This notice is provided under Articles 13 and 14 of Regulation (EU) 2016/679 («GDPR») and Italian Legislative Decree 196/2003 as amended by Legislative Decree 101/2018, to visitors of www.federicaorsini.it (the «Website») and to anyone contacting the artist through it. In case of discrepancy, the Italian version prevails.
1. Data controller
The data controller is Federica Orsini, Imperia (IM), Italy.
Email: [email protected]
2. Data processed
Browsing data. The systems running the Website collect some data whose transmission is implicit in Internet protocols: IP address, browser type, operating system, date and time of the request, resources requested, response code. This data is used only to ensure the Website works correctly and securely.
Data you provide. When you fill in the contact form or write to the email address shown, your name, email address, subject and any other information you choose to include in the message are processed. Please do not include special categories of data (Art. 9 GDPR) unless strictly necessary.
Cookies. The Website only uses technical cookies. See the Cookie policy for details.
3. Purposes and legal bases
| Purpose | Legal basis |
|---|---|
| Replying to requests about artworks, purchases, commissions, exhibitions and collaborations | Pre-contractual measures taken at your request (Art. 6.1.b GDPR) and consent (Art. 6.1.a GDPR) |
| Keeping the Website secure and preventing abuse and spam | Legitimate interest of the controller (Art. 6.1.f GDPR) |
| Complying with legal obligations, including tax obligations, when an artwork is sold | Legal obligation (Art. 6.1.c GDPR) |
Providing the form data is optional, but without it we cannot reply. The data is not used for marketing or profiling and is not subject to automated decision-making.
4. How data is processed
Data is processed electronically, strictly for the purposes stated, with appropriate security measures to prevent loss, unlawful use or unauthorised access. The Website is served over an encrypted HTTPS connection. Messages sent through the contact form are forwarded by email to the artist and stored in the restricted area of the Website, accessible only with personal credentials.
5. Retention
- Messages and contact data: for as long as needed to handle the request and in any case no longer than 24 months after the last contact, unless a relationship arises (e.g. the purchase of an artwork), in which case statutory periods apply.
- Browsing data (logs): for the period set by the hosting provider for security purposes, normally no longer than 12 months.
6. Recipients
Data may be processed, as data processors, by parties providing services strictly necessary to the controller: the Website hosting provider, the email provider and the technical maintainer of the Website. Data is not disclosed or sold to third parties.
7. Transfers outside the European Union
The artist's mailbox is provided by Google (Gmail). Google LLC participates in the EU-U.S. Data Privacy Framework, recognised as adequate by the European Commission on 10 July 2023; any transfer therefore complies with Art. 45 GDPR.
8. External links
The Website contains simple links to Instagram, Facebook and Google Maps. No content from these platforms is loaded until you click the link; from then on, their own privacy policies apply.
9. Your rights
You may at any time ask the controller for access to your data, rectification, erasure, restriction of processing, data portability, and object to processing (Arts. 15–22 GDPR). You may withdraw consent at any time, without affecting the lawfulness of processing carried out before withdrawal. To exercise your rights write to [email protected].
You also have the right to lodge a complaint with the Italian Data Protection Authority, Garante per la protezione dei dati personali (www.garanteprivacy.it).
10. Minors
The Website is not intended for children under 14 and the controller does not knowingly collect their data.
11. Changes
This notice may be updated. The current version is always published on this page.
Last updated: 28 September 2026.