Privacy and cookie notice
Notice under Article 13 of Regulation (EU) 2016/679 (GDPR) for visitors to the Velcoro website and people who use its contact form.
1. Data controller
The data controller is Lorenzo Campanelli, responsible for the Velcoro editorial project. Requests concerning personal data can be sent to velcoro17@gmail.com.
2. Personal data processed
- Navigation and security data: IP address, date and time, requested resource, browser/device information and technical logs normally generated by the hosting infrastructure.
- Contact data: name, email address, message and any other personal information voluntarily included in the message.
- Privacy preferences: the necessary local record of your choice concerning external media.
- External media data: technical connection data sent to Google/YouTube only after external content has been enabled or an external link has been followed.
3. Purposes and legal bases
- Operating and protecting the website: technical delivery, security, prevention of abuse and troubleshooting, based on the controller’s legitimate interest (Article 6(1)(f) GDPR).
- Replying to messages: handling enquiries and taking steps requested by the sender, based on Article 6(1)(b) GDPR and, where applicable, the legitimate interest in managing correspondence (Article 6(1)(f) GDPR).
- Loading external YouTube content: only with your consent (Article 6(1)(a) GDPR), which can be withdrawn at any time through Cookie preferences.
Velcoro does not use the data collected through this website for advertising, newsletters or profiling.
4. Mandatory and optional information
Navigation data are generated automatically when the website is used. Contact-form fields marked as required are needed to send and answer a usable request; without them the message cannot be processed. The acknowledgement checkbox confirms that this notice was made available: it is not consent to marketing. Enabling external media is optional.
5. Processing methods and security
Data are processed electronically only for the stated purposes, using measures intended to limit unauthorised access, alteration, loss or disclosure. Access is limited to the controller and technical providers that need it to operate their services.
6. Recipients and service providers
Data may be processed by the website hosting and security provider and, when contact-form delivery is enabled, by the email delivery and mailbox providers acting according to their roles under data-protection law. Data are not sold or disseminated. They may be disclosed to public authorities only where required by law.
7. Transfers outside the EEA
Some technical providers may process data outside the European Economic Area. In those cases, transfers take place under an adequacy decision or other safeguards permitted by Chapter V GDPR, according to the provider’s applicable terms. Google/YouTube receives connection data only after external media has been enabled or an external link opened.
8. Retention periods
- Contact requests: for the time needed to reply and ordinarily no longer than 12 months, unless further retention is required to establish, exercise or defend legal claims.
- Technical and security logs: for the periods set by the hosting provider and only as necessary for operation and security.
- Privacy preference: in the browser’s local storage until it is changed or deleted by the user.
9. Cookies, local storage and external content
Velcoro does not currently install advertising or analytics cookies. Necessary local storage remembers your privacy choice. YouTube players remain blocked until external media is enabled; that preference can be changed at any time. When the website is access-restricted, the hosting platform may use strictly necessary authentication and security cookies.
10. Your rights
Where applicable, you may request access, rectification, erasure, restriction, portability or objection under Articles 15–22 GDPR. You may withdraw consent for future processing at any time without affecting earlier lawful processing. Send requests to velcoro17@gmail.com.
11. Complaints and automated decisions
You may lodge a complaint with the Italian Data Protection Authority or the authority competent for your habitual residence. Information and forms are available on the Authority’s website. No automated decision-making or profiling is carried out through this website.
This notice will be updated before introducing analytics, advertising, ecommerce, newsletters or other services that change the processing described above.