Notice under art. 13 GDPR

Privacy Policy

Last updated: 10 June 2026 · This is a courtesy translation: in case of any discrepancy, the Italian version prevails.

This notice describes how the personal data of visitors to federicanardi.it, and of the people who contact me, is processed under Regulation (EU) 2016/679 ("GDPR"). In short: this site uses no cookies, has no analytics or profiling systems, and only processes the data you send me yourself when you write or book a call.

1. Data controller

2. What data I process and why

a) Emails you send me

If you write to info@federicanardi.it I process the data you choose to send (name, email address, content of the message) for the sole purpose of replying and handling your request.

• Legal basis: pre-contractual measures taken at your request (art. 6(1)(b) GDPR) and legitimate interest in replying (point (f)).
• Retention: for as long as needed to handle the request and, if a professional relationship follows, for the applicable statutory periods (tax and contractual).

b) Booking the intro call

Bookings run on Zoom Scheduler, an external service by Zoom Communications, Inc. that opens when you click the booking button. There you enter your name and email and pick a time: I receive this data solely to manage the appointment. The processing carried out by Zoom on its platforms is described in Zoom's privacy policy.

• Legal basis: pre-contractual measures taken at your request (art. 6(1)(b) GDPR).
• Retention: for as long as needed to manage the appointment and any follow-up.

c) Browsing data (technical logs)

The site is hosted on Cloudflare, Inc. (Cloudflare Pages). Like any hosting provider, Cloudflare records technical logs such as IP address, browser type and time of visit, in order to serve the site and protect it from attacks and abuse. I do not use this data to identify you or to analyse your behaviour.

• Legal basis: legitimate interest in the security and operation of the site (art. 6(1)(f) GDPR).
• Retention: according to the provider's technical timelines.

3. What I do NOT do

• No profiling cookies, no analytics, no tracking pixels (see the Cookie Policy).
• No automated marketing: you won't get emails from me unless you wrote to me first.
• No selling or sharing of your data with third parties.
• No automated decision-making and no profiling (art. 22 GDPR).
• The site's fonts are hosted on my own servers: no request leaves for Google or other providers when you visit the pages.

4. Recipients of the data

For the sole purposes described above, the data may be processed by:

• Cloudflare, Inc. (site hosting and CDN);
• Zoom Communications, Inc. (booking and running the calls);
• the email service provider I use to manage my email.

These providers process the data as processors or independent controllers under their respective terms of service.

5. Transfers outside the EU

Cloudflare and Zoom are US companies. Data transfers to the United States take place on the basis of the EU-U.S. Data Privacy Framework and/or the standard contractual clauses approved by the European Commission (arts. 45 and 46 GDPR).

6. Your rights

Under arts. 15-22 GDPR you can ask me at any time for: access to your data, rectification, erasure, restriction of processing, portability, and you can object to processing based on legitimate interest. Just write to info@federicanardi.it.

If you believe the processing violates the GDPR you can lodge a complaint with the Italian supervisory authority, the Garante per la protezione dei dati personali (art. 77 GDPR), or with the authority of your country of residence.

7. Updates

This notice may be updated, for example if the site adds new services (newsletter, course sales). The version published on this page, with the date at the top, is the one in force.