Privacy notice

The data controller is Cinzia Ruggeri, sole proprietor trading as PXNIX STUDIO DI CINZIA RUGGERI, at Via G. Palatucci 12, 25015 Desenzano del Garda (BS), Italy. The business provides the Tailored AI service.

Privacy enquiries: hello@cinziaruggeri.com. Certified email (PEC): cinziaruggeri@pec-legal.it. Business registration details are available on the legal information page.

Names, email addresses, information provided in the booking form or correspondence, and appointment details are processed to respond to enquiries and manage bookings. The legal basis is taking steps at the individual’s request before entering into a contract, Article 6(1)(b) GDPR.

Contact details, working notes and materials shared by the client are processed to prepare and deliver sessions, limited to what is needed for the service. The legal basis is performance of the contract, Article 6(1)(b) GDPR.

Billing details and administrative records are processed to meet tax and accounting obligations, Article 6(1)(c) GDPR. Where necessary, relevant data may be used to establish, exercise or defend legal claims, on the basis of the controller’s legitimate interest, Article 6(1)(f) GDPR.

Fields marked as required in the booking form are necessary to manage the appointment. Optional information can be omitted without affecting the booking. Enquiries can also be made by email.

Information needed to deliver the service or meet administrative obligations is required for the professional engagement. Information shared should be relevant to the request; health information and other special categories of personal data are not requested.

Enquiries that do not lead to a professional relationship, and related correspondence, are retained for up to 12 months after the last meaningful contact.

Session notes and materials are retained for as long as needed to deliver the engagement. At its conclusion, the need for further retention is reviewed and information no longer needed is deleted.

Tax and accounting records are retained for the periods required by applicable law. In the event of a dispute, only data needed to protect legal rights may be retained for the relevant limitation periods and the duration of proceedings.

Cloudflare hosts the website. Delivering and protecting the service involves processing technical data such as IP addresses, browser and device information, request data and security events. The legal basis is the controller’s legitimate interest in operating and securing the website, Article 6(1)(f) GDPR. Retention is limited to service delivery, security and troubleshooting needs, according to the service configuration.

The language preference is stored in the browser for subsequent visits. It remains until the selection is changed or the site’s browser data is cleared. It is not used for advertising.

The website does not use advertising profiling tools. Booking takes place on Google Calendar, an external service with its own privacy information.

The service uses Google Workspace for email, bookings and video calls, and Cloudflare for website hosting and security. Providers process data under their respective roles and applicable agreements. Professionals handling administrative obligations may receive necessary data, as may authorities where required by law. Personal data is not sold.

Google and Cloudflare also operate outside the European Economic Area. Transfers are governed by their respective agreements, which provide for Standard Contractual Clauses and, where applicable, adequacy decisions. The agreements are available from Google and Cloudflare. Further information about applicable safeguards can be requested from the controller.

Where the GDPR provides, individuals can request access, correction, deletion, restriction of processing and data portability. They can also object to processing based on legitimate interests on grounds relating to their situation, and withdraw any consent given without affecting the lawfulness of processing before withdrawal.

Requests should be sent to hello@cinziaruggeri.com. Individuals also have the right to complain to the Italian Garante per la protezione dei dati personali or another competent supervisory authority.

No decisions are made solely through automated processing that produces legal or similarly significant effects on individuals.

Changes to data processing will be reflected on this page. Where they affect data already collected, the relevant information will be communicated to the individuals concerned before the new processing begins.