Studio Cravero ConsultingPrivacy notice
Information under Articles 13 and 14 GDPR · last updated 29 October 2026. The Italian version at /privacy.html is the full reference text.
1. Controller
Studio Cravero Consulting (Dr Pietro Cravero), Piazza Fiume 5B, 07100 Sassari, Italy · info@studiocravero.eu · certified e-mail (PEC): info.studiocravero@pec.it
2. What data, why, on what basis, for how long
| Purpose | Legal basis | Data | Retention |
|---|---|---|---|
| Replying to contact requests and preparing quotes | Pre-contractual steps (Art. 6(1)(b)) | Name, email, company, country, content of the request | 24 months from the last useful contact |
| Providing services under a contract | Contract (Art. 6(1)(b)) | Contact persons’ details and information needed for the service | Duration of the contract plus legal retention periods |
| Accounting and invoicing | Legal obligation (Art. 6(1)(c)) | Tax and billing data | 10 years for accounting records |
| Website security | Legitimate interest (Art. 6(1)(f)) | Technical logs, IP address | As needed for security |
Name, email and the content of your request are needed to reply; the other fields are optional. No automated decisions or profiling take place.
3. Recipients and transfers
Data is processed by service providers acting as processors under Art. 28 GDPR: the website host, which also receives the contact form (Netlify, Inc., United States, which filters spam with the Akismet service of Automattic Inc., United States), the email provider and document tools. The website host is based in the United States, so a transfer outside the EEA takes place at every visit and every form submission. The safeguard is the EU-US Data Privacy Framework adequacy decision of 10 July 2023 for certified providers, and the standard contractual clauses for the others. When I work with a collaborating consultant for meetings in English, they act under a written agreement and confidentiality obligations.
4. Cookies
The site does not use analytics or advertising cookies. Details are in the cookie policy (Italian).
5. Your rights
You can request access, rectification, erasure, restriction, portability and object to processing (Arts. 15-22 GDPR), and withdraw consent at any time, by writing to the addresses above. You may lodge a complaint with the Italian supervisory authority (Garante per la protezione dei dati personali) or with the authority of the country where you live or work.