Privacy Policy

Data Controller

Silvia Salis – translator, editor and teacher Italy VAT number: IT03052750357 Email: silvia@sslanguagestudio.it

Personal data processed

Browsing data

During normal use of the website, the systems required for its operation may collect technical data such as the IP address, date and time of the request, page visited, browser and device type, referrer and server response code. This data is processed to ensure the operation and security of the website, diagnose technical issues and prevent misuse. It is not used for profiling or advertising purposes.

Data submitted through the contact form

The contact form may collect:

• name;
• email address;
• company or organisation, if provided;
• service requested;
• languages involved;
• content of the message;
• page language;
• date and time of submission.

The website does not use a database to store data submitted through the form. The information is transmitted through a server function to the email delivery service and delivered to the Data Controller’s mailbox. Users are asked not to include special categories of personal data or information that is not necessary for assessing their enquiry.

Purposes and legal bases

Personal data is processed to:

• respond to enquiries and assess potential professional assignments, on the basis of steps taken at the data subject’s request prior to entering into a contract, pursuant to Article 6(1)(b) GDPR;
• ensure the operation, security and protection of the website, on the basis of the Data Controller’s legitimate interest, pursuant to Article 6(1)(f) GDPR;
• comply with applicable legal obligations, pursuant to Article 6(1)(c) GDPR;
• establish, exercise or defend legal claims, on the basis of the Data Controller’s legitimate interest.

Data submitted through the contact form is not used for newsletters, marketing or promotional communications.

Provision of data

Providing the information marked as mandatory in the contact form is necessary to submit an enquiry and receive a response. If this information is not provided, the message cannot be sent.

Processing methods and security

Personal data is processed using technical and organisational measures appropriate to the nature of the information and the risks involved. Measures are implemented to prevent unauthorised access, loss, disclosure or misuse. The contact form uses server-side validation, anti-spam protection and security measures designed to limit automated submissions and harmful content.

Recipients and service providers

To the extent necessary to provide their respective services, personal data may be processed by:

• Lovable Labs Incorporated, for the website infrastructure, server functions and connection gateway;
• Cloudflare, for the website’s technical infrastructure, distribution and security;
• Plus Five Five, Inc., through the Resend service, for delivering messages submitted through the contact form;
• OVHcloud, for managing the domain and the Data Controller’s email service.

Depending on the circumstances, these providers act as data processors or independent data controllers for the activities falling within their respective responsibilities. Personal data may also be disclosed to advisers or public authorities where necessary to comply with legal obligations or protect legal rights. Personal data is not sold or made publicly available.

International data transfers

Some providers may process personal data outside the European Economic Area. In such cases, transfers are carried out on the basis of an adequacy decision, the EU–US Data Privacy Framework, Standard Contractual Clauses approved by the European Commission or other safeguards provided for under Articles 44 et seq. GDPR.

Retention

Enquiries submitted through the contact form and the related correspondence are retained for no longer than 24 months after the end of the communication, unless:

• a contractual relationship is established;
• longer retention is required for legal, administrative or tax purposes;
• retention is necessary to establish, exercise or defend legal claims.

Technical data and logs are retained by the service providers for the periods required to ensure the security and operation of their services, in accordance with their respective retention policies. Resend may retain email delivery logs for the limited period established by the service.

Data subject rights

Where provided for by the GDPR, data subjects may request:

• access to their personal data;
• rectification of inaccurate data;
• erasure;
• restriction of processing;
• objection to processing based on legitimate interests;
• data portability, where applicable.

Requests may be sent to silvia@sslanguagestudio.it. The Data Controller may request the information necessary to verify the identity of the person making the request.

Complaints

Data subjects may lodge a complaint with the Italian Data Protection Authority through www.garanteprivacy.it, without prejudice to any other administrative or judicial remedy.

Cookies and tracking technologies

The website does not use cookies, profiling technologies, analytics or other identifiers stored on the user’s device. Further information is available in the Cookie Policy.

Changes to this Privacy Policy

This Privacy Policy may be updated following changes to legislation, the website’s technical configuration or the services used. The updated version will be published on this page together with its revision date.