Privacy Policy

Who is responsible for your data

This policy explains how the personal data of visitors to this website are processed, in accordance with Article 13 of Regulation (EU) 2016/679 (the “GDPR”).

The data controller is Zelenova Natalia, a sole proprietorship trading as Natalia Enze, VAT IT14262410963, Via Tommaso Agudio, 1, 20154 Milan (MI), Italy. Email: nz@nataliaenze.com.

No data protection officer has been appointed, as none is required.

What data we process

This website has no contact forms, no visitor accounts, no newsletter, no advertising and no analytics or tracking tools, and it sets no cookies on visitors’ devices (see the Cookie Policy). Personal data are processed in two cases only:

• Server logs. When you open a page, the server that hosts the website automatically records some technical data: your IP address, the date and time of the request, the page requested, the response status, the page you came from and your browser type.
• Email. If you write to nz@nataliaenze.com, we receive your email address, your name if you give it, and whatever you choose to include in your message.

Why, and on what legal basis

• Server logs: to run the website, keep it secure and investigate misuse or attacks. Legal basis: our legitimate interest in operating a secure website (Article 6(1)(f) GDPR).
• Email: to answer your enquiry and, if it leads to a commission, to take steps before a contract and to perform it (Article 6(1)(b) GDPR); for other correspondence, our legitimate interest in replying (Article 6(1)(f) GDPR). If a contract follows, the data are also kept to meet tax and accounting obligations (Article 6(1)(c) GDPR).

How long we keep the data

• Server logs: no longer than 14 days, unless they are needed to investigate a specific security incident.
• Email: for as long as needed to handle your enquiry. Correspondence relating to a contract is kept for up to 10 years after the relationship ends, the ordinary limitation period for contractual claims under Article 2946 of the Italian Civil Code; invoices and accounting records are kept for the period tax law requires.

Who receives the data

Your data are not sold or passed on for marketing. They are processed only by the providers needed to run the website and the email service, acting as data processors under Article 28 GDPR:

• Hetzner Online GmbH (Germany), which hosts the website’s server;
• Google Ireland Limited, which provides the email service (Google Workspace).

Data may also be disclosed to public authorities where the law requires it and, where a contract needs it, to professionals such as an accountant.

Transfers outside the European Union

The email service is provided by Google Ireland Limited; data may also be processed in the United States by Google LLC, which is certified under the EU-U.S. Data Privacy Framework, on the basis of the European Commission’s adequacy decision of 10 July 2023.

For any transfer not covered by that decision, the standard contractual clauses approved by the Commission apply; you can ask for a copy by writing to nz@nataliaenze.com.

The website’s server is located in Germany.

Your rights

You have the right to access your personal data, to have them corrected or erased, to restrict their processing, and to receive them in a portable format (Articles 15–20 GDPR). To exercise these rights, write to nz@nataliaenze.com; you will receive a reply within one month, or within three months for particularly complex requests, in which case we will tell you within the first month.

You also have the right to lodge a complaint with the Italian data protection authority, the Garante per la protezione dei dati personali (www.garanteprivacy.it), or with the supervisory authority of the EU country where you live or work.

Right to object

Where processing rests on our legitimate interest — the server logs and non-contractual correspondence — you have the right to object at any time, on grounds relating to your particular situation (Article 21 GDPR), by writing to nz@nataliaenze.com.

Do you have to provide your data

Log data are needed to run the website. Writing to us is optional, but without an email address we cannot reply. No decisions are made solely by automated means, and no profiling takes place.

Changes

This policy may be updated, for example when the website gains new features. The version in force is always published on this page, with the date of the last update.