Privacy Policy – agnesepastorino.com

Last updated: 28 October 2025

This Privacy Policy explains how Agnese Pastorino, owner and administrator of the website www.agnesepastorino.com (the “Website”), collects, uses, and protects personal data in accordance with the EU General Data Protection Regulation (GDPR), Swiss data protection principles where applicable, and relevant Italian law.

1. Data Controller

Data Controller: Agnese Pastorino
Tax ID (Codice Fiscale): PSTGNS85M69A717B
Registered Address: rue Ancienne, 60, Carouge, Geneva, CH-1227, Switzerland
Email: info@agnesepastorino.com
Telephone: +41779720426

2. Scope of this Policy

This Privacy Policy applies to all personal data collected through www.agnesepastorino.com, including data collected from:

  • visitors using contact or inquiry forms;

  • users subscribing to newsletters or updates;

  • individuals booking calls, consultations, events, or sessions;

  • users purchasing digital products or services (where applicable);

  • professionals submitting forms to join talent pools, networks, or collaborative initiatives;

  • general website browsing and analytics.

This Policy does not apply to personal data processed by third-party platforms linked from this Website (e.g. payment processors, scheduling tools, event platforms, or social media). These third parties act as independent data controllers and are governed by their own privacy policies.

3. Types of Data Collected

Depending on how you interact with the Website, the following categories of data may be collected:

  • Identification and contact data: name, surname, professional affiliation, email address, phone number;

  • Professional information: CV, area of expertise, availability, motivation statements, and related correspondence (when submitting applications or forms);

  • Transaction data: billing information, purchase confirmation, payment status (no full card details);

  • Technical data: IP address, browser type, device information, and usage data for security and analytics purposes.

Only data that are strictly necessary for the stated purposes are collected and processed in a lawful, fair, and transparent manner.

4. Purpose and Legal Basis for Processing

Purpose Legal Basis (GDPR Art. 6)
Responding to inquiries and communications Legitimate interest / Pre-contractual steps (Art. 6(1)(f), (b))
Managing bookings, services, or consultations Contract performance (Art. 6(1)(b))
Managing newsletters and updates Consent (Art. 6(1)(a))
Managing professional forms, talent pools, or applications Pre-contractual steps / Legitimate interest (Art. 6(1)(b), (f))
Website functionality and security Legitimate interest (Art. 6(1)(f))
Accounting, tax, and legal compliance Legal obligation (Art. 6(1)(c))

Providing personal data is voluntary; however, failure to provide required data may prevent the provision of services, responses, or participation in initiatives.

5. Payments and Third-Party Services

Payments for services or digital products (where applicable) are processed securely through trusted third-party providers (e.g. Stripe, PayPal, or equivalent services).

  • The Website does not store full payment card details.

  • Payment providers act as independent data controllers or processors under their own privacy policies.

  • The Data Controller receives only the information strictly necessary to confirm transactions and comply with legal obligations.

6. Professional Forms, Applications, and Networks

When you submit a form (e.g. for talent pools, professional networks, collaborations, or calls), your data are processed solely to:

  • evaluate profiles and expertise;

  • manage communications;

  • identify relevant professional opportunities;

  • ensure transparent and fair coordination.

Unless otherwise required by law, such data are retained for a maximum of 12 months, after which they are deleted or anonymised, unless you consent to longer retention.

7. Data Recipients

Personal data may be accessed only by:

  • the Data Controller;

  • authorized technical service providers (hosting, email, analytics, payment services);

  • professional advisors (accounting or legal) where required;

  • public authorities, when legally mandated.

Personal data are never sold or shared for marketing purposes.

8. Data Retention

Data are retained only for the time strictly necessary:

  • Contact and inquiry data: up to 12 months after last interaction;

  • Professional forms and applications: up to 12 months;

  • Transaction and billing data: up to 10 years (legal obligation);

  • Analytics data: according to provider settings.

9. Cookies and Analytics

The Website may use cookies or similar technologies to ensure proper functionality and analyze traffic.

If analytics tools (e.g. Wix Analytics or equivalent) are used, they may collect anonymised usage data. You may manage or disable cookies through your browser settings.

If no analytics tools are active, the Website does not use cookies that directly identify users.

10. Data Security

Appropriate technical and organisational measures are implemented to protect personal data against unauthorised access, alteration, loss, or disclosure.

Data are stored within the European Economic Area (EEA) or in jurisdictions offering adequate data protection guarantees.

11. Your Rights

Under GDPR, you have the right to:

  • access your personal data;

  • rectify inaccurate data;

  • request erasure of your data (“right to be forgotten”);

  • restrict or object to processing;

  • request data portability.

Requests can be sent to info@agnesepastorino.com. A response will be provided within 30 days, as required by law.

12. Complaints

If you believe your data have been processed unlawfully, you may lodge a complaint with:

Garante per la Protezione dei Dati Personali
Website: https://www.garanteprivacy.it

You may also contact the Data Controller directly to seek an amicable resolution.

13. Updates to this Policy

This Privacy Policy may be updated to reflect legal or operational changes. The most recent version will always be published on this page.