PRIVACY E COOKIE POLICY

1. Data Controller

The Data Controller is Lara Olmi, Italian Tax Code (Codice Fiscale) LMOLRA75S62L219Z, VAT No. 09256250011, with registered address at Corso Carlo e Nello Rosselli, 68 - 10129 Turin (TO), Italy.

Contact: primo.confronto@laraolmiconsulting.it

2. Personal data processed and how it is collected

The website is built with WordPress and is intended as an informational website.

  • Browsing data and technical logs: IP address, user-agent, date and time of access, server requests, and other technical data required for operation and security.
  • Voluntary communications: if you contact the Controller by email, the data contained in your message (e.g., name, email address, message content, and attachments).
  • Technical and preference cookies: see Section 9 (Cookie Policy).

3. Purposes of processing and legal bases

Your data may be processed for the following purposes:

  1. Website operation, technical management, security, and prevention of abuse/fraud (legal basis: the Controller’s legitimate interest and/or technical necessity of the service).
  2. Handling and responding to requests sent by email (legal basis: pre-contractual measures and/or performance of a contract, depending on the request).
  3. Compliance with legal obligations and requests from competent authorities (legal basis: legal obligation).

4. Provision of data

Providing browsing data is necessary to use the website and for security purposes. Providing data by email is optional, but necessary if you want to receive a response.

5. Recipients of data

Data may be processed by or disclosed to the following categories of recipients:

  • Hosting and infrastructure provider (Aruba) and related technical suppliers, insofar as needed to provide the service.
  • Suppliers supporting website maintenance, security, and backups (if any), appointed as Data Processors where required.
  • Professional advisers (e.g., legal/accounting) strictly when necessary.
  • Public authorities where required by law.

6. Transfers outside the EEA

In general, the website is hosted with Aruba. Some technical suppliers (for instance the CookieScript cookie banner service) may involve transfers outside the European Economic Area, depending on the supplier’s server location. Where applicable, transfers are carried out in accordance with the GDPR and using appropriate safeguards (e.g., Standard Contractual Clauses).

7. Data retention

Data are retained for no longer than necessary for the purposes described above. In particular:

  • Technical and security logs: typically up to 90 days (unless longer retention is required to establish, exercise, or defend legal claims).
  • Backups: typically up to 30 days.
  • Emails and requests: for as long as needed to handle the request and, where appropriate, for an additional period for protection (e.g., up to 12 months).
  • Cookies: as indicated in the Cookie Policy section and/or in the cookie banner configuration.

8. Data subject rights

You may exercise your rights under the GDPR, including: access, rectification, erasure, restriction, objection, data portability (where applicable), and withdrawal of consent (where processing is based on consent).

To exercise your rights, please write to: primo.confronto@laraolmiconsulting.it. You also have the right to lodge a complaint with the competent supervisory authority (Italy: Garante per la protezione dei dati personali).

9. Cookie Policy

Cookies are small text files that websites send to your device to enable the proper functioning of the site and other features. This website uses technical/necessary cookies and a preference cookie to store your cookie-banner choices (CookieScript).

Consent is not required for technical cookies; however, information is provided here.

9.1 Cookies used

  • CookieScriptConsent
    Provider: Cookie-Script.com / website
    Purpose: stores the preferences expressed in the cookie banner
    Duration: configurable (depends on banner settings)
  • wordpress_test_cookie
    Provider: website
    Purpose: checks whether the browser accepts cookies
    Duration: session
  • wordpress_logged_in_* / wordpress_sec_*
    Provider: website
    Purpose: technical authentication cookies (logged-in users/admin only)
    Duration: session / variable
  • wp-settings-* / wp-settings-time-*
    Provider: website
    Purpose: technical preferences for logged-in users (admin only)
    Duration: up to 1 year (variable)

Note: some WordPress cookies are set only when accessing the administration area or any restricted area.

9.2 Managing preferences

You can manage cookies through your browser settings. If enabled, you can also change your preferences via the cookie banner panel.

10. Changes to this policy

The Controller may update this policy. The “Last updated” date at the top indicates the most recent version.