Skip to main content

Federico Cimbelli

Federico Cimbelli

Privacy Policy

Information on the processing of personal data pursuant to Article 13 of Regulation (EU) 2016/679

Last updated: 28 September 2026

This Privacy Policy describes how the personal data of users visiting www.cimbelli.it is processed.

1. Data Controller

The Data Controller is:
Federico Cimbelli
E-mail: federico.cimbelli@gmail.com

For any request concerning the processing of personal data or the exercise of rights provided for under Regulation (EU) 2016/679 (“GDPR”), users may contact the Data Controller at the e-mail address indicated above.

2. Data processed during browsing

During the normal operation of the website, the IT systems and software procedures used for its operation may acquire certain data relating to the user’s browsing activity.

Such information may include, by way of example:

  • IP address;
  • date and time of the request;
  • address of the requested resource;
  • information relating to the browser and device used;
  • server response code;
  • other parameters relating to the user’s operating system and IT environment.

This data is processed to the extent necessary to ensure the proper operation, security and delivery of the website.

The legal basis for the processing is the legitimate interest of the Data Controller in ensuring the operation and security of the website, pursuant to Article 6(1)(f) of the GDPR.

Technical data and any server logs are retained for the period strictly necessary for the purposes described above, except where longer retention is required for security purposes, the investigation of unlawful activities or compliance with legal obligations.

3. Contact by e-mail

The website provides an e-mail address through which users may contact the Data Controller directly.

The voluntary sending of a message entails the processing of the sender’s e-mail address and any additional personal data voluntarily included in the communication.

Such data is used exclusively to respond to the request and manage the related communication.

The legal basis for the processing is the performance of measures taken at the request of the data subject pursuant to Article 6(1)(b) of the GDPR or, depending on the nature of the communication, the legitimate interest of the Data Controller pursuant to Article 6(1)(f) of the GDPR.

The data will be retained for the time necessary to handle the request and subsequently to the extent necessary to comply with any legal obligations or protect the rights of the Data Controller.

4. Cookies and similar technologies

The website uses only technical tools that are necessary or functional to the proper provision of its services.

In particular, the website uses the technical cookie pll_language, associated with the Polylang multilingual system, for the purpose of remembering the language selected by the user.

For further information, please refer to the Cookie Policy.

The website does not currently use profiling tools, behavioural advertising systems or web analytics services such as Google Analytics.

Technical cookies and other technical identifiers do not require the user’s consent, without prejudice to the obligation to provide appropriate information regarding their use.

5. Recipients of personal data

Personal data may be processed by parties providing technical services necessary for the operation of the website, such as hosting and web infrastructure providers, within the limits of their respective functions and in accordance with applicable legislation.

Personal data is not disseminated.

This is without prejudice to the possibility of disclosing data to the competent authorities where required by law or necessary to protect the rights of the Data Controller.

6. Data transfers

Any transfer of personal data to countries outside the European Economic Area, where arising from technical services used for the operation of the website, will be carried out in compliance with the conditions and safeguards provided for by Regulation (EU) 2016/679.

7. Rights of the data subject

Where provided for by the GDPR, data subjects may exercise the rights recognised under Articles 15 et seq. of the Regulation, including the right to:

  • obtain confirmation as to whether or not personal data concerning them is being processed and access such data;
  • request the rectification of inaccurate data;
  • request the erasure of personal data where the applicable conditions are met;
  • request restriction of processing;
  • object to processing in the cases provided for by law;
  • exercise the right to data portability, where applicable.

Requests may be sent to federico.cimbelli@gmail.com.

Data subjects also have the right to lodge a complaint with the competent data protection supervisory authority if they believe that the processing of their personal data infringes applicable data protection legislation.

8. Changes to this Privacy Policy

This Privacy Policy may be updated in the event of changes to the website, the services used or applicable legislation.

Users are therefore advised to review this page periodically.