What is the Privacy and Cookie Policy?

This Privacy & Cookie Policy describes how we process the personal data of users who visit the website. www.mattiaurlotti.com. This constitutes information provided pursuant to articles 13 and 14 of the Regulation (EU) 2016/679 (“GDPR”) both for users browsing the site and for those interacting with the services offered, including subscribing to the newsletter.

This policy does not apply to third-party websites accessible via links.

Data controller

The Data Controller is:

Mattia Urlotti
E-mail: info@mattiaurlotti.com

Categories of Processed Data and Purposes of Processing

1. Browsing and Statistical Data (Independent Analytics)

The site collects technical data necessary for navigation and aggregate statistical data.

• Platform: Independent Analytics.
• Nature of data: The plugin does not use cookies and collects no personally identifiable information (IP addresses are anonymized and processed solely for statistical purposes within the site's local server).
• Legal basis: Legitimate interest of the Data Controller (Art. 6(1)(f) GDPR) to optimize website performance.
• Retention period: Server log data is retained for a maximum of 30 days.

2. Cookie

The site uses exclusively technical cookies necessary for correct functioning (e.g. WordPress).

• No profiling or third-party tracking cookies (such as Google Analytics or Meta Pixel) is installed.
• Pursuant to the Italian Data Protection Authority (Garante Privacy) Guidelines of 10 June 2021, no prior consent banner is required for this site, as no invasive or commercial tracking is performed. The site uses solely technical cookies essential for its proper functioning (e.g. WordPress).

3. Newsletter (currently in development)

Subscribing to the newsletter entails the processing of the user's email address.

• Platform: MailPoet. The data is stored in the site's database or on secure servers within the European Union.
• Legal basis: Consent of the Data Subject (Art. 6(1)(a) GDPR).
• Retention period: Data is retained until consent is revoked (unsubscription), which can be executed at any time via the link provided in the footer of every email.

4. Contacts

The optional and voluntary sending of electronic mail to the addresses belonging to the domain @mattiaurlotti.com This involves the acquisition of the sender's address and any data entered to respond to requests.

• Legal basis: Performance of pre-contractual measures or legitimate interest of the Data Controller (Art. 6(1)(b)(f) GDPR).
• Retention period: Strictly for the time required to process and fulfill the user's inquiry.

Place of Processing – Authorized Personnel – Recipients

The processing is carried out at the Data Controller's headquarters and via IT infrastructures located in Italy.

Data Transfer and Dissemination: Personal data is neither disseminated to unspecified parties nor transferred outside the European Economic Area (EEA).

Hosting: The website is hosted in Italy by an infrastructure provider acting as Data Processor pursuant to Art. 28 GDPR.

Recipients: Data may be processed by formally designated external data processors providing technical and IT support (hosting, maintenance, newsletter distribution).

Rights of Data Subjects

Data subjects may exercise the rights set forth in Articles 15–22 of the GDPR:

• Right of access, rectification, erasure (right to be forgotten), restriction of processing, and data portability.
• Right to object to processing and to withdraw consent at any time.
• Right to lodge a complaint with the supervisory authority (Italian Data Protection Authority – www.garanteprivacy.it).

To exercise your statutory rights, contact: info@mattiaurlotti.com.

This policy may be updated in the event of regulatory, technical, or organizational changes.
Users are invited to consult it periodically.

Last updated: August 23, 2026