Paolo PedrazziPrivacy policy
Pursuant to Articles 13 and 14 of EU Regulation 2016/679 (GDPR).
Data Controller
- Name
- Paolo Pedrazzi
- Location
- Milan, Italy
- Website
- https://paolopedrazzi.com
Types of Data Collected
This website collects the following categories of personal data:
a) Data you provide voluntarily
- Newsletter: email address, first and last name (optional), signup source, UTM parameters.
- Bookings and purchases: data needed to complete the transaction via Stripe (name, email, and payment details handled directly by Stripe).
- Contact: data entered in contact forms or sent by email.
b) Data collected automatically
- Browsing data: IP address, browser type, operating system, pages visited, and time of access, via server logs.
- Google Analytics (GA4): anonymized browsing data for statistical purposes (Measurement ID: G-XSR30ZSPK5). Enabled only with your prior consent.
- Google Fonts: the website uses fonts loaded through the Next.js next/font system, which serves them locally, with no direct connections to Google servers while you browse.
Purposes and Legal Basis for Processing
| Purpose | Legal basis | Retention |
|---|---|---|
| Providing the requested services | Performance of a contract (Art. 6.1.b) | Duration of the relationship + 10 years |
| Sending the newsletter | Consent (Art. 6.1.a) | Until consent is withdrawn |
| Statistical analysis (GA4) | Consent (Art. 6.1.a) | 26 months |
| Payment processing | Performance of a contract (Art. 6.1.b) | As required by tax obligations (10 years) |
| Legal obligations | Legal obligation (Art. 6.1.c) | As required by applicable law |
Data Recipients
Personal data may be shared with:
- Hetzner Online GmbH
- Germany — website hosting. Processing within the EU.
- Google LLC
- Google Analytics 4 service for aggregate statistics. Transfer outside the EU with adequate safeguards (Data Privacy Framework).
- Stripe, Inc.
- Payment processing. Transfer outside the EU with adequate safeguards (Data Privacy Framework).
Data Transfers Outside the EU
Some data may be transferred to third countries (USA) through Google and Stripe services. These transfers are based on the EU-U.S. Data Privacy Framework or on Standard Contractual Clauses approved by the European Commission, ensuring an adequate level of protection.
Your Rights as a Data Subject
As a data subject, you have the right to:
- Access (Art. 15)
- Obtain confirmation of, and a copy of, your data.
- Rectification (Art. 16)
- Correct inaccurate data.
- Erasure (Art. 17)
- Request that your data be deleted.
- Restriction (Art. 18)
- Restrict processing.
- Portability (Art. 20)
- Receive your data in a structured format.
- Objection (Art. 21)
- Object to processing.
- Withdrawal of consent (Art. 7)
- Withdraw your consent at any time.
To exercise your rights, write to privacy@paolopedrazzi.com.
You also have the right to lodge a complaint with the Italian Data Protection Authority, Garante per la Protezione dei Dati Personali (www.garanteprivacy.it).
Cookies
For detailed information on how we use cookies, see our Cookie Policy.
Changes to This Privacy Policy
The Controller reserves the right to amend this policy at any time. Changes will be published on this page along with the date of the last update.