Digital Humanist | Valentina Rossi

Edit Template

PRIVACY POLICY.

Last updated: 14 April 2026

This Privacy Policy describes how personal data is processed through the website digitalhumanist.me and its associated pages.

1. DATA CONTROLLER

The Data Controller is Valentina Rossi, owner of the website digitalhumanist.me, who can be contacted at: itsvalentinarossi@icloud.com.

2. SCOPE OF APPLICATION

This Privacy Policy applies to the institutional and editorial website digitalhumanist.me, including informational pages, article pages, the contact page, and any additional pages published under the same domain.

3. CATEGORIES OF PERSONAL DATA PROCESSED

In the course of using the website, the Data Controller may process the following categories of personal data:

  • Browsing and technical data: IP address, date and time of request, requested URL, user agent, technical information about the browser and device, referrer, technical logs, security events, server response codes, and similar data necessary for the operation, security, and maintenance of the website.
  • Data voluntarily provided by the user: data contained in communications sent to the email address published on the website, such as first name, surname, email address, organisation, message content, any attachments, and any other information voluntarily provided by the user.
  • Privacy preference data: technical information relating to choices expressed regarding cookies and tracking tools, where a consent or preference management system is implemented.

4. PURPOSES OF PROCESSING AND LEGAL BASES

Personal data is processed for the following purposes:

  • Provision and operation of the website, security, abuse prevention, and service continuity.
    Legal basis: legitimate interests of the Data Controller in ensuring the proper functioning, security, and integrity of the website and its infrastructure.
  • Management of requests submitted via email and pre-contractual or professional communications.
    Legal basis: performance of pre-contractual measures requested by the data subject, or the legitimate interests of the Data Controller in responding to professional, editorial, or informational enquiries.
  • Compliance with legal or regulatory obligations or requests from competent authorities.
    Legal basis: compliance with a legal obligation.
  • Establishment, exercise, or defence of legal claims.
    Legal basis: legitimate interests of the Data Controller.
  • Storage of cookie preferences, where applicable.
    Legal basis: legitimate interests of the Data Controller in recording and respecting user choices and avoiding repeated requests for preferences.
  • Processing based on consent.
    Where optional tools such as analytics, marketing, profiling, or embedded third-party content requiring prior consent are introduced, the legal basis will be the user’s consent, which is freely given and may be withdrawn at any time.

5. NATURE OF DATA PROVISION

The provision of browsing data is necessary for the technical operation of the website. The provision of data in email communications is voluntary; however, failure to provide such data will prevent the Data Controller from responding. Consent to non-essential tools is optional and refusal does not affect the general use of the website, except for any related optional functionalities.

6. METHODS OF PROCESSING

Processing is carried out using electronic means and, where necessary, paper-based tools, in accordance with the principles of lawfulness, fairness, transparency, data minimisation, purpose limitation, and confidentiality. The Data Controller implements appropriate technical and organisational measures to protect personal data against unauthorised access, alteration, disclosure, loss, or destruction.

7. RECIPIENTS OF DATA

Personal data may be disclosed, strictly within the scope of the stated purposes, to the following categories of recipients:

  • providers of hosting, IT infrastructure, technical maintenance, application security, backup, and business continuity services;
  • email service providers and communication tools used to manage incoming requests;
  • consultants, professionals, or collaborators supporting the Data Controller in technical, organisational, administrative, or legal matters;
  • public authorities or entities entitled to receive the data under applicable laws or official requests;
  • third-party platforms accessed via external links on the website, such as social networks, limited to interactions initiated by the user through clicking such links. In such cases, subsequent processing is governed by the respective privacy policies of those third parties, acting as independent data controllers.

8. TRANSFERS OF PERSONAL DATA OUTSIDE THE EEA

Certain technical or communication service providers used by the Data Controller may be located in, or process data in, countries outside the European Economic Area. In such cases, transfers are carried out in accordance with Chapter V of the GDPR, based on adequacy decisions of the European Commission or, where absent, on standard contractual clauses or other appropriate safeguards.

9. DATA RETENTION PERIODS

Personal data is retained for no longer than necessary to fulfil the purposes for which it was collected. In particular:

  • technical data and security logs are retained for the time strictly necessary for technical management, monitoring, security, debugging, and abuse prevention, in accordance with retention periods set by hosting providers or security systems, unless further retention is required due to incidents, authority requests, or disputes;
  • data contained in email communications is retained for the time necessary to handle the request and, as a general rule, for a maximum of 24 months from the last contact, unless further retention is required for legal obligations, documentation purposes, or the defence of legal claims;
  • cookie preferences, where stored through dedicated technical tools, are retained for the period strictly necessary to manage such preferences and, as a general rule, no longer than 6 months, unless renewed by the user or otherwise required for documented technical reasons.

10. DATA SUBJECT RIGHTS

Data subjects may exercise the rights provided for under Articles 15–22 of the GDPR, including the right to:

  • obtain confirmation as to whether personal data concerning them is being processed;
  • access their personal data;
  • request rectification or updating;
  • request erasure;
  • obtain restriction of processing;
  • object to processing based on legitimate interests;
  • receive their data in a structured, commonly used, and machine-readable format, where technically feasible;
  • withdraw consent at any time, without affecting the lawfulness of processing based on consent prior to withdrawal.

Requests may be submitted to: itsvalentinarossi@icloud.com.

11. RIGHT TO LODGE A COMPLAINT

Data subjects have the right to lodge a complaint with a supervisory authority, in particular in the Member State of their habitual residence, place of work, or place of the alleged infringement. For processing related to this website, the competent authority is the Italian Data Protection Authority (Garante per la protezione dei dati personali).

12. AUTOMATED DEISION-MAKING

Personal data processed through the website is not used for automated decision-making that produces legal effects or similarly significant effects on the data subject.

13. LINKS TO THIRD-PARTY WEBSITES AND PLATFORMS

The website may contain links to external websites or platforms, including social networks. Access to such websites occurs at the user’s initiative. The Data Controller does not control processing carried out by third parties following such access and encourages users to consult the relevant privacy policies.

14. CHANGES TO THIS PRIVACY POLICY

The Data Controller reserves the right to update this Privacy Policy at any time, including as a result of legal, technical, or organisational changes. The updated version will be published on this page with the corresponding revision date.