Privacy Policy

Data controller

The controller of personal data collected through this website is Michele Cassata, Via Barone 52, 90023 Ciminna (PA), Italy, VAT no. 04844700825.

For any matter concerning your data you may write to info@michelecassata.it or call +39 333 455 6004.

What data we collect

This website collects personal data in two cases: when you voluntarily fill in the contact form and, only if you give consent in the cookie banner, through Google Analytics visit statistics. For the form, the data requested are your name, email address, type of enquiry and the text of your message. If you reach the form from the catalogue, your message may also contain references to the works you selected.

If you decline consent, or ignore the banner, no data about your browsing is collected. The site contains no advertising, profiling pixels or tracking tools other than those described in the section on statistics.

As with any website, the hosting provider's server automatically records certain technical connection data (IP address, date and time of the request, page requested, browser type). These logs serve security and the correct operation of the service only.

Why we process it and on what legal basis

Form data is processed in order to answer your enquiry and, where it concerns a commission, to handle pre-contractual negotiations. The legal basis is the performance of pre-contractual measures taken at your request, under Article 6(1)(b) of Regulation (EU) 2016/679.

Technical server logs are processed on the basis of the controller's legitimate interest in ensuring the security of the infrastructure, under Article 6(1)(f).

Google Analytics statistical data is processed only if you consent, under Article 6(1)(a) of Regulation (EU) 2016/679 and Article 122 of the Italian Privacy Code.

Providing your data is optional, but without a name, an email address and a message we simply cannot reply.

How it is processed

The content of the form is forwarded by email to info@michelecassata.it and handled there as ordinary correspondence. The website keeps no copy of messages in any archive or database.

To counter automated unsolicited messages, the system performs some technical checks on the request and temporarily stores, in hashed form and for no more than one hour, a reference to the originating IP address, for the sole purpose of limiting repeated submissions. This data is not used for any other purpose.

Processing is carried out by electronic means, with security measures appropriate to prevent unauthorised access, loss or disclosure of data.

Visit statistics (Google Analytics)

With your consent the site uses Google Analytics 4, a service provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland). The tool loads only after you press “Accept” in the banner: until then, no Google server is contacted.

It records the pages visited, the duration and number of visits, the type of device, browser and operating system, the approximate geographic origin and a random identifier stored in a cookie. Google Analytics 4 does not log or store full IP addresses. We do not use Google's advertising features, profiling, or linking with other Google services or accounts.

The purpose is to know, in aggregate form, how many people visit the site and which pages they read, in order to improve it. You can change your mind at any time using the “Cookie preferences” link at the bottom of every page: withdrawing consent does not affect the lawfulness of processing carried out before. If you do not consent, the site works exactly the same.

Google Analytics data is kept for 14 months and then deleted automatically.

Google may also process data in the United States. The transfer relies on the European Commission's adequacy decision of 10 July 2023 on the EU-US Data Privacy Framework and on the standard contractual clauses provided in Google's terms. More information is available at policies.google.com/privacy.

Who it is shared with

Data is never disseminated, sold or transferred to third parties for commercial purposes.

It may be accessed, as a processor under Article 28 GDPR, by the hosting and email provider Aruba S.p.A. (Via San Clemente 53, 24036 Ponte San Pietro — BG, Italy), which hosts the website and the mailbox.

Form data is stored on servers located within the European Union and no transfers to third countries take place for it. For Google Analytics statistical data, processed only with your consent, Google Ireland Limited acts as processor: the information in the section on visit statistics applies.

How long we keep it

Messages received through the form are kept in the mailbox for as long as is necessary to handle the enquiry and, where a commission follows, for the duration of the relationship and the subsequent periods required by tax and civil law.

Technical anti-spam references are deleted automatically within one hour. Server connection logs follow the hosting provider's retention policy. Google Analytics statistical data is kept for 14 months. The choice you make in the cookie banner is remembered for six months, after which the banner will be shown again.

Your rights

At any time you may request access to your data, its rectification or erasure, restriction of processing, portability in a machine-readable format, or object to processing, under Articles 15 to 22 of Regulation (EU) 2016/679.

To exercise these rights simply write to info@michelecassata.it. We will reply within one month of your request.

If you believe the processing of your data infringes the law, you have the right to lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it).

Changes to this notice

Any updates will be published on this page together with the revision date. We invite you to consult it from time to time.