top of page

Privacy Policy

Privacy Policy

Last updated: 19 August 2026

This Privacy Policy explains how personal data is collected, used and protected when you visit www.ermannocantoni.com (the "Site"). It is provided in accordance with Articles 13 and 14 of Regulation (EU) 2016/679 (the "GDPR") and Italian Legislative Decree 196/2003 as amended by Legislative Decree 101/2018 (the "Italian Privacy Code").

1. Data Controller

The Data Controller is:

Ermanno Cantoni Bologna, Italy Email: contact@ermannocantoni.com

This Site is operated by a natural person in a personal capacity. It is a portfolio and information site: no goods or services are sold through it, and no payments are processed.

No Data Protection Officer has been appointed, as the conditions set out in Article 37 GDPR do not apply. All privacy-related enquiries should be sent to the email address above.

2. What data is collected

2.1 Data you provide voluntarily

When you contact me by email, or through any contact form on the Site, you may provide:

  • your name

  • your email address

  • any other information you choose to include in your message

2.2 Data collected automatically

When you browse the Site, the hosting infrastructure and analytics tools may automatically record:

  • IP address

  • browser type and version, operating system, device type

  • referring URL and pages visited

  • date, time and duration of the visit

  • approximate geographic location derived from the IP address

This data is collected in aggregated or pseudonymised form and is not used to identify individual visitors, except where required to establish liability in the event of unlawful activity against the Site.

2.3 Cookies and similar technologies

The Site uses cookies. Full details of which cookies are used, their purpose and duration, and how to manage your preferences, are set out in the separate Cookie Policy.

3. Purposes and legal bases

PurposeLegal basis (Art. 6 GDPR)

Replying to your enquiries and communicationsPerformance of pre-contractual measures taken at your request — Art. 6(1)(b); or legitimate interest in responding — Art. 6(1)(f)

Operating, maintaining and securing the SiteLegitimate interest in ensuring the Site functions correctly and is protected against abuse — Art. 6(1)(f)

Statistical analysis of traffic (non-essential analytics cookies)Your consent — Art. 6(1)(a)

Complying with accounting, tax and other legal obligationsLegal obligation — Art. 6(1)(c)

Establishing, exercising or defending legal claimsLegitimate interest — Art. 6(1)(f)

4. Is providing data mandatory?

Providing personal data is entirely voluntary. However, if you choose not to provide the data requested in a contact form or in an email, it will not be possible to reply to you or to process your request.

5. Who has access to your data

Your personal data may be disclosed to the following categories of recipients, each acting either as a data processor appointed under Article 28 GDPR or as an independent controller:

  • Wix.com Ltd. — hosting, site infrastructure, built-in analytics and form management

  • Email service providers — for receiving and storing correspondence

  • Analytics providers, where enabled and where you have given consent

  • Professional advisors (accountants, legal counsel), where strictly necessary

  • Public authorities and law enforcement, where disclosure is required by law

Your personal data is never sold, rented or traded to third parties for their own marketing purposes.

6. Transfers outside the European Economic Area

Some of the service providers listed above operate infrastructure or corporate entities outside the EEA, including in the United States and Israel.

Where such transfers occur, they are safeguarded by one or more of the following mechanisms:

  • an adequacy decision of the European Commission (Israel benefits from such a decision);

  • the EU–US Data Privacy Framework, where the recipient is certified;

  • Standard Contractual Clauses adopted by the European Commission under Article 46(2)(c) GDPR.

You may request a copy of the safeguards in place by writing to the contact address in Section 1.

7. How long data is kept

DataRetention period

Email correspondence and contact form submissions24 months from the last exchange, unless a longer period is needed to manage an ongoing relationship

Server and security logsUp to 12 months

Analytics dataAs set out in the Cookie Policy, in aggregated form

Records relating to a professional engagement, where one arises from an enquiry10 years, as required by Article 2220 of the Italian Civil Code

At the end of the applicable period, data is deleted or irreversibly anonymised.

8. Your rights

Under Articles 15 to 22 GDPR you have the right to:

  • access your personal data and obtain a copy of it;

  • rectify inaccurate or incomplete data;

  • erase your data ("right to be forgotten"), where the conditions in Article 17 apply;

  • restrict processing in the cases set out in Article 18;

  • data portability — receive your data in a structured, commonly used, machine-readable format;

  • object to processing based on legitimate interest, on grounds relating to your particular situation;

  • withdraw your consent at any time, without affecting the lawfulness of processing carried out before withdrawal.

To exercise any of these rights, write to contact@ermannocantoni.com. A response will be provided without undue delay and in any case within one month of receipt, extendable by two further months for complex requests, in which case you will be informed.

Right to lodge a complaint

If you believe your data has been processed unlawfully, you may lodge a complaint with the Italian supervisory authority:

Garante per la protezione dei dati personali Piazza Venezia 11, 00187 Rome, Italy Website: www.garanteprivacy.it Email: garante@gpdp.it

You may also bring the matter before the competent judicial authority.

9. Automated decision-making and profiling

No automated decision-making, including profiling, within the meaning of Article 22(1) and (4) GDPR is carried out through this Site.

10. Minors

The Site is not directed at children and does not knowingly collect data from persons under the age of 14, which is the age of consent for information society services in Italy under Article 2-quinquies of the Italian Privacy Code. If you believe a minor has provided personal data, please contact me so that it can be deleted.

11. External links

The Site contains links to third-party platforms, including LinkedIn, Amazon, Instagram and X. Once you follow such a link, the privacy policy of that third party applies. No responsibility is accepted for the content or data practices of external websites.

12. Security

Appropriate technical and organisational measures are taken to protect personal data against unauthorised access, loss, alteration or disclosure. These include encrypted transmission via HTTPS/TLS, access controls, and the security measures implemented by the hosting provider. No transmission over the internet can, however, be guaranteed to be entirely secure.

13. Changes to this Policy

This Privacy Policy may be updated to reflect changes in the Site, in the services used, or in applicable law. The revised version will be published on this page with an updated "Last updated" date. Where changes are material, reasonable steps will be taken to bring them to your attention.

14. Contact

For any question concerning this Policy or the processing of your personal data:

contact@ermannocantoni.com

bottom of page