Privacy and cookies
Last updated: 30 October 2026.
Who processes your data
The data controller is Alessandra Garzetti, reachable at info@alessandragarzetti.it or through the contact form.
Contact and enquiries
The form collects your name, email address and message to answer enquiries about works, collaborations and exhibitions. Providing this information is optional, but all three fields are necessary to use the form. Please do not send unnecessary sensitive data.
The legal basis is taking steps at your request before entering into a contract, where applicable, or otherwise the legitimate interest in handling correspondence. Form data is not used for newsletters, advertising or advertising profiling.
Operation and security
The website is hosted on a private server in Italy. Technical logs may contain IP addresses, timestamps, requested resources, response status and browser information. They support operation, troubleshooting and protection against abuse, based on the legitimate interest in website security.
Correspondence is delivered through Apple iCloud email. FluentSMTP handles sending on the website server and temporarily keeps delivery logs, which may include message contents.
Spam protection
When enabled, Cloudflare Turnstile processes technical signals such as IP and browser information to prevent spam. Cloudflare also uses these signals to improve bot detection. Our form does not send it your message text.
These providers may process data outside the European Economic Area. Cloudflare states that it uses the EU–US Data Privacy Framework and, where applicable, standard contractual clauses. Apple specifies standard contractual clauses for transfers of European data. See the providers’ policies below for details and safeguards.
Cookies and external links
The website uses functional cookies to remember your language and, for authorised users, manage WordPress login and security. Language preferences may last about a year; authentication cookies depend on the session and the choice to remain signed in. No traffic analytics or advertising tools are installed. Instagram is an external link, without an embedded feed.
Data can be accessed by the controller and authorised people managing and maintaining the website, within their responsibilities, and disclosed to authorities where required by law. It is not made public.
Retention
Messages are retained as long as needed to handle your enquiry and any subsequent relationship, subject to legal obligations or the protection of rights. Ordinary retention for WordPress server and FluentSMTP logs is approximately 14 days. Other infrastructure logs are retained as needed for troubleshooting and security incidents. Backups follow the backup system’s retention cycle and are not used for other purposes.
Your rights
You may request access, rectification, erasure, restriction or portability where provided by the GDPR, and object to processing based on legitimate interests, by contacting the controller. You may also complain to the Italian data protection authority. No decisions with legal effects are based solely on automated processing.
Cloudflare Turnstile · Cloudflare Privacy Policy · Apple Privacy Policy · Garante per la protezione dei dati personali