Legal

Privacy Policy

Last updated: 9 October 2026

This Privacy Policy explains how Ilaria Pia Fiore, a freelance professional working under the name “Ilaria Fiore” (“I”, “me”, “my”), processes the personal data of people who visit the website www.ilariafiore.com (the “Website”) or contact me through it.

I process personal data in accordance with Regulation (EU) 2016/679 (General Data Protection Regulation, “GDPR”), the Italian Personal Data Protection Code (Legislative Decree no. 196/2003, as amended by Legislative Decree no. 101/2018) and other applicable data protection laws. This Policy is provided under Article 13 of the GDPR.

1. Scope of this policy

This Policy applies to personal data collected through the Website, including the contact form and the call booking link, and through emails exchanged in connection with requests made via the Website.

It does not apply to third-party websites and platforms linked from the Website, such as LinkedIn, Instagram, YouTube, Calendly or the websites of organisations I work with. These have their own privacy policies, which I encourage you to read.

2. Data controller

The data controller responsible for processing your personal data is:

Ilaria Pia Fiore
VAT number (P. IVA): 04556140715
Email: info@ilariafiore.com

I have not appointed a Data Protection Officer, as one is not required for my activity.

3. Types of data I collect

3.1 Data You Provide Voluntarily

When you use the contact form or write to me by email, I collect:

• Name (required)
• Email address (required)
• Organisation, company, school or event (optional)
• The content of your message (required) and any other information you choose to include

If you book a call through the Calendly link, Calendly collects your name, email address, the date and time you choose and any notes you add, and shares them with me (see Section 7).

Please do not include sensitive data (for example, health information) or confidential information in your messages unless it is strictly necessary.

3.2 Technical Data Collected Automatically

When you visit the Website, the hosting provider automatically receives technical data needed to display the pages, such as:

• IP address
• Browser type and version, device and operating system
• Date and time of the request and the page or file requested
• Referring URL

This data is used only to deliver the Website and keep it secure. I do not use analytics, advertising or profiling tools, and I do not use technical data to identify visitors.

4. Purposes and legal bases of processing

I process personal data for the following purposes, each on the legal basis indicated:

• Replying to your requests and preparing proposals for collaborations, talks, events, workshops or educational programmes: steps taken at your request before entering into a contract (Art. 6(1)(b) GDPR) and my legitimate interest in replying to the messages I receive (Art. 6(1)(f) GDPR).
• Managing calls booked via Calendly: steps taken at your request before entering into a contract (Art. 6(1)(b) GDPR).
• Carrying out professional engagements and issuing invoices, if a collaboration follows: performance of a contract (Art. 6(1)(b) GDPR) and compliance with Italian tax and accounting obligations (Art. 6(1)(c) GDPR).
• Operating the Website and keeping it secure, including spam protection on the contact form: legitimate interest (Art. 6(1)(f) GDPR).
• Establishing, exercising or defending legal claims: legitimate interest (Art. 6(1)(f) GDPR).

I do not use your data for marketing or newsletters, and I do not make decisions based solely on automated processing, including profiling (Art. 22 GDPR).

5. Providing your data

The fields marked as required in the contact form are necessary to reply to you: without them, I cannot handle your request. Optional fields can be left blank. The checkbox on the contact form confirms that you have read this Privacy Policy.

6. Data retention

I keep personal data only for as long as necessary for the purposes described above:

• Contact requests and related correspondence: up to 24 months after our last exchange, unless a professional relationship follows.
• Data relating to professional engagements, contracts and invoices: 10 years, as required by Italian law (Article 2220 of the Italian Civil Code).
• Technical data and server logs: for the limited period set by the hosting provider for operational and security purposes.
• Data needed to establish or defend legal claims: until the claim is finally settled.

At the end of these periods, the data is deleted or anonymised.

7. Recipients and service providers

I do not sell or rent personal data, and I do not share it with third parties for their own marketing purposes. Your data is accessed only by me and by the following service providers, which act as data processors on my behalf under Article 28 GDPR:

• Netlify, Inc. (United States): hosting and delivery of the Website
• Web3Forms: processing of contact form submissions and forwarding them to my email inbox
• Aruba S.p.A. (Italy): email services
• Calendly LLC (United States): scheduling of calls, only if you choose to book one

The fonts and software libraries used by the Website are hosted on the Website itself, so no data is sent to third-party servers when the pages load.

Where necessary, data may also be shared with professionals bound by confidentiality, such as my accountant, to meet tax and accounting obligations, and with public authorities when required by law.

8. International data transfers

Some of the providers listed above are based in, or may process data in, the United States or other countries outside the European Economic Area (EEA). In these cases, transfers take place on the basis of an adequacy decision of the European Commission, including the EU-U.S. Data Privacy Framework for certified providers, or of Standard Contractual Clauses approved by the European Commission (Articles 45 and 46 GDPR). You can ask me for information about these safeguards at any time.

9. Cookies

This section also serves as the Website’s Cookie Policy.

The Website does not use analytics, advertising or profiling cookies, and it does not set cookies of its own. For this reason, no cookie consent banner is shown.

External services you choose to open from the Website (for example Calendly, LinkedIn, Instagram or YouTube) may set their own cookies once you are on their pages, in accordance with their own cookie policies.

If analytics or other non-essential cookies are introduced in the future, I will update this Policy and ask for your consent before using them, as required by the Italian Data Protection Authority’s Guidelines on cookies and other tracking tools of 10 June 2021.

10. Images of people

The Website shows photographs from events, talks and educational activities. Images in which people can be identified are published with their consent or with the authorisation of the organising institution. Images of minors are published only with the authorisation of their parents or guardians, or in a way that does not allow them to be identified.

If you appear in a photograph on the Website and would like it removed, write to info@ilariafiore.com and I will remove it promptly.

11. Your rights

Under Articles 15 to 22 of the GDPR, you have the right to:

• access your personal data and receive a copy of it;
• have inaccurate or incomplete data corrected;
• have your data erased;
• restrict the processing of your data;
• receive your data in a structured, commonly used and machine-readable format and transmit it to another controller (data portability), where applicable;
• object at any time, on grounds relating to your particular situation, to processing based on my legitimate interest;
• withdraw your consent at any time, where processing is based on consent, without affecting the lawfulness of processing carried out before the withdrawal.

To exercise your rights, write to info@ilariafiore.com. I will reply without undue delay and in any case within one month of receiving your request.

12. Right to lodge a complaint

If you believe that the processing of your personal data infringes the GDPR, you have the right to lodge a complaint with the competent supervisory authority. In Italy, this is:

Garante per la protezione dei dati personali (Italian Data Protection Authority)
Piazza Venezia 11, 00187 Rome – Italy
www.garanteprivacy.it

You may also contact the supervisory authority of the EU country where you live or work.

13. Security of data

I use appropriate technical and organisational measures to protect personal data against unauthorised access, loss, alteration or disclosure. The Website is served over an encrypted connection (HTTPS), and access to my email and service accounts is protected. However, no method of transmission over the Internet can be guaranteed to be completely secure.

14. Children’s privacy

The Website is intended for adults, including teachers, schools and organisations interested in my educational programmes. I do not knowingly collect personal data from children under the age of 14, the age of digital consent in Italy (Article 2-quinquies of the Italian Personal Data Protection Code). Requests about activities for children should be sent by a parent, teacher or school.

If you believe that a child has sent me personal data through the Website, please contact me and I will delete it.

15. Changes to this Privacy Policy

I may update this Privacy Policy to reflect changes to the Website, the services I use or the law. The updated version will be published on this page with a new “Last updated” date, and significant changes will be highlighted on the Website.

16. Contact information

For any questions about this Privacy Policy or the processing of your personal data, please contact:

Email: info@ilariafiore.com