Privacy Policy

Last updated: 2026-04-28

This privacy notice describes how personal data collected through the website andrealibutti.com is processed under Regulation (EU) 2016/679 (“GDPR”) and Italian Legislative Decree 196/2003.

1. Data controller

Andrea Libutti, reachable at info@andrealibutti.com. The website is run personally and for informational purposes. When professional activity is started under self-employment, this section will be updated with VAT number, registered address, and the contact details of the data protection officer where applicable.

2. Types of data processed

  • Contact form: name, email address, project type, message content.
  • “Notify me” form: email address.
  • Navigation data: IP address, user agent, access timestamp (hosting provider logs, for security purposes).

3. Purposes and legal bases

  • Contact form — replying to your request. Legal basis: explicit consent (Art. 6.1.a GDPR) and/or pre-contractual measures at your request (Art. 6.1.b).
  • “Notify me” form — sending communications about the launch of products marked “Coming Soon”. Legal basis: explicit consent (Art. 6.1.a). You can withdraw consent at any time by replying to any email received with “STOP” in the subject, or by writing to info@andrealibutti.com with subject “unsubscribe”.
  • System logs — service security. Legal basis: legitimate interest (Art. 6.1.f).

4. Retention

  • Contact form data: up to 24 months from the last exchange, unless deletion is requested earlier.
  • Notify-me data: until consent is withdrawn or the initiative ends.
  • System logs: for the time strictly necessary as set by the hosting provider (typically 30 days).

5. Recipients and processors

Data is processed by technical service providers (hosting, email) appointed as data processors under Art. 28 GDPR. The up-to-date list of providers is available on request at info@andrealibutti.com.

6. Transfers outside the EU

Where some providers are located outside the European Union, transfers take place under the Standard Contractual Clauses approved by the European Commission or other adequate safeguards under Chapter V of the GDPR.

7. Your rights

You have the right to access, rectify, delete, restrict the processing of your data, receive a copy in a structured format (portability), and object to processing (Arts. 15-22 GDPR). You can exercise your rights by writing to info@andrealibutti.com.

You also have the right to lodge a complaint with the Italian Data Protection Authority (garanteprivacy.it).

8. Provision of data

Providing data through the forms is optional. Without the data marked as required, we cannot fulfil your request.

9. Changes

This notice may be updated; the date of the latest revision is shown at the top of the page.