Privacy Policy

Pursuant to Articles 13 and 14 of Regulation (EU) 2016/679 (“GDPR”), Stefano Delìa provides the following information on the processing of personal data of users of the stefanodelia.com website.

1. Data Controller

Stefano Delìa Via Nomentana 186, 00162 Rome (RM), Italy VAT number: 14374061001 Email: info@stefanodelia.com

2. What data we collect and why

2.1 Contact form

Through the contact form (Contact Form 7) we collect your name, email address, and the content of your message.

• Purpose: to respond to your request.
• Legal basis: pre-contractual measures taken at your request (Art. 6.1.b GDPR) / legitimate interest in responding to inquiries addressed to us.
• Anti-spam: the site uses WP Armour (a “honeypot” technique) which does not set cookies or track the user; the form may also use Google reCAPTCHA to distinguish humans from bots — reCAPTCHA collects device and interaction data and is subject to Google’s privacy policy.
• Retention: for as long as necessary to handle your request and any subsequent correspondence.

2.2 Newsletter

If you subscribe to the newsletter (form managed via Mailchimp for WordPress) we collect your email address, subject to your explicit consent.

• Purpose: sending communications and updates.
• Legal basis: consent (Art. 6.1.a GDPR).
• Service used: Mailchimp (Intuit / The Rocket Science Group LLC), based in the United States. Any transfer of data to the US relies on Standard Contractual Clauses and/or the EU-US Data Privacy Framework.
• Retention: until consent is withdrawn (you can unsubscribe at any time via the link in every email).

2.3 Shop purchases (fine-art prints)

For shop orders we collect your name, email address, billing and shipping address.

• Purpose: order fulfillment, invoicing (invoices generated via PDF Invoices & Packing Slips), customer support.
• Legal basis: performance of a contract (Art. 6.1.b GDPR); legal obligations relating to accounting/tax records.
• Retention: order and invoice data is kept for 10 years, as required under Italian civil and tax law (Art. 2220 of the Italian Civil Code).

Payments: processed via WooPayments (provided by Automattic Inc., using Stripe’s infrastructure for processing). Your card details are never stored on our servers — they are transmitted securely and encrypted directly to the payment provider, which acts as an independent controller/processor and adopts appropriate safeguards for any transfers outside the EU.

2.4 Website analytics (Google Analytics)

With your consent, we use Google Analytics 4 (via the Site Kit by Google plugin) to analyze, in aggregate form, how the site is used.

• Purpose: statistics and site improvement.
• Legal basis: consent (Art. 6.1.a GDPR) — these cookies are not activated until you give consent through the banner.
• Provider: Google Ireland Ltd; any transfers to the US are covered by Standard Contractual Clauses / the EU-US Data Privacy Framework.
• Full cookie details are available in the Cookie Policy.

2.5 Embedded content (Vimeo)

The homepage includes a background video hosted on Vimeo. When played, Vimeo may set its own cookies and collect browsing data in accordance with its own privacy policy. This content is only loaded after you give consent through the banner.

2.6 Technical and security data

• Server logs (IP addresses, technical data) automatically collected by our hosting provider for security and operational purposes — legal basis: legitimate interest (Art. 6.1.f).
• Really Simple Security and WP Armour: site security tools that do not collect visitor browsing data for profiling purposes.
• LiteSpeed Cache: technical cookies used to serve cached pages (see Cookie Policy).
• Redirection: may log the URL and IP address of requests to pages that are not found (404 errors) for technical maintenance purposes.
• EWWW Image Optimizer: optimizes images directly on our own server and does not process visitors’ personal data (the plugin’s optional cloud feature is not used).

2.7 Consent management (Complianz)

The cookie consent choice you make through the banner is recorded and stored by Complianz as proof of consent, in accordance with legal requirements (documentation of consent under Art. 7 GDPR). This data is not used for any other purpose.

2.8 Cookies

Full details of the cookies and tracking technologies used — including names, purposes, and duration — are available in the Cookie Policy, which is generated and kept up to date via automatic scanning. You can change or withdraw your preferences at any time via the consent management link/icon available on the site.

3. Who we share your data with

• Google (Ireland) Ltd — analytics (Google Analytics via Site Kit) and form anti-spam protection (reCAPTCHA)
• Mailchimp (Intuit / The Rocket Science Group LLC) — newsletter
• Automattic Inc. / Stripe infrastructure (WooPayments) — payments
• Vimeo Inc. — embedded video
• Complianz B.V. — recording of consent preferences
• Netsons S.r.l. — website hosting
• Any professional advisors (accountant) for accounting/tax obligations

We do not sell or share your data with third parties for their own marketing purposes.

4. Transfers outside the EU

Some providers (Google, Mailchimp, Vimeo, the payment infrastructure) are based, or operate servers, in the United States. In such cases, the transfer relies on Standard Contractual Clauses approved by the European Commission and/or adherence to the EU-US Data Privacy Framework.

5. Your rights

You have the right to: access (Art. 15), rectification (16), erasure (17), restriction of processing (18), data portability (20), objection (21), and to withdraw your consent at any time without affecting the lawfulness of processing carried out before withdrawal.

To exercise these rights, write to info@stefanodelia.com. You may also lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali — www.garanteprivacy.it) or with your local supervisory authority.

6. Minors

This website is not directed at minors under the age of 16, and we do not knowingly collect their data.

7. Changes

This notice may be updated whenever we introduce new tools that process personal data. The date of the last update is shown below.