Privacy Policy

Last Updated: July 2026

This Privacy Policy describes how your personal data is collected, used, and protected when you visit, interact with, or submit information through this website ([https://lalulavivenzi.art](https://lalulavivenzi.art)).

This document is provided in compliance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data (General Data Protection Regulation – GDPR).

1. Data Controller (Titolare del Trattamento)

The Data Controller responsible for the processing of your personal data on this website is:

  • Artist Name: Paola Vivenzi Carrasco (Lalula Vivenzi)
  • Website: [https://lalulavivenzi.art](https://lalulavivenzi.art)
  • Contact Email: vivenzi.lalula@gmail.com

2. Types of Data Collected

We collect several types of information from and about users of our website, including:

A. Data Provided Directly by You

  • Contact & Communication Data: When you send an email, fill out a contact form, or request information regarding artistic projects, artwork inquiries, or collaborations, we collect your name, email address, and the content of your message.
  • Newsletter & Subscription Data: If you subscribe to updates, we collect your email address and name.

B. Data Collected Automatically (Technical & Usage Data)

  • Browsing Data: IP addresses, browser type and version, operating system, referral source, pages visited, time spent on pages, and network information. This data is collected automatically via standard server logs and cookies to ensure smooth navigation and site security.

3. Purpose and Legal Basis for Processing

We process your personal data for the following specific purposes and under the corresponding legal bases under the GDPR:

Purpose of ProcessingLegal Basis (GDPR)
To respond to inquiries, commission requests, & contact messagesProcessing is necessary for the performance of a contract or pre-contractual steps (Art. 6(1)(b) GDPR).
To manage newsletter subscriptions & artistic updatesBased on your explicit freely given Consent (Art. 6(1)(a) GDPR).
To ensure website functionality, technical maintenance, & securityLegitimate Interest of the Data Controller to keep the website safe and operational (Art. 6(1)(f) GDPR).

4. Cookies and Tracking Technologies

This website uses cookies and similar tracking technologies to enhance user experience and analyze site performance.

  • Technical/Necessary Cookies: Essential for the website to function properly. They do not require user consent.
  • Analytical & Functional Cookies: Used only with your explicit consent to understand how visitors interact with the site.

For detailed information regarding the cookies used and how to manage your preferences, please consult our dedicated Cookie Policy.

5. Data Retention Period

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected:

  • Contact inquiries: Retained for the time needed to manage and resolve your request, and up to 12 months thereafter.
  • Newsletter data: Retained until you withdraw your consent (unsubscribe).
  • Technical logs: Retained for up to 6 months for security auditing purposes.

6. Data Sharing and Third-Party Processors

We do not sell, rent, or trade your personal data to third parties.

Your data may be shared with trusted third-party service providers acting as Data Processors solely to operate this digital platform:

  • Website Hosting & Infrastructure Providers: Hostinger and WordPress.org.
  • Email Services: Google Workspace (Gmail).
  • Legal Authorities: If required by law or legal proceedings.

7. International Data Transfers

If any data transfer occurs outside the European Economic Area (EEA), such transfers are safeguarded under standard contractual clauses (SCCs) approved by the European Commission or equivalent adequacy decisions.

8. Your Rights Under the GDPR

As a Data Subject, you have the following rights regarding your personal data:

  • Right of Access (Art. 15 GDPR): Request a copy of the personal data held about you.
  • Right to Rectification (Art. 16 GDPR): Request correction of inaccurate personal data.
  • Right to Erasure / «Right to be Forgotten» (Art. 17 GDPR): Request deletion of your personal data where applicable.
  • Right to Restrict Processing (Art. 18 GDPR): Request temporary restriction of processing.
  • Right to Data Portability (Art. 20 GDPR): Receive your personal data in a structured, commonly used format.
  • Right to Object (Art. 21 GDPR): Object at any time to the processing of your data based on legitimate interests.
  • Right to Withdraw Consent: Withdraw your consent for newsletters or cookies at any time.

To exercise any of these rights, please send an email to:

📧 vivenzi.lalula@gmail.com

You also have the right to lodge a complaint with the supervisory authority (Garante per la protezione dei dati personali in Italy).

9. Changes to This Privacy Policy

This policy may be updated periodically to reflect changes in legal requirements or website functionality. The latest version will always be published on this page.