Privacy
Policy
This appropriation is intended to cover expenditure on research and innovation in the field of information technology.
01 Data controller
The controller of personal data collected through the website christophercorte.it is:
Christopher Corte
Free professional — UX/UI and Product Strategy consultant
VAT consignment: 05219660239
It is located in Via Gioacchino Rossini, 6A — 37066 Sommacampagna (VR), Italy
E-mail: christopher.corte87@gmail.com
This is the website: www.christophercorte.it
For any questions concerning the processing of your personal data, you can contact the controller directly at the above-mentioned email address. Guaranteed reply within 30 days of receipt of the request pursuant to Article 12 GDPR.
02 Data collected and how it is collected
Data provided voluntarily by the user
Through the contact forms on the website, you can voluntarily provide the following personal data:
| Date and time | Obligatory | Purpose |
|---|---|---|
| Name and surname | Yes, I did. | Identification of the applicant and personalization of the response |
| E-mail address | Yes, I did. | Answer to the request, if any, submission of a quote |
| Name of company or project | No , it 's not . | Contextualization of the request |
| Description of the project or need | Variable by service | Drafting of the minutes or preparation of the session |
| Preferences for service | Variable | Personalization of the offer |
| Preferred date and time zone | For bookings | Organization of the appointment |
Failure to provide the mandatory data makes it impossible to provide the requested service.
Navigation data
The computer systems responsible for the operation of the website acquire, during their normal operation, certain personal data whose transmission is implicit in the use of internet communication protocols. This is information such as IP addresses, browser type, operating system, pages visited and access times. This data is processed exclusively for aggregate technical and statistical purposes and is stored for the time strictly necessary. Google Analytics 4 is uploaded only after the analytical consent. Before consent and in case of refusal the site does not load the Google Analytics tag. You can change or revoke the option from the "Manage cookies" command.
Data processed during payment
For prepaid services (UX Business Audit, Mentoring 1:1, UX Crash Course and SMEs Digital Consulting), payment is made by: Striped, PCI-DSS certified external payment platform. The full paper data is collected directly from Stripe. The holder receives the data necessary to identify the customer, service and payment outcome, and uses Aruba to issue and store electronic invoices. Stripe processes the data according to its privacy policy available on stripe.com/privacy.
03 Purposes and legal basis
| Purpose | Legal basis (art. (GDPR) |
|---|---|
| Responding to requests for quotes or information | (b) — implementation of pre-contractual measures at the request of the person concerned |
| Management of reservations for paid sessions | Article 6 (1) (b) — performance of the contract |
| Tax and accounting payments | Article 6 (1) (c) — Legal obligation |
| Submission of commercial communications (only with explicit consent) | Article 6 (1) (a) — Consent of the person concerned |
| Prevention of abuse and spam via the website | Article 6 (1) (f) — legitimate interest of the holder |
The consent given when filling out the contact forms shall be for the processing of data solely to respond to a specific request. It does not involve subscribing to newsletters or sending unsolicited commercial communications.
04 Recipients and data processors
We use the following providers to manage the website, requests and services. When they process data on our behalf, they act as responsible under Art. 28 GDPR; for their own purposes and legal obligations they may act as autonomous holders, according to their respective information.
| Subject | Role | Purpose | Privacy |
|---|---|---|---|
| Formspree Inc. San Francisco, USA |
Controller | Receipt and transmission of contact forms | Policy |
| The following is the list of airlines: | Security service | Turnstile: anti-abuse verification of the forms, processing the technical data of the connection and device | Policy |
| Striped Competent entities by service and country | Owner or self-employed person, according to the treatment described in his statement | Online payment management | Policy |
| The following is the list of companies listed in Annex II: Gmail, Calendar, Analytics and multimedia content |
Controller | Email, calendar availability, images hosted by Google; statistics only by consent | Policy |
| Manufacture | Service provider; contract role and treatment | Automation of service requests and communications | Information to be provided |
| Hotjar / Contentsquare | Provider of experience analysis | Maps and sessions by consent only, content of obscured forms | Information and communication |
| Mailchimp / Intuit | Service provider; contract role and treatment | Management of service-related contacts and emails; promotional communications only with separate consent | Information to be provided |
| Aruba | Service provider; contract role and treatment | Website hosting and electronic invoicing services and storage of tax documents | Information to be provided |
The data shall not be transferred, sold or disclosed to third parties not specified, nor used for purposes other than those declared.
05 Data transfers outside the EU
Suppliers may also process data outside the European Economic Area. Guarantees depend on the provider and the transfer: applicable adequacy decisions, including the Data Privacy Framework for certified organisations, or standard contractual clauses and measures provided for in processing agreements.
- Formspree declares the use of standard contractual clauses: safety documentation.
- Make provides standard treatment agreements and clauses: Contract documents.
- Mailchimp provides for a Data Privacy Framework and, in the cases indicated by its agreement, standard clauses: treatment agreement.
- In the case of Stripe, Google and Cloudflare, the guarantees set out in their respective notices and relevant agreements shall apply. You can ask for information on the applicable guarantees by writing to the holder.
06 Retention periods
| Type of data | Period of storage |
|---|---|
| Data from contact forms without contract | 12 months from receipt, unless requested for early cancellation |
| Data on professional benefits awarded | 10 years from the end of the professional relationship (tax and civil liability) |
| Payment data (managed by Stripe) | According to the purposes and terms described in the Stripe Information, including applicable regulatory obligations |
| Navigation log of the server | Not more than 30 days, except for security-related requirements |
At the expiry of the deadlines, the data shall be deleted or anonymised irreversibly.
07 Your data protection rights
Under Articles 15-22 of the GDPR, you have the right to:
- Access: confirm whether or not personal data concerning you are being processed and, if so, receive a copy of the data.
- Correction: obtain the correction of inaccurate or incomplete personal data concerning you.
- Cancellation: obtain the deletion of your data ("right to be forgotten"), unless the processing is necessary to comply with legal obligations.
- Limitation: obtaining the restriction of processing in the cases provided for in Article 18 GDPR.
- Portability: receive the data concerning you in a structured, commonly used and automatically readable format.
- Opposition: you object to the processing of your personal data at any time, for reasons related to your particular situation.
- Withdrawal of consent: withdraw the consent given at any time, without prejudice to the lawfulness of the processing carried out before the withdrawal.
- Complaint: lodge a complaint with the Data Protection Officer (Italian Supervisory Authority), located in Piazza Venezia 11, 00187 Rome. The site: garanteprivacy.it.
To exercise your rights, write to: christopher.corte87@gmail.com the subject 'Exercise of GDPR rights'. We'll respond within 30 days of receiving your request.
08 Cookie Policy
What are cookies
Cookies are small text files that the websites visited by the user send to the terminal (computer, tablet, smartphone) where they are stored and then forwarded to the same sites on the next visit.
Strictly necessary technical cookies
The website christophercorte.it does not set its own profiling cookies. It uses a technical consent cookie (cc_consent) to store the user's choice in the cookie banner, pursuant to Article 122 of Legislative Decree 196/2003 and the Guarantee Guidelines of 10 June 2021.
This is the total amount of revenue generated by the Union as a whole.
With the user's explicit consent, the site uses Google Analytics 4 (GA4), a web analytics service provided by Google LLC. GA4 sets cookies to collect aggregated statistical data on site usage (pages visited, session duration, geographical origin anonymized). The site implements This is the first time I've seen this.In the absence of consent, GA4 does not collect personal identification data. Google shall, with consent, process the data in accordance with its own information and applicable transfer safeguards. The choice of optional emails is different from the statistics. The necessary confirmations and responses to the request shall not constitute consent to promotional communications.
Analysis of experience — Hotjar (by consensus)
Hotjar (Contentsquare group) is used only after consent to evaluate user experience: clicks, scrolling, pages visited and session playback. We don't use IDs like name or email to associate sessions with contacts. The fields and summaries of the forms are obscured before collection; masking of e-mails, numbers and data entered and deleting location are also active in the project. The main cookies are _hjSessionUser_3012155 (up to 365 days) and _hjSession_3012155 (30 minutes). The availability of records depends on the Hotjar plan and settings; the duration of cookies does not coincide with that of data in the service.
You can refuse or withdraw from the "Manage cookies" command, without restrictions on services. After Hotjar starts, the revocation saves the denial and updates the page to stop the recorder. The analytical preferences prior to the introduction of Hotjar do not automatically allow its activation. Hotjar privacy notice · Processing agreement and applicable guarantees.
Third-party cookies
During navigation, cookies may be installed by third-party services:
| Service | Like that . | Purpose | Duration | Opt-out |
|---|---|---|---|---|
| Google Analytics 4 | Analytical (only by consensus) | Aggregate statistical analysis of traffic. Active only with explicit consent via banners. Tag uploaded after analytical consent. | Up to 2 years, according to Google (_ga, The following information shall be provided:) |
Opt-out GA · Google policy |
| Striped | Technical, safety | Prevention of fraud during payment. Active only during the payment session on the Stripe domain. | This session | Policy Stripe |
| Local sources | Resources of the site | The Inter family is hosted on the site; it's not requested from Google Fonts. | N/A | N/A |
| Formspree | No one . | The forms are sent via the JSON API. Formspree does not set cookies on the user's browser. | N/A | N/A |
Management of cookies
The banner allows you to accept, reject or choose your optional preferences. The refusal leaves navigation and the submission of requests available. The "Manage cookies" command allows you to re-open your preferences and withdraw your consent. The choices are requested again at the time of expiry or in case of substantial update.
You can still manage or delete cookies through your browser settings. The main browsers provide the following guides:
Disabling technical cookies could compromise the proper functioning of the website or some of its functionalities.
09 Changes to this notice
The owner reserves the right to make changes to this notice at any time by advertising it to users on this page. Please consult this page frequently, with reference to the date of last modification at the top of the document.
In the event of substantial changes to data already supplied, the holder shall communicate them by e-mail to the addresses in his possession where possible.
10 Contact
For any matter relating to this privacy policy or the processing of your personal data:
Christopher Corte — Controller
Free work · VAT 05219660239
This appropriation is intended to cover expenditure relating to:
E-mail: christopher.corte87@gmail.com
Guaranteed reply within 30 days of receipt of the request pursuant to Article 12 GDPR.
For complaints to the Data Protection Supervisor (Italian supervisory authority, located in Piazza Venezia 11, 00187 Rome): Complaint procedure with the Italian Privacy Guarantee.