Privacy & cookies

Data controller

The controller of the personal data collected through this website is Giulia Vazzoler. For any privacy request you can write to: stefano.marrone@me.com.

What data we process

The website does not ask visitors to register and does not use analytics, advertising or profiling tools.

The Contact page has a form: if you fill it in, we process your name, your email address and the text of your message, together with the language of the website you were using. This is the only data you give us voluntarily, and we use it only to reply to you. Filling in the form is optional; without a name, an email address and a message, however, we cannot reply. The message is not stored on the website: it is sent by email to the controller. If you write to the email address in the footer instead, your data stays in the controller’s mailbox and never passes through this website.

The website is a set of static pages published by Cloudflare (the Cloudflare Pages service). As with any website, the provider automatically records some technical browsing data: IP address, date and time of the request, requested page, browser and operating system. The website has no reserved area for visitors (the “Reserved area” link at the bottom of the page leads to the content editor, hosted by Sanity and used only by the people who update the website) and keeps no other data about visitors.

The Contact form and email

When you press Send, the website checks that the message does not come from an automated program (see “The contact form’s spam check”). Then Brevo, the service that delivers the website’s email, sends the controller’s mailbox an email with your name, your email address, the website’s language and the text of your message. Your address is set as the one to reply to, so the controller can answer you directly from her own mailbox.

We send you no automatic email (no confirmation, no newsletter) and your address is not added to any mailing list. Once sent, the message stays only in the controller’s mailbox, with her email provider, and in Brevo’s sending logs.

Why we process it

The data from the Contact form is used only to read and answer your request. The legal basis is replying to your request (Article 6(1)(b) of Regulation (EU) 2016/679, “GDPR”). We do not use it to send you newsletters or marketing.

Browsing data, and the spam check described below, are used only to run the website and protect it from abuse and attacks. The legal basis is the controller’s legitimate interest (Article 6(1)(f) GDPR).

We make no decisions based solely on automated processing, profiling included.

The contact form’s spam check

To protect the form from automated messages the website uses Cloudflare Turnstile. The check loads only once you start filling in the form: just reading the page does not start it. Turnstile looks at some technical data about the connection and the browser (including the IP address) only to tell a person from an automated program, under Cloudflare’s own policy (https://www.cloudflare.com/turnstile-privacy-policy/).

How long we keep it

Messages sent through the Contact form stay in the controller’s mailbox (and so with her email provider) for as long as needed to handle the request and keep a record of contacts; you can ask for them to be deleted at any time. The service that delivers them keeps its own sending logs for the period set by its policy.

Browsing data is kept by Cloudflare for the period set by its own policies and used only to run and protect the website.

Who can see it

Browsing data and the Contact form pass through Cloudflare, Inc., the hosting provider (https://www.cloudflare.com/privacypolicy/). Messages from the form are delivered by email by Brevo (based in France, in the European Union; https://www.brevo.com/legal/privacypolicy/). The press-kit photo archive is delivered by Sanity (https://www.sanity.io/legal/privacy), the service the website’s texts and photos are managed with. These providers act as data processors. Spotify and Google (for YouTube), when their players load, process data as independent controllers under their own policies (see below). The data is not sold, transferred or disclosed.

Transfers outside the European Union

Cloudflare and Sanity may also process data outside the European Union, in particular in the United States. In that case the transfer relies on the safeguards provided by the GDPR: the European Commission’s adequacy decision on the EU-U.S. Data Privacy Framework, for providers that take part in it, or the standard contractual clauses approved by the Commission (Articles 45 and 46 GDPR).

Cookies

The website sets no cookies of its own. Only when needed to protect the website from automated traffic, the hosting provider may use strictly necessary technical cookies, which do not require consent.

The website uses no profiling cookies of its own and stores nothing on your device: the start page picks the language by reading the browser’s setting only. The cookies Spotify and YouTube may set are described below.

You can block or delete cookies, third-party ones included, in your browser’s settings.

Spotify and YouTube

Some pages contain a Spotify player, which loads with the page: when you open such a page, your browser contacts Spotify, which may collect technical data (such as the IP address) and set cookies or similar tools under its own policy (https://www.spotify.com/legal/privacy-policy/).

Likewise, some pages contain YouTube videos, which load with the page, preview included: when you open such a page, your browser contacts Google, which may collect technical data (such as the IP address) and set cookies or similar tools under its own policy (https://policies.google.com/privacy). Videos use YouTube’s privacy-enhanced mode (youtube-nocookie.com).

These players let you listen to and watch the performances right on the website. Pages without them contact neither Spotify nor Google. If you do not want them to set cookies, you can block third-party cookies in your browser’s settings: the rest of the website works as usual.

Press kit

The biography and the archive of high-resolution photos are downloaded from this website. Because of its size, the photo archive is delivered directly by Sanity: when you download it, Sanity receives the technical details of the request (such as the IP address), under its own policy (https://www.sanity.io/legal/privacy).

External links

The website links to music platforms (Spotify, Apple Music, YouTube Music, Amazon Music and others) and to press articles. When you open them, their own privacy policies apply.

Your rights

You can ask at any time for access to your data, rectification, erasure, restriction of processing or data portability, or object to processing (Articles 15–22 GDPR) by writing to stefano.marrone@me.com.

You also have the right to lodge a complaint with the Italian Data Protection Authority (https://www.garanteprivacy.it).

Changes

This policy may be updated. The date of the last update is shown at the top of the page.