Privacy Policy

1. Data Controller

Vittorio J. Greco
Website: www.vittoriojgreco.com
Email: info@vittoriojgreco.com

The Data Controller has not appointed a Data Protection Officer (DPO), as the processing activities do not fall within the cases provided for by Articles 37–39 of the GDPR.

2. Types of Data Collected

2.1 Browsing Data

The computer systems and software procedures used to operate this website automatically collect, during their normal operation, certain personal data whose transmission is implicit in the use of internet communication protocols. This information is not collected to be associated with identified individuals, but could — through processing and association with data held by third parties — potentially allow users to be identified. This category includes IP addresses, browser type, operating system, pages visited, and the times of those visits.

This data is retained only for the time strictly necessary for technical site management and, unless needed to establish criminal liability, is deleted automatically within 30 days.

2.2 Data Provided Voluntarily by the User

Through the quote/contact form on the site (Services section), users may voluntarily provide their name, email address, selected services, budget range, and a free-text message. This data is processed exclusively to respond to the submitted request and for no other purpose.

The legal basis for processing is the consent of the data subject (Art. 6(1)(a) GDPR) and, where applicable, the performance of pre-contractual measures at the request of the data subject (Art. 6(1)(b) GDPR), expressed at the time the form is submitted.

3. Purposes of Processing

• Responding to quote and contact requests submitted via the site
• Site maintenance and security
• Compliance with legal obligations

4. Third Parties and Data Transfers

This site uses the following third-party services that may independently collect personal data:

Service	Provider	Purpose	Privacy Notice
Google Fonts	Google LLC (USA)	Loading web fonts — transfers the visitor's IP address to Google servers	Google Privacy Policy
YouTube (embed)	Google LLC (USA)	Playback of embedded videos — privacy-enhanced mode (youtube-nocookie.com), no profiling cookies before consent	Google Privacy Policy
Spotify (embed)	Spotify AB (Sweden)	Playback of embedded music player, loaded only after media cookie consent	Spotify Privacy Policy
BandsInTown	Bandsintown Inc. (USA)	Concert dates and tour widget — loads an external script that may collect browsing data	BandsInTown Privacy Policy
Google Analytics (Site Kit)	Google LLC (USA)	Anonymous browsing statistics — loaded only after analytics cookie consent	Google Privacy Policy
Aruba (hosting)	Aruba S.p.A. (Italy)	Website hosting — collects server access logs	Aruba Privacy Policy

Transfers to non-EU countries (USA) take place in compliance with the safeguards provided by the GDPR, including the standard contractual clauses adopted by the above-mentioned providers.

5. Data Retention

Data provided through the contact/quote form is retained for the time strictly necessary to manage the request, and in any case no longer than 24 months from receipt, unless a contractual relationship is established. Server access logs are retained for a maximum of 30 days.

6. Rights of Data Subjects

Under Articles 15–22 of the GDPR, you have the right to:

• Access your personal data
• Obtain rectification or erasure of your data
• Object to processing or request its restriction
• Request data portability
• Withdraw consent at any time, without prejudice to the lawfulness of processing carried out prior to withdrawal
• Lodge a complaint with the Italian Data Protection Authority — www.garanteprivacy.it

To exercise your rights, contact the Data Controller at: info@vittoriojgreco.com. A response will be provided within 30 days of receiving the request.

7. Cookies

For information on the cookies used by this site, please refer to the Cookie Policy.

8. Changes to This Policy

The Data Controller reserves the right to amend this policy at any time. The updated version will be published on this page with the date of the latest revision.

Last updated: 11 September 2026