Robertino Radovix
IT

Privacy notice

Last updated:

Data controller

The controller of personal data collected through this site is Robertino Radovix, documentary photographer, reachable at the email address listed on the Contact page.

Categories of data collected

This site processes only data that the user voluntarily provides by filling in the contact form:

  • name (required field)
  • email address (required field)
  • organization (optional field)
  • inquiry category (curatorial / editorial / workshop / other)
  • message body

Aggregated, anonymous navigation statistics are also collected through Cloudflare Web Analytics: country, browser, operating system, page views, traffic source. These data do not allow identification of the individual user and no cookies are stored on the user’s device. Details in the Cookie notice.

Data collected through the contact form is processed for the following purposes:

  1. Replying to the user’s request (legal basis: performance of pre-contractual measures at the data subject’s request, art. 6(1)(b) GDPR; explicit consent to processing, art. 6(1)(a) GDPR, collected via a mandatory checkbox before submission).
  2. Retaining correspondence to follow up on possible developments of the conversation (legal basis: legitimate interest of the controller in keeping records of professional communications, art. 6(1)(f) GDPR).

Aggregate statistical data collected through Cloudflare Web Analytics is processed to measure site audience and improve content (legal basis: legitimate interest of the controller in understanding the use of the site, art. 6(1)(f) GDPR). As this data is aggregated and anonymous, prior consent is not required.

Retention periods

  • Contact form messages: retained for the time necessary to handle the request and for 12 months thereafter, except where longer retention is justified by professional relationships subsequently established.
  • Aggregate Cloudflare Web Analytics data: retained by Cloudflare under its own terms, in anonymous, aggregated form.

Recipients of the data

Personal data collected may be shared with the following parties, acting as data processors or independent controllers:

  • Cloudflare, Inc. (San Francisco, USA): provider of hosting infrastructure (Cloudflare Pages), form anti-abuse (Cloudflare Turnstile) and aggregate analytics (Cloudflare Web Analytics). Cloudflare participates in the EU-US Data Privacy Framework and applies the European Commission’s Standard Contractual Clauses for non-EU transfers.
  • Resend, Inc. (San Francisco, USA): transactional email provider, used to deliver form messages to the controller and confirmation emails to the user. Resend applies Standard Contractual Clauses for non-EU transfers.

Data is never sold, traded or disclosed to other third parties for marketing or commercial profiling purposes.

Transfers outside the EU

The providers listed above may process data on servers located outside the European Union, in particular in the United States. Such transfers take place on the basis of adequate safeguards under articles 45 and 46 GDPR (Standard Contractual Clauses adopted by the European Commission, and any current adequacy decisions in force).

Data subject rights

At any time, the user has the right to:

  • access their personal data (art. 15 GDPR);
  • rectify inaccurate or incomplete data (art. 16 GDPR);
  • request erasure of their data (art. 17 GDPR);
  • request restriction of processing (art. 18 GDPR);
  • receive their data in a structured, commonly used format and transmit it to another controller (portability, art. 20 GDPR);
  • object to processing (art. 21 GDPR);
  • withdraw consent at any time, without affecting the lawfulness of processing carried out before withdrawal (art. 7(3) GDPR).

To exercise these rights, simply write to the controller via the Contact page, clearly stating the request. The controller will reply within 30 days of receipt.

Right to lodge a complaint

The user always has the right to lodge a complaint with the competent supervisory authority - in Italy, the Italian Data Protection Authority (Garante per la protezione dei dati personali, garanteprivacy.it).

Changes to this notice

Material changes to this notice will be published on this page and the date at the top will be updated accordingly. Users are invited to review this document periodically.