Legal notice
Privacy & Cookie Policy
Last updated: June 2026
Data controller
Marta Fratoni
P.IVA 02089030676
Via Nino Bixio 28, 64018 Tortoreto (TE), Italia
info@martafratoni.itIntroduction
This notice describes how personal data of users visiting martafratoni.it is processed, pursuant to Regulation (EU) 2016/679 (GDPR), Italian Legislative Decree 196/2003 as amended by Legislative Decree 101/2018, and the Italian Data Protection Authority's Cookie Guidelines of 10 June 2021.
This notice applies exclusively to martafratoni.it and not to other websites the user may reach via links.
Data controller
The data controller is Marta Fratoni, VAT no. IT02089030676, Via Nino Bixio 28, 64018 Tortoreto (TE), Italy. For any request relating to personal data, write to info@martafratoni.it.
Types of data processed
- Browsing data: IP address, browser and device type, pages visited, access times and other technical parameters collected automatically by IT systems.
- Data provided voluntarily through the contact form: full name, email address, company name (optional) and message content.
- Data provided through the AI assistant (chat): the text of the questions sent, which may contain personal information if spontaneously entered by the user.
- Data provided via WhatsApp: by clicking the WhatsApp button the user is redirected to the Meta Platforms app, which processes data under its own privacy policy.
- Cookies and identifiers: see the Cookie Policy section.
Purposes and legal bases
- Responding to requests sent via the contact form or chat — legal basis: pre-contractual measures requested by the data subject (Art. 6.1.b GDPR).
- Ensuring the operation and security of the website — legal basis: legitimate interest of the controller (Art. 6.1.f GDPR).
- Statistical traffic analysis and website optimisation — legal basis: user consent (Art. 6.1.a GDPR), given through the cookie banner.
- Marketing, remarketing and advertising campaign measurement — legal basis: user consent (Art. 6.1.a GDPR).
- Compliance with legal obligations — legal basis: legal obligation (Art. 6.1.c GDPR).
AI assistant
The website includes a virtual assistant powered by large language models (LLMs). Messages sent are transmitted to the model provider to generate a reply and are not used to train models. Conversations are not linked to an identified user profile. Please do not enter sensitive or unnecessary data in the chat. Replies are generated automatically and are for information purposes only: they do not constitute professional advice.
Recipients and transfers outside the EU
Data may be processed by providers acting as data processors under Art. 28 GDPR, exclusively for the purposes indicated:
- Hosting and cloud infrastructure providers for publishing the site and storing received messages.
- Email delivery services for contact request notifications.
- Artificial intelligence model providers for the operation of the virtual assistant.
- Google Ireland Ltd. (Google Analytics, Google Ads, Google Tag Manager) and Meta Platforms Ireland Ltd. (Meta Pixel, WhatsApp), only with prior consent for the respective cookie categories.
Some providers may be located outside the European Union (in particular in the United States). In such cases, transfers take place on the basis of European Commission adequacy decisions (including the EU-US Data Privacy Framework) or Standard Contractual Clauses under Art. 46 GDPR.
Retention period
- Contact requests: up to 24 months from the last contact, unless a contractual relationship is established.
- AI chat messages: up to 12 months, not linked to an identified profile.
- Browsing data and technical logs: up to 12 months.
- Cookies: according to the durations indicated in the Cookie Policy; the consent preference is stored for 6 months, after which the banner is shown again.
Rights of the data subject
Under Articles 15-22 GDPR, users have the right to access their data, to rectification, erasure, restriction of processing, data portability, to object to processing and to withdraw consent at any time, without affecting the lawfulness of processing based on consent before withdrawal.
Requests may be sent to info@martafratoni.it. Users also have the right to lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it) or their local supervisory authority.
Changes to this notice
The controller reserves the right to amend this notice at any time by publishing the updated version on this page. Please check it regularly, referring to the last-updated date shown above.