Privacy Policy (GDPR) – www.lucasciacchitano.it

Last update: 26/11/2025

This privacy notice is provided pursuant to Articles 13 and 14 of EU Regulation 2016/679 (“GDPR”) and describes how the website www.lucasciacchitano.it processes personal data of users who visit it or use its available services.

1. Data Controller

Luca Sciacchitano
Email: info@first-web.it

2. Types of data collected

a) Browsing data

IT systems automatically acquire technical data such as IP addresses, browser type, date and time of visit, and pages viewed. These data are used solely for statistical and security purposes.

b) Data voluntarily provided by the user

The site may collect name, email address and any other data contained in messages sent through the contact form.

c) Cookies and similar tools

The site may use technical cookies, statistical cookies or third-party cookies (for example services for embedded videos, maps or analytics tools). For details, please refer to the Cookie Policy.

3. Purposes of processing

• Responding to requests sent through the contact form.
• Managing the technical functioning of the site and ensuring its security.
• Obtaining anonymous statistics on the site’s usage.
• Fulfilling any legal obligations.

4. Legal basis for processing

• User consent for data submitted through the contact form.
• Legitimate interest of the controller for site security, maintenance and statistics.
• Legal obligation where applicable.

5. Methods of processing

Data are processed using IT and telematic tools, adopting adequate security measures. No automated profiling is carried out.

6. Data retention

• Contact form data: retained for the time necessary to respond to requests (maximum 12 months).
• Technical data and logs: retained for the time needed for site security and maintenance.
• Cookies: according to what is specified in the Cookie Policy.

7. Data disclosure

Data will not be sold or transferred to third parties. They may be shared exclusively with:

• Technical service providers (hosting, email, site maintenance).
• Judicial authorities or public bodies, only where required by law.

All providers guarantee GDPR compliance.

8. Data transfer to non-EU countries

Some technical services may involve transferring data to countries outside the European Union (for example Google or Meta). In such cases, providers adopt Standard Contractual Clauses (SCCs) or other adequate safeguards.

9. User rights

Users may exercise at any time the rights provided by Articles 15–22 of the GDPR, including:

• Accessing their data.
• Requesting rectification or update.
• Requesting erasure.
• Restricting or objecting to processing.
• Requesting data portability.

Requests must be sent to: info@first-web.it

10. Security

The controller adopts technical and organisational measures to protect data from unauthorised access, loss or misuse.

11. Children

The site does not intentionally collect data from children under 16. Should such data be sent accidentally, they will be deleted upon request.

12. Changes to this privacy notice

This privacy notice may be updated. Changes will be published on this page.