Privacy Policy of the website www.massimocavalletti.com
In compliance with the obligations arising from national legislation (Italian Privacy Code) and EU legislation (GDPR) regarding the protection of Personal Data, this Website respects and protects the privacy of its visitors and users.
This policy applies solely to this Website ( www.massimocavalletti.com ) and should not be understood as extending to other websites that may be reached through hyperlinks from this Website.
Data Controller
The “Data Controller” is Massimo Cavalletti, email: mc@barrancotto.com; further information regarding the processing of Personal Data may be requested at any time from the Data Controller using the contact details provided.
Types of Data Processed
“Personal Data” means any information relating to an identified or identifiable natural person, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier, or one or more factors specific to that person’s physical, physiological, mental, economic, cultural, or social identity.
The Personal Data collected by this Website are as follows:
Browsing Data
Like many websites, this Website makes use of log files in which information collected automatically during users’ visits is stored. This information is not collected in order to be associated with identified data subjects, but by its very nature could, through processing and association with data held by third parties, allow users to be identified.
This includes the IP addresses or domain names of the devices used to connect to the Website, the URI (Uniform Resource Identifier) addresses of the resources requested, the time of the request, the method used in submitting the request to the server, the size of the file received in response, the numerical code indicating the status of the response given by the server (successful, error, etc.), and other parameters relating to your operating system and computing environment.
Voluntarily Provided Data
The optional, explicit, and voluntary sending of email to the addresses indicated on this Website, and the completion of contact forms present on it, results in the subsequent acquisition of the sender’s Personal Data (for example, first name, last name, email address), which will be processed exclusively to respond to the request and will only be disclosed to third parties where such disclosure is necessary to fulfil the request.
Cookies and Similar Technologies
For further information on our use of cookies on the Website, please see our Cookie Policy.
Purpose, Legal Basis, and Mandatory or Optional Nature of Processing
The Personal Data provided through the Website will be processed by the Data Controller, using both automated and non-automated means, for the following purposes:
Browsing Data: This data is used solely to derive anonymous statistical information on the use of the Website and to check that it is functioning correctly. The data may also be used to establish liability in the event of hypothetical computer crimes against the Website (legitimate interests of the Data Controller); this data is not provided by the data subject but is automatically acquired by the Website’s technological systems.
Voluntarily Provided Data: Identification and contact details are requested as necessary to respond promptly to requests submitted by the data subject through the contact form. Submission of the request is subject to the data subject’s specific, free, and informed consent, documented via a dedicated checkbox. Providing data in the mandatory fields is necessary in order to receive a response, while the optional fields are intended to provide further useful information for the request.
Cookies and Similar Technologies: For specific information, please refer to the Cookie Policy.
Recipients
Data is processed at the Data Controller’s premises solely by internal staff, duly authorised and trained in data processing, and/or at the premises of the hosting and/or website management company by any staff appointed for routine and occasional maintenance operations, security checks, and optimisation of the Website. No data arising from the web service is disclosed or disseminated. An up-to-date list of data processors and authorised personnel may always be requested from the Data Controller. In addition to the parties mentioned above, the data collected may be disclosed to the competent authorities pursuant to legal or regulatory provisions.
Transfers
This Website may share some of the data collected with services located outside the European Union, in particular with Google. The transfer is authorised on the basis of specific decisions of the European Union and of the Italian Data Protection Authority (Garante), for which no further consent is required.
Data Retention
Personal Data is retained for the time necessary to fulfil the purposes of collection set out above. For example, Personal Data provided through the contact form will be processed for the time necessary to carry out the service requested by the Visitor. Without prejudice to the above, the Data Controller will process your Personal Data for as long as permitted by Italian law in order to protect its own interests. Further information regarding the retention period of Personal Data and the criteria used to determine that period may be requested by writing to the Data Controller.
Data Security
This Website processes users’ data lawfully and fairly, adopting appropriate security measures aimed at preventing unauthorised access, disclosure, alteration, or destruction of the data.
Rights of the Data Subject
Under applicable data protection law (in particular Articles 15–22 of EU Regulation 2016/679 – GDPR), users have the right to:
- access and obtain a copy of their Personal Data: the right to request confirmation as to whether or not we are processing any personal data concerning them. Where this is the case, users may access their Personal Data and certain information about how it is processed. In some cases, they may request that we provide an electronic copy of their data;
- rectification of Personal Data: where they are able to demonstrate that Personal Data held by us concerning them is inaccurate, users may request that such data be updated or corrected;
- erasure (“right to be forgotten”): in certain circumstances, users have the right to have their Personal Data erased. The request may be submitted at any time. However, this right is subject to legal rights or obligations that may require us to retain the data. Where, in compliance with the law, it is established that a request for erasure of Personal Data must be granted, we will act without undue delay;
- restriction of processing: in certain circumstances (for example, where the accuracy of the data is contested or the processing is unlawful), users have the right to obtain restriction of the processing of their Personal Data;
- data portability: where processing is based on consent or on a contract and is carried out by automated means, users have the right to receive their Personal Data in a structured, commonly used, and machine-readable format, and to have it transmitted directly to another data controller, where technically feasible;
- object to processing: users have the right to object at any time to the processing of their Personal Data carried out on the basis of the Data Controller’s legitimate interest, on grounds relating to their particular situation.
Where processing of Personal Data is based on consent, users also have the right to withdraw their consent at any time. Withdrawal of consent does not affect the lawfulness of any processing based on consent given prior to such withdrawal.
To exercise their rights, users should address their requests to the Data Controller at the following email address: mc@barrancotto.com. Users may also lodge a complaint concerning the processing of Personal Data with their local Data Protection Authority.
Changes
The Data Controller reserves the right to make changes to this Privacy Policy at any time by giving notice to Users on this page. Users are therefore invited to regularly check this page or section of the Website, referring to the last update date shown at the bottom. Should a User not accept the changes made to this Privacy Policy, the User is required to stop using the Website and may request that the Data Controller remove their Personal Data.
This Privacy Policy was last updated on 20 July 2026.