Privacy Policy

1. Data controller

The controller of the data collected through the website www.paolapalmesano.it is Paola Palmesano. For any request concerning your personal data you can write to: paola@ubloom.it.

2. What data we process and why

a) Newsletter subscription. If you fill in the subscription form we collect your name and email address, which we use exclusively to send you the newsletter and updates on Paola Palmesano's activities (programs, events, content). The data is managed through the ActiveCampaign marketing platform. Legal basis: your consent, given by ticking the dedicated checkbox. You can withdraw it at any time via the unsubscribe link included in every email or by writing to the controller.

b) Browsing data and statistics. The website uses Google Analytics 4 to collect aggregate statistics on browsing (pages visited, source, device). This data is not used to identify you. Legal basis: the controller's legitimate interest in measuring and improving the website. For details on cookies see the Cookie Policy.

c) Booking a call. The booking buttons redirect to Calendly, an external service with its own privacy notice: the data you enter there (name, email, chosen time slot) is processed by Calendly LLC and communicated to the controller to manage the requested appointment.

d) Technical logs. The website is hosted on Netlify, which collects technical logs (e.g. IP addresses) necessary for the security and operation of the infrastructure.

3. Where your data goes

Newsletter data is managed through ActiveCampaign LLC (marketing platform, with Make.com as the technical tool transmitting the form); statistical data through Google Ireland Ltd. Some providers are based in the United States: the transfer takes place on the basis of the safeguards provided by the GDPR (EU-US Data Privacy Framework adequacy decision or standard contractual clauses). Data is not sold or transferred to third parties for their own marketing purposes.

4. How long we keep it

Newsletter data is kept for as long as you remain subscribed; when consent is withdrawn it is removed from the active lists. Statistical data is kept for the standard Google Analytics 4 retention period (14 months). Technical logs are kept only for as long as strictly necessary for security.

5. Your rights

Pursuant to Articles 15-22 of the GDPR you have the right to obtain access to your data, rectification, erasure, restriction of processing, portability, and to object to the processing. You can exercise these rights by writing to paola@ubloom.it. If you believe the processing violates the law, you can lodge a complaint with the Italian Data Protection Authority, the Garante per la protezione dei dati personali (www.garanteprivacy.it).

6. Updates

This notice may be updated: the version published on this page, with the date at the top, is the one in force.