Last updated: 30 September 2026
This notice explains how personal data are processed when you visit this website, in accordance with Articles 13 and 14 of Regulation (EU) 2016/679 (General Data Protection Regulation, “GDPR”) and the applicable Italian data protection law (Legislative Decree 196/2003, as amended).
The data controller is Maria Lucci.
Contact: maria.lucci97@gmail.com
The systems and software that run this website automatically collect some data during normal operation, as required by internet communication protocols: for example the IP address, date and time of the request, the page requested, the browser type and the operating system. These data are processed only to operate the website, to guarantee its security and to detect abuse or malfunctions.
Legal basis: the legitimate interest of the controller in ensuring the operation and security of the website (Art. 6(1)(f) GDPR).
Retention: technical logs are kept for a limited period, normally not longer than 12 months, unless needed to investigate a security incident.
If you contact me using the email address or phone number shown on the website, I process the data you choose to share (name, contact details and the content of your message) only to reply to you and, where relevant, to discuss a possible collaboration.
Legal basis: steps taken at your request prior to entering into a contract (Art. 6(1)(b) GDPR) and my legitimate interest in replying to your messages (Art. 6(1)(f) GDPR).
Retention: for the time needed to handle your request and any resulting professional relationship, and afterwards for as long as required by law.
Access to the Collaborations section is restricted to people who have received an access code. To manage access, the website uses a technical session cookie and, for security purposes only, temporarily records failed access attempts associated with a non-reversible (hashed) form of the IP address, in order to block automated attempts to guess the code. No account or registration is required.
Legal basis: legitimate interest in protecting confidential content and the security of the website (Art. 6(1)(f) GDPR).
Retention: the session cookie expires when you close the browser or after at most 4 hours; records of failed attempts are no longer used after 15 minutes and are periodically deleted.
Only if you give your consent through the cookie banner, the website uses Google Analytics 4 to collect statistical information on how the website is used (for example pages visited, time spent on the website, type of device and approximate geographic area). Google Analytics 4 does not store or log individual IP addresses. Advertising features and Google signals are disabled, and the data are not used for profiling or advertising.
Legal basis: your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time via , without affecting the lawfulness of processing carried out before the withdrawal.
Retention: analytics data are kept for 14 months, after which they are automatically deleted.
Further details are available in the Cookie Policy.
Browsing data are necessary for the website to work. Providing data by email or phone is optional, but without them it is not possible to reply to you. Consent to analytics cookies is entirely optional: refusing it has no effect on your use of the website.
Data are processed by the controller and, where necessary, by the following categories of recipients, acting as data processors under a specific agreement pursuant to Art. 28 GDPR:
Data are not disseminated, sold or disclosed to third parties for marketing purposes. They may be disclosed to public authorities only where required by law.
Data collected through Google Analytics may be transferred to and processed in the United States by Google LLC. Such transfers are based on the adequacy decision of the European Commission of 10 July 2023 regarding the EU-U.S. Data Privacy Framework, to which Google LLC is certified, and, where applicable, on the Standard Contractual Clauses approved by the European Commission.
No decisions based solely on automated processing, including profiling, are made.
Under Articles 15–22 GDPR you have the right to:
To exercise your rights, write to maria.lucci97@gmail.com. You also have the right to lodge a complaint with the supervisory authority of the EU Member State where you live, work or where the alleged infringement took place; in Italy this is the Garante per la protezione dei dati personali (www.garanteprivacy.it).
This notice may be updated, for example following changes to the website or to the applicable law. The date of the latest update is shown at the top of the page.
Get in touch