1. Data controller
Ing. Lorenzo Canali, via Giuseppe Verdi 19, 38122 Trento (TN), Italy, VAT no. IT02400170227, registered with the Order of Engineers of the Province of Trento (Ordine degli Ingegneri della Provincia di Trento), section A, no. 3326.
Email: info@lorenzocanali.it · Phone: +39 349 073 6182
2. What data I process
- Data you send me by email, phone or WhatsApp, or through the contact forms on the Italian pages of this site (name, phone, email if provided, type of project, location of the property, description of the project).
- Browsing data: IP address, browser and device type, pages visited, date and time, referring site. They are collected automatically by the systems that run the site and, only with your consent, by the statistics tool (see the Cookie Policy).
- Data on where a contact comes from: the site remembers, in your browser’s session storage and without cookies, the first page you visited and the channel you came from (for example a Google search or a campaign). When you click the phone number, the email address or the WhatsApp button, the site transmits the button clicked, the page you are on, the first page visited and the channel, with no name or other data that directly identifies you.
Please do not include special categories of data (for example health data) unless they are necessary for your request.
3. Why I process them and on what legal basis
| Purpose | Legal basis | Retention |
|---|---|---|
| Replying to your request for information, advice or a quote | Pre-contractual measures taken at your request (Art. 6.1.b GDPR) | 24 months from the last contact, unless an engagement follows |
| Managing a professional engagement and tax and legal obligations | Contract (Art. 6.1.b) and legal obligation (Art. 6.1.c) | 10 years |
| Understanding which pages and channels contacts come from, to improve the site | Legitimate interest of the controller (Art. 6.1.f), limited to clicks on contact buttons | 24 months |
| Visit statistics (Google Analytics) | Consent (Art. 6.1.a), which you can withdraw at any time | See Cookie Policy |
| Site security and prevention of abuse and spam | Legitimate interest (Art. 6.1.f) | As long as strictly necessary |
4. Who receives the data
Data are never sold or disclosed. They may be processed, only for the purposes above, by the following providers, acting on behalf of the controller:
- Aruba S.p.A. – hosting of the website and email (Italy): requests sent through the forms reach me by email;
- Ad Astra Strategic Advisors LLC – marketing consultant and technical manager of the site, which through the Amber platform receives the count of clicks on contact buttons together with the data on where the visit came from. To recognise repeated submissions and abuse, for each click it also keeps an unreadable fingerprint of the IP address, calculated with a secret key: the address itself is not stored. Data are stored on servers in the European Union (Ireland), with the providers Supabase and Vercel;
- Google Ireland Ltd. – Google Analytics, only with your consent and for statistical purposes only.
If you choose to write to me on WhatsApp, your data are also processed by WhatsApp Ireland Ltd. under its own privacy policy.
5. Transfers outside the European Union
Data collected through the Amber platform are stored on servers in the European Union (Ireland). Ad Astra Strategic Advisors LLC is a US company whose team also works from the United Arab Emirates: it accesses only the data described in section 4.
Google may process data in the United States: transfers take place on the basis of the EU-U.S. Data Privacy Framework, which Google has joined, or of the Standard Contractual Clauses approved by the European Commission (Art. 46 GDPR).
6. Your rights
You can ask at any time for access to your data, rectification, erasure, restriction of processing and portability, and you can object to processing based on legitimate interest (Arts. 15-22 GDPR). You can withdraw your consent to statistics at any time from the “Cookie preferences” link at the bottom of the site, without affecting processing already carried out. To exercise your rights write to info@lorenzocanali.it.
You also have the right to lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it).
7. Whether providing data is mandatory
In the forms, name and phone number are required: without them I cannot call you back. The other fields are optional.
8. Changes
This policy may be updated. The version in force is always the one published on this page, with the date of the last update shown at the top.