Francesco Sandirocco

Privacy Policy

1. Data Controller

The Data Controller is:

Francesco Sandirocco
Website: www.francesco.sandirocco.it

2. Types of Data Collected

This website may collect the following types of personal data:

  • Browsing data (IP address, browser type, access times, pages visited);
  • Data voluntarily provided by the user (via contact forms or newsletter subscription), such as name, email address, and message;
  • Cookies and similar technologies (see the “Cookie Policy” section).

3. Purpose of Data Processing

Personal data are processed for the following purposes:

  • To respond to information or contact requests submitted through the website;
  • To send communications regarding events, exhibitions, or artistic updates (subject to explicit consent);
  • To improve the browsing experience and website functionality;
  • To comply with legal obligations or lawful requests by authorities.

4. Legal Basis for Processing

Data processing is carried out on the following legal grounds:

  • The data subject’s consent (Art. 6(1)(a) GDPR);
  • The performance of pre-contractual measures requested by the user (Art. 6(1)(b) GDPR);
  • Compliance with legal obligations (Art. 6(1)(c) GDPR).

5. Methods of Processing

Data are processed using electronic and/or telematic tools, strictly related to the stated purposes, and appropriate security measures are adopted to prevent unauthorized access, disclosure, alteration, or destruction of personal data.

6. Data Retention

Personal data will be retained for as long as necessary to achieve the purposes for which they were collected, and in any case no longer than 24 months from the last interaction, unless otherwise required by law.

7. Data Disclosure and Sharing

Personal data are not publicly disclosed.

They may be shared with third parties providing technical or administrative services to the website (e.g., hosting providers, email service providers), appointed as Data Processors pursuant to Art. 28 GDPR.

8. International Data Transfers

Personal data are not transferred outside the European Economic Area (EEA).
If necessary, any transfer will be carried out in compliance with Articles 44 et seq. of the GDPR.

9. Data Subject Rights

At any time, users may exercise their rights under Articles 15–22 of the GDPR, including:

  • Right of access to their personal data;
  • Right to rectification or erasure (“right to be forgotten”);
  • Right to restriction or objection to processing;
  • Right to data portability;
  • Right to withdraw consent at any time;
  • Right to lodge a complaint with the competent Data Protection Authority.

To exercise these rights, users may contact the Data Controller via the contact form available on the website.

10. Cookie Policy

This website uses technical cookies and, subject to consent, analytics or third-party cookies (e.g., Google Analytics, social media platforms).

For detailed information, please refer to the dedicated Cookie Policy.

11. Changes to this Privacy Policy

The Data Controller reserves the right to modify or update this Privacy Policy at any time.
Any changes will be published on this page with an updated revision date.

Last updated: October 17, 2025