PRIVACY
Personal data processing notice pursuant to Articles 13-14 of Regulation (EU) 2016/679 (GDPR).
1. Data controller
The data controller is:
Yuri Giglio
VAT number (P.IVA): 01625090707
Email: fotografia [at] yurigiglioph.com
The controller has not appointed a Data Protection Officer (DPO), as the conditions under Article 37 GDPR do not apply.
2. What data we collect
By filling out the form on the Contact page, we collect the data you choose to provide:
- Identification and contact data: full name, email address;
- Optional data: company/publication and service of interest;
- Message content: the information you decide to include in the text.
While browsing, and only with your consent, navigation data is also processed in aggregated form via Google Analytics (see §7 and the Cookie Policy). The contact form is protected by Google reCAPTCHA, which processes technical navigation data for security purposes (see §6).
Providing the data marked as mandatory in the form is necessary to respond to your request: without it, we will not be able to reply. Providing the other data is optional.
3. Why we process your data (purposes and legal bases)
| Purpose | Legal basis | Retention |
|---|---|---|
| Responding to requests for information, quotes or availability sent via the form | Consent of the data subject and performance of pre-contractual measures at their request (Art. 6.1.a and 6.1.b GDPR) | For the time needed to handle the request and any resulting contacts, and in any case no longer than 24 months from the last contact, unless a contractual relationship is established |
| Form security and prevention of spam and automated submissions (reCAPTCHA) | Legitimate interest of the controller in protecting the site from abuse (Art. 6.1.f GDPR) | According to Google's policies (see §6) |
| Aggregated visit statistics (Google Analytics) | Consent of the data subject (Art. 6.1.a GDPR) | Up to 14 months for Analytics data; consent renewed within 6-13 months |
4. Who we share your data with
Data is neither disclosed nor sold to third parties for commercial purposes. It may be processed, on our behalf and as data processors (Art. 28 GDPR) or independent controllers, by the following parties:
- Aruba S.p.A. — hosting and email provider through which the form message is delivered (servers in the European Union);
- Google Ireland Ltd / Google LLC — provider of the reCAPTCHA and Google Analytics services (see §5 and §6).
Data may also be disclosed to public authorities in compliance with legal obligations.
5. Transfer of data outside the European Union
The use of Google services (reCAPTCHA and Google Analytics) may involve the transfer of data to the United States. Such transfers take place under the safeguards provided by the GDPR (Chapter V): Google LLC adheres to the EU-U.S. Data Privacy Framework and adopts the Standard Contractual Clauses approved by the European Commission. No non-EU transfer occurs for data submitted through the form, which is handled on Aruba infrastructure within the European Union.
6. Google reCAPTCHA
The contact form is protected by Google reCAPTCHA (v3), an anti-abuse service provided by Google that analyzes browsing behavior to distinguish human users from bots. The service, loaded only on the Contact page, may collect IP address and device/browser data and assigns an automated score to the interaction solely to filter suspicious submissions: this score produces no decision with legal effects on the data subject and does not affect the handling of a legitimate request. Learn more: Google Privacy Policy and Terms of Service.
7. Google Analytics
This site uses Google Analytics 4 for aggregated visit statistics, with IP address anonymization. This service is loaded only after explicit consent, given via the cookie banner. Consent can be withdrawn at any time from the Cookie Policy. Details of the individual cookies are provided in the Cookie Policy.
8. How we protect your data
We adopt appropriate technical and organizational measures to protect data from unauthorized access, loss or disclosure: encrypted connection (HTTPS), protected form transmission and restricted access to the controller's mailbox. Form data is not stored in a database on the site, but delivered by email.
9. Your rights
At any time you may exercise, by writing to fotografia [at] yurigiglioph.com, the rights provided for in Articles 15-22 GDPR:
- Access: obtain confirmation and a copy of the data processed;
- Rectification: correct inaccurate or incomplete data;
- Erasure: request removal of the data ("right to be forgotten");
- Restriction: restrict processing in certain cases;
- Portability: receive the data in a structured, readable format;
- Objection: object to processing based on legitimate interest;
- Withdrawal of consent: at any time, without affecting the lawfulness of prior processing.
We will respond to your request without undue delay and in any case within one month. You also have the right to lodge a complaint with the supervisory authority: the Italian Data Protection Authority (Garante).
10. Changes to this notice
This notice may be updated over time to reflect changes in law or in the site. Updated versions will be published on this page with the date of the last update. Last updated: July 7, 2026.