Your privacy.

Who handles your data

The data controller is Enrica Beltrando, UGC & Content Creator (VAT no. 04204740049). For any question about your data or to exercise your rights, write to info@enricabeltrando.com.

Development and technical maintenance of the site are entrusted to an external provider, appointed as data processor.

Messages, comments and reviews

Contact form and email

If you write to me through the form or at info@enricabeltrando.com, I process your name, email address and message to reply and, if you ask, to discuss a collaboration. Legal basis: pre-contractual steps you request (Art. 6(1)(b) GDPR) and my legitimate interest in replying (Art. 6(1)(f)). I keep messages for up to 24 months after the last exchange; if a collaboration starts, for its duration and for the periods required by tax rules.

Comments and reviews

If you leave a comment or a review, I process your name (optional), the text and, for reviews, the rating and the service or event it refers to. I publish them after moderation, because you ask for it by sending them (Art. 6(1)(b)). They stay online until you ask for removal; those not approved are deleted periodically.

People in photos and videos

Recognisable people may appear in my content. I use their image to publish photos and videos on this website and on my Instagram and TikTok profiles, as a portfolio of my work. The data comes directly from the shoots.

• Close-ups, private events and promotional content: I publish the image only with the person's consent (Art. 6(1)(a) GDPR and Art. 96 Law 633/1941), also collected through the digital release form.
• People filmed incidentally or in the crowd at public events: the legal basis is my legitimate interest in documenting the event (Art. 6(1)(f)), always respecting the person's dignity. You can object at any time.
• Minors: I don't publish images in which they are recognisable without the consent of both parents.

The content stays published until you ask for removal or withdraw your consent: the procedure is described in the legal notice.

Release form register

If you fill in the release form through the QR code, I record your name, social handle, email (if you give it), date and time, the version of the text you accepted and technical browser data. This proves your consent, as the GDPR requires (Art. 7(1)); legal basis: legal obligation and legitimate interest (Art. 6(1)(c) and (f)).

I keep this information for as long as I use the content and, afterwards, for up to 10 years, so that consent can be proven if challenged. You can withdraw your consent at any time by writing to info@enricabeltrando.com: withdrawal applies from then on and does not make earlier use unlawful.

Technical data, statistics and external content

To run the site, the servers log technical data such as IP address, browser and requested pages, kept for short periods for security purposes (Art. 6(1)(f)).

I use Vercel Web Analytics and Speed Insights for aggregate statistics on visits and performance: they don't use cookies and don't let me identify you (Art. 6(1)(f)).

Some parts of the site load content from other providers, who receive your IP address:

• the map on the Places page, which uses Esri (ArcGIS) maps;
• previews of videos and posts published on YouTube, Vimeo, Instagram or TikTok, where present;
• embedded YouTube, Vimeo and Instagram videos, which however load only if you click to play them. From then on, these services process data as independent controllers under their own policies and may use cookies.

Who receives the data

Data is not sold or disclosed, except what you publish yourself (comments, reviews) and what is described for people in photos and videos. These providers process it on my behalf, as data processors:

• Vercel, for website hosting and statistics;
• Supabase, for the database and file storage, on servers in the European Union (Ireland);
• Resend, for sending and receiving the site's emails;
• my mailbox provider and the provider handling the site's technical maintenance.

Some providers are based in the United States or elsewhere outside the European Union. In these cases the transfer relies on the EU-US adequacy decision (Data Privacy Framework), for certified providers, or on the standard contractual clauses approved by the European Commission.

Your rights

You can ask at any time to access, correct or delete your data, restrict its processing or receive it in a portable format, and you can object to processing based on legitimate interest (Arts. 15-22 GDPR). If you gave consent, you can withdraw it whenever you like. Write to info@enricabeltrando.com: I reply without undue delay and in any case within 30 days.

You also have the right to lodge a complaint with the Italian Data Protection Authority (Garante). I don't use automated decision-making or profiling.

Cookies

This website uses no profiling or statistics cookies. It only uses technical tools:

• authentication cookies for the private area, set only for people who sign in as administrators;
• the browser's local storage for technical features, for example remembering images already loaded or that you have already filled in the release form.

These tools don't require consent (Art. 122 of the Italian Privacy Code).

Embedded YouTube, Vimeo and Instagram videos load only when you click to play them: with that click you accept that the service sets its own cookies, including profiling cookies, under its own rules (YouTube, Vimeo, Instagram). If you don't click, nothing is loaded. You can always delete cookies in your browser settings.

Updates

I may update this policy when the services used by the site or the rules change: the date of the last change is shown at the top.

If the language versions differ, the Italian text prevails.