Privacy Policy

Last updated: April 2026 — Version 1.0

This Privacy Policy describes how Federica Erba ("I", "me", "my") collects, uses and protects the personal data you provide through this website, in accordance with the General Data Protection Regulation (EU) 2016/679 (GDPR) and applicable Italian data protection legislation (D.Lgs. 196/2003, as amended by D.Lgs. 101/2018).

1. Data Controller

The data controller is:
Federica Erba
Email: info@erba.com
Website: www.erba.com

2. What data we collect

Through the contact form on this website, I collect the following personal data:

Full name (required)
Email address (required)
Professional role / title (optional)
Message content (required)
Newsletter opt-in preference (optional, checkbox)
IP address and browser metadata — collected automatically for security and anti-spam purposes

I do not collect sensitive categories of personal data (e.g. health data, political opinions, racial or ethnic origin) and do not use automated decision-making or profiling.

3. Legal basis and purpose of processing

Your data is processed on the following legal bases (Art. 6 GDPR):

Contractual necessity / pre-contractual steps (Art. 6(1)(b)): to respond to your enquiry and manage potential professional collaboration.
Consent (Art. 6(1)(a)): where you explicitly tick the consent checkbox. Consent may be withdrawn at any time without affecting the lawfulness of prior processing.
Legitimate interest (Art. 6(1)(f)): for security logging and anti-spam measures.

4. Newsletter and marketing communications

If you tick the optional newsletter checkbox, you consent to receiving occasional professional updates from Federica Erba (career news, insights, articles). This is entirely optional and separate from the mandatory Privacy Policy consent.

You may unsubscribe at any time by replying to any email with "Unsubscribe" or by emailing info@erba.com.

5. Data retention

Contact form data is retained for a maximum of 24 months from the date of your enquiry, or until the professional relationship concludes, whichever is earlier. After this period, your data is permanently deleted. Security logs are retained for 12 months.

6. Data sharing and transfers

Your personal data is not sold, rented or shared with third parties for their own marketing purposes. Data may be shared only with:

Hosting and email infrastructure providers acting as data processors, subject to appropriate data processing agreements;
Competent authorities when required by law.

No personal data is transferred outside the European Economic Area (EEA) without appropriate safeguards (e.g. Standard Contractual Clauses).

7. Your rights under GDPR

You have the following rights regarding your personal data:

Right of access (Art. 15): obtain a copy of the data I hold about you.
Right to rectification (Art. 16): correct inaccurate or incomplete data.
Right to erasure (Art. 17): request deletion of your data ("right to be forgotten").
Right to restriction (Art. 18): limit how I process your data.
Right to data portability (Art. 20): receive your data in a structured, machine-readable format.
Right to object (Art. 21): object to processing based on legitimate interest.
Right to withdraw consent (Art. 7(3)): at any time, without affecting prior lawful processing.

To exercise any of these rights, please contact me at info@erba.com. I will respond within 30 days. If you believe your rights have been violated, you have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali, www.garanteprivacy.it).

8. Cookies

This website does not use tracking or profiling cookies. No third-party analytics scripts (e.g. Google Analytics) are loaded. The only technical processes run server-side for form delivery and basic security logging.

9. Security

I implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure or destruction. Data is transmitted over encrypted HTTPS connections.

10. Changes to this policy

This Privacy Policy may be updated from time to time. The date at the top of this page reflects the most recent revision. Material changes will be communicated via a visible notice on this website.

11. Contact

For any privacy-related request or question, contact:
Federica Erba
info@erba.com