Privacy Policy

1. Who is responsible for your data?

The data controller is:

This Privacy Policy explains how personal data is handled when you use cinziaruggeri.com, submit a business enquiry, book a discovery call or subscribe to the newsletter.

2. Business enquiries and Book a Call

When you use the Book a Call form, you may provide information including your name, work email address, company, company website or primary business link, team size, the reason you are looking for Operations support, the type of help you are seeking, and any additional information you choose to provide.

This information is used to review your enquiry, understand whether there may be a suitable basis for working together, respond where appropriate and facilitate the booking of a discovery call.

The legal basis for this processing is Article 6(1)(b) GDPR: processing necessary to take steps at your request before entering into a contract.

The enquiry form is provided through Tally, which processes form submission data on behalf of Cinzia Ruggeri.

The form asks you to avoid including sensitive personal data or confidential information that is not necessary for the enquiry.

If an enquiry does not result in a client relationship, the information will generally be retained for up to 12 months from the last meaningful contact, unless a longer period is reasonably necessary to establish, exercise or defend legal claims.

If a client relationship begins, relevant information may instead be retained for the duration required for the professional relationship and applicable legal, tax or accounting obligations.

3. Scheduling a discovery call

After submitting the Book a Call form, you may be redirected to an external Google Calendar appointment booking page.

If you choose to book a call, Google may process information such as your name, email address, selected appointment time and information necessary to create the calendar event and Google Meet meeting.

This scheduling step is used to arrange the discovery call you requested and forms part of the same pre-contractual enquiry process described above.

Google Calendar is an external service. Information you provide directly through Google's booking page is also handled in accordance with Google's applicable privacy terms.

4. Newsletter

If you subscribe to the newsletter, your email address is used to send occasional emails from Cinzia Ruggeri about Operations, systems, workflows and related professional topics.

The legal basis for this processing is your consent under Article 6(1)(a) GDPR.

Newsletter subscriptions are managed through MailerLite, which processes subscriber data on behalf of Cinzia Ruggeri.

Double opt-in is enabled for website/API subscriptions. A new subscriber must confirm the subscription through the confirmation email before becoming an active newsletter subscriber.

You can withdraw your consent and unsubscribe at any time using the unsubscribe link included in newsletter emails.

Newsletter data is normally retained for as long as you remain subscribed. Following an unsubscribe or withdrawal of consent, limited information may be retained where necessary to respect the opt-out and demonstrate compliance with applicable data-protection obligations.

5. Website hosting, delivery and security

The website is hosted and delivered using Cloudflare services.

When you access the website, technical information associated with requests may be processed where necessary to deliver, protect and operate the website. Depending on the service and configuration, this may include information such as IP address, request metadata, browser/device information and security events.

Where this processing involves personal data, the legal basis is the legitimate interest under Article 6(1)(f) GDPR in operating, securing and protecting the website and its services.

Technical information is retained only for as long as reasonably necessary for website delivery, security, troubleshooting and the applicable provider configuration.

6. Website analytics

The website uses Cloudflare Web Analytics to understand general website usage and performance.

According to Cloudflare's documentation, Cloudflare Web Analytics does not collect or use visitors' personal data.

No Google Analytics, advertising pixels, behavioural profiling tools, session-replay tools or cross-site marketing trackers are intentionally used as part of the current website configuration.

7. Cookies and similar technologies

The website is designed to minimise the use of cookies and similar technologies.

The embedded Tally form may use technologies necessary to provide the form and its requested functionality.

No optional Tally conversion-tracking integration is intentionally enabled.

The current website configuration does not intentionally use advertising or profiling cookies.

If the technologies used by the site change, this section and any applicable consent mechanism will be reviewed accordingly.

8. Service providers and international processing

Personal data may be processed by service providers necessary to operate the website and provide requested services, including:

• Tally — business enquiry form
• Google — external appointment scheduling and Google Meet
• MailerLite — newsletter subscription and delivery
• Cloudflare — website hosting, delivery, security, server-side newsletter functionality and web analytics

Personal data is not sold.

Tally states that form data is stored in Europe.

MailerLite states that subscriber data for EEA customers served by MailerLite Limited does not leave the EU.

Google and Cloudflare operate internationally. Where personal data is transferred outside the European Economic Area and GDPR requires safeguards, the applicable provider may rely on recognised legal transfer mechanisms such as adequacy decisions, Standard Contractual Clauses or other safeguards permitted by data-protection law.

9. Your rights

Under the GDPR, depending on the circumstances, you may have the right to:

• request access to your personal data
• request correction of inaccurate data
• request deletion
• request restriction of processing
• object to certain processing
• receive your data in a portable format where applicable
• withdraw consent at any time where processing is based on consent

Withdrawing consent does not affect the lawfulness of processing carried out before withdrawal.

Privacy requests can be sent to:

cruggeri.freelance@gmail.com

You also have the right to lodge a complaint with a competent data-protection supervisory authority, including the Garante per la protezione dei dati personali in Italy.

10. Automated decision-making

Personal data collected through this website is not used to make decisions based solely on automated processing that produce legal or similarly significant effects.

11. Changes to this Privacy Policy

This Privacy Policy may be updated if the website, services, providers or applicable legal requirements change.

The latest version will be published on this page.