Privacy, cookies and GDPR

Privacy notice for the website and related services.

This page explains which personal data may be processed while browsing the website, using third-party components and sending privacy-related communications to the controller.

Controller details

  • Last update: 2026-04-02
  • Data controller: Michele Summo
  • Privacy/GDPR contact: gdpr@michelesummo.it
  • Scope: website browsing, technical management, privacy preferences, social/advertising components and privacy/GDPR communications.

Categories of processed data

  • Technical browsing and security data: IP address, user agent, request date and time, requested resources and technical data required to keep the website running and protected.
  • Data related to content usage: views, preferences, searches, filters, tags or other interactions required to provide the service and understand how it is used.
  • Data related to cookies and tracking tools, including tools managed by third parties through the consent banner/CMP or embedded external components.
  • Data possibly contained in messages voluntarily sent to the privacy/GDPR email address, such as contact details and message content.
  • Data that may be processed by third-party platforms linked from or embedded in the website, according to their own privacy notices.

Purposes and legal bases

  • Website delivery, security and service continuity. Legal basis: the controller's legitimate interest in keeping the website available, protected and functional.
  • Management of technical preferences, internal metrics and user-requested functions. Legal basis: performance of the requested service and, where applicable, legitimate interest.
  • Management of cookies, advertising and non-essential third-party tools. Legal basis: user consent, where required by applicable law and managed through the consent system.
  • Handling privacy and GDPR requests sent to the controller. Legal basis: compliance with data protection obligations and legitimate interest in properly managing such communications.

Whether providing data is mandatory

  • Technical data strictly required to operate the website are necessary in order to browse and use the service.
  • Consent for non-essential cookies or tracking tools is optional and can be changed at any time.
  • Data voluntarily sent by email are necessary to identify the request and provide a proper response.

Recipients and parties involved in processing

Data may be processed by the website owner and by technical suppliers strictly involved in hosting, maintenance, security and service delivery. When the user interacts with third-party components or content, the relevant providers may process data according to their own privacy and cookie policies.

Transfers to third countries

Some third-party providers integrated into the website may process data outside the EEA/EU. In such cases the processing is governed by the conditions, legal bases and safeguards described by the relevant providers.

Retention periods

  • Technical, statistical or preference data stored internally are kept for the time strictly necessary for the purposes described above and, where the current site logic applies, for an indicative maximum period of up to 3 years.
  • Data contained in privacy/GDPR communications voluntarily sent by email are kept for the time needed to manage the request, document its outcome and comply with any legal obligations.
  • Cookies and third-party tools may also follow the retention periods defined by the relevant providers and the user's browser/device settings.

Data subject rights

Data subjects may request access, rectification, erasure, restriction of processing, objection, data portability where applicable, and withdrawal of consent for consent-based processing. They also have the right to lodge a complaint with the competent data protection authority.

Consent management and GDPR contacts

Privacy and cookie settings

For privacy, cookie and GDPR requests: gdpr@michelesummo.it

Main third-party policies

This notice complements the consent management system and should be read together with any third-party privacy notices activated by the user while browsing the website.