How we handle your personal data

Privacy Policy

Last updated: August 19, 2026

This Privacy Policy describes how personal data are processed when users visit this website and, where applicable, use the contact form available on the website.

1. Data Controller

The Data Controller responsible for the processing of personal data collected through this website is:

Alessandro Gabbiadini
Email: alessandro.gabbiadini@unimib.it

For any questions concerning this Privacy Policy or the processing of personal data, users may contact the Data Controller at the email address indicated above.

2. Browsing Data

During normal use of the website, the IT systems and software procedures used to operate the website may automatically process certain technical information transmitted as part of standard Internet communication protocols.

Such information may include, for example, IP addresses, browser type, operating system, request time, and other technical information necessary for the proper functioning and security of the website.

These data are not used by the Data Controller to directly identify individual users and are processed exclusively for technical, security, and website operation purposes.

3. Contact Form

This website uses Contact Form 7 to allow users to contact the Data Controller.

When users submit the contact form, the following information may be processed:

  • name;
  • email address;
  • subject of the request, where applicable;
  • content of the message;
  • any additional information voluntarily provided by the user.

The information submitted through the contact form is used exclusively to receive, manage, and respond to the user’s request.

Data submitted through the contact form are not used for marketing, profiling, advertising, or promotional communications.

The website does not use the contact form to create a database of users and does not intentionally store copies of submitted messages in the WordPress database.

Messages submitted through the contact form are transmitted to the Data Controller’s email account and may remain stored there for the time necessary to manage the correspondence.

The legal basis for this processing is the performance of measures taken at the request of the data subject and, where applicable, the legitimate interest of the Data Controller in responding to communications received through the website.

4. Data Retention

Information received through the contact form may be retained in the Data Controller’s email account for the time necessary to respond to the user’s request and manage any subsequent correspondence.

Data may be retained for a longer period where necessary to comply with legal obligations, protect the Data Controller’s rights, or document communications of professional, administrative, or contractual relevance.

The website does not maintain a separate database of contact form submissions.

5. Google Site Kit and Google Search Console

This website uses Google Site Kit, the official Google plugin for WordPress, in connection with Google Search Console.

Google Search Console is used by the website administrator to monitor the website’s indexing, visibility in Google Search results, search performance, and possible technical issues affecting its presence in search results.

The information made available through Google Search Console primarily concerns aggregated search performance and website visibility.

This website does not use Google Analytics, Google Ads, or other services for behavioral profiling, advertising, or tracking users across websites, unless otherwise indicated in a future version of this Privacy Policy.

Further information regarding Google’s processing of personal data is available in Google’s own privacy documentation.

6. Cookies and Tracking Technologies

This website does not use cookies for profiling, marketing, behavioral advertising, or user tracking purposes.

Only cookies or similar technologies that are strictly necessary for the technical operation, security, and functionality of the website may be used.

In particular, the website does not use tracking technologies to create user profiles or monitor users’ browsing behavior for commercial purposes.

If additional services involving non-essential cookies or tracking technologies are introduced in the future, this Privacy Policy will be updated accordingly and, where required by applicable law, users will be asked to provide their consent before such technologies are activated.

7. Disclosure of Personal Data

Personal data submitted through the contact form are not sold, rented, transferred, or disclosed to third parties for commercial, advertising, or marketing purposes.

Data may nevertheless be processed by technical service providers involved in the operation of the website, hosting infrastructure, or email services, strictly to the extent necessary to provide those services.

Personal data may also be disclosed to competent public authorities where required by law.

8. International Data Transfers

Some technology providers used in connection with the website or related services may belong to international organizations or process data outside the European Economic Area.

Where applicable, any transfer of personal data is carried out in accordance with Regulation (EU) 2016/679 and the safeguards required under applicable data protection law.

9. Data Subject Rights

Under Articles 15–22 of Regulation (EU) 2016/679 (GDPR), users may exercise the rights available to them under applicable data protection law, including the right to:

  • obtain confirmation as to whether their personal data are being processed;
  • access their personal data;
  • request correction or updating of inaccurate or incomplete personal data;
  • request deletion of personal data where applicable;
  • request restriction of processing;
  • object to processing where applicable;
  • request data portability where applicable.

Requests concerning the exercise of these rights may be sent to:

Alessandro Gabbiadini
Email: [EMAIL ADDRESS]

Users also have the right to lodge a complaint with the competent supervisory authority.

In Italy, the competent authority is the Garante per la protezione dei dati personali.

10. Data Security

The Data Controller adopts reasonable technical and organizational measures designed to protect personal data against unauthorized access, accidental loss, improper use, disclosure, alteration, or destruction.

However, no method of transmission over the Internet or electronic storage system can be considered completely secure.

11. Voluntary Nature of Data Provision

Providing personal data through the contact form is voluntary.

However, failure to provide information that is necessary to identify or respond to a request may make it impossible for the Data Controller to provide an appropriate response.

Users are invited not to include sensitive or unnecessary personal information in contact form messages unless strictly necessary for the purpose of their request.

12. Automated Decision-Making and Profiling

The website does not use personal data for automated decision-making or profiling within the meaning of Article 22 of the GDPR.

13. Changes to this Privacy Policy

This Privacy Policy may be updated from time to time to reflect changes in applicable law, website functionality, or the technical services used by the website.

Any updated version will be published on this page together with the date of the latest revision.