Last updated: 5 November 2026
This policy explains how personal data are processed when you visit andreapasserini.com, in accordance with Regulation (EU) 2016/679 (GDPR) and Italian data protection law.
Data controller
Andrea Passerini, Aosta (AO), Italy — VAT no. 01196260077
Email: info@andreapasserini.com — Phone: +39 393 433 0610
What data we collect and why
Contact form and email
If you write through the contact form or by email, we process your name, email address, subject and message only to reply to you and, if requested, to prepare a quote or manage a photography assignment. Legal basis: steps taken at your request prior to entering into a contract and our legitimate interest in answering enquiries (art. 6(1)(b) and (f) GDPR). Messages are kept for as long as needed to handle the request and any resulting business relationship, then deleted, unless longer retention is required by law (e.g. tax records).
Visit statistics (Google Analytics)
With your consent only, we use Google Analytics 4 (Google Ireland Ltd.) to understand how the site is used (pages visited, approximate location, device, referral). Google Consent Mode is active: until you click Accept no analytics cookies are stored on your device, and advertising features are disabled. Legal basis: consent (art. 6(1)(a) GDPR), which you can withdraw at any time with the Cookie settings button. Google may process data outside the EU under the EU–US Data Privacy Framework and standard contractual clauses. More information: Google Privacy Policy.
Spam protection (Cloudflare Turnstile)
The contact form is protected from spam and abuse by Cloudflare Turnstile (Cloudflare, Inc.), which is loaded only on the contact page. To tell people from automated bots, Turnstile processes technical data such as IP address, browser and device characteristics; it does not use cookies to track you and the data are not used for advertising. Legal basis: legitimate interest in the security of the website (art. 6(1)(f) GDPR). Cloudflare may process data outside the EU under the EU–US Data Privacy Framework and standard contractual clauses. More information: Turnstile Privacy Addendum and Cloudflare Privacy Policy.
Technical data and hosting
Like every website, our servers automatically record technical data (IP address, browser, date and time of the request) to deliver the pages, ensure security and fix errors. The site is hosted by Hostinger and delivered through Cloudflare, which act as data processors. Logs are kept for a limited time. Legal basis: legitimate interest (art. 6(1)(f) GDPR).
Cookies
- cookie_notice_accepted — technical, stores your cookie choice, 6 months. Always active.
- _ga, _ga_* — Google Analytics statistics, up to 2 years. Only after your consent.
You can change or withdraw your consent at any time using the Cookie settings button, or by deleting cookies from your browser settings.
External links and social networks
The site contains simple links to Instagram, Facebook, LinkedIn and 500px. No social plugins are loaded: those services only receive data if you click the link and visit them, under their own privacy policies.
Your rights
You can ask at any time to access, correct or delete your data, to restrict or object to processing, and to receive your data in a portable format (arts. 15–22 GDPR), by writing to info@andreapasserini.com. You also have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali).
Data sharing
Personal data are not sold or shared with third parties for marketing purposes. They are only processed by the service providers listed above, acting on our behalf, and disclosed to authorities when required by law.