configuration, they may require user consent.
• Third‑party cookies: installed by external services integrated into the website (e.g. Google, reCAPTCHA, fonts, video or map services), which may collect data also for their own purposes.

10.2 Consent management

On the first visit to the website, and subsequently according to applicable law, a banner for cookie management may be displayed, allowing the user to accept, refuse or customise the categories of non‑essential cookies.

The Controller reserves the right to update this Privacy & Cookie Policy at any time, for example in case of changes in legislation or updates to the services used on the website. Changes will be published on this page.