Privacy policy

1. Data controller

The controller for data processing on this website is Barbarossa Digital Marketing (details in the legal notice). E-mail: info@barbarossa-digitalmarketing.it.

2. What data I process

  • Contact form: name, e-mail address and the content of your message. I need these to handle your enquiry and reply.
  • Server and access data: when you visit the site, technically necessary data is processed (e.g. anonymised or shortened IP address, date and time, page requested, browser type) to deliver the site and keep it secure.
  • Spam protection (Cloudflare Turnstile): to protect the form from automated submissions I use Cloudflare Turnstile, which may send technical data to Cloudflare. Turnstile is a technically necessary security measure and does not require consent.
  • Analytics (Umami): for anonymous statistics I use Umami Analytics, self-hosted on my own infrastructure. Umami works without cookies and without personal profiles and only records aggregated values. The data stays on my own infrastructure and is not shared with third parties.
  • Cookies: only technically necessary tools and cookieless, privacy-friendly analytics are used. No profiling or marketing cookies are set, so a cookie consent banner is not required. If consent-based services are added later, a consent banner will be added.
  • Handling your enquiry via the form: Art. 6(1)(b) GDPR (pre-contractual step) or (f) (legitimate interest in communication).
  • Delivery and security of the site, spam protection: Art. 6(1)(f) GDPR.
  • Anonymous analytics: Art. 6(1)(f) GDPR.

4. Recipients / processors

  • Cloudflare, Inc. (website hosting via Cloudflare Pages, form processing, Turnstile), possibly processing outside the EU; appropriate safeguards are in place for this transfer (EU Standard Contractual Clauses or the EU-US Data Privacy Framework).
  • SiteGround (e-mail delivery).

Analytics (Umami) is self-hosted; no external provider is involved.

5. Transfers outside the EU

Where data is sent to providers outside the EU/EEA (e.g. Cloudflare), this is based on appropriate safeguards (EU Standard Contractual Clauses or the EU-US Data Privacy Framework).

6. Storage period

I keep contact-form enquiries as long as needed to handle them and any follow-up questions, but no longer than 24 months, unless legal retention periods apply. Server logs are deleted or anonymised after a short time.

7. Your rights

You have the right to access, rectification, erasure, restriction, data portability and objection. You can withdraw any consent at any time with effect for the future. You also have the right to lodge a complaint with a supervisory authority, in Italy the Garante per la protezione dei dati personali (www.garanteprivacy.it). For any request, write to: info@barbarossa-digitalmarketing.it.

8. Obligation to provide data

Providing the data in the contact form is voluntary. Without your name, e-mail and message, though, I cannot handle your enquiry.

Last updated: 9 June 2026