Privacy & Cookie Policy

Privacy Policy

This privacy notice describes how the personal data of users browsing the Website is processed and is provided pursuant to Article 13 of the GDPR. It refers solely to the Website and not to other websites that the user may reach via links.

1. Data Controller

The Data Controller is EllepiLab di Lorenzo Pileri, with registered office at Via Gian Lorenzo Bernini 59, 90145 Palermo (PA), Italy, VAT no. 07413670824.

For any request relating to the processing of personal data, the Controller can be reached at the following contacts:

• E-mail: ellepilab1@gmail.com
• Phone: +39 346 1654 263

2. Types of data processed

Browsing data

The computer systems and software procedures used to operate the Website acquire, during their normal operation, certain personal data whose transmission is implicit in the use of Internet communication protocols (for example IP addresses, browser and device type, operating system, date and time of the visit, pages viewed). Such data is used solely to obtain anonymous statistical information about the use of the Website and to check that it is working correctly.

Data voluntarily provided by the user

The optional, explicit and voluntary sending of messages to the Controller's contact addresses, as well as the completion of any forms, entails the acquisition of the sender's contact details required to reply, as well as any personal data included in the communications.

Data collected through cookies and similar technologies

For details of the cookies and tools used, please refer to the Cookie Policy below.

3. Purposes and legal basis of the processing

Personal data is processed for the following purposes:

• to allow browsing and use of the Website and to ensure its security and correct operation — legal basis: the legitimate interest of the Controller (Art. 6(1)(f) GDPR);
• to respond to requests for information and contact submitted by the user — legal basis: performance of pre-contractual measures taken at the request of the data subject (Art. 6(1)(b) GDPR);
• statistical analysis of the use of the Website through third-party analytics cookies — legal basis: the consent of the data subject (Art. 6(1)(a) GDPR);
• to comply with legal obligations — legal basis: legal obligation (Art. 6(1)(c) GDPR).

4. Methods of processing

Data is processed using computer and/or electronic tools, with logic strictly related to the stated purposes and, in any case, in such a way as to guarantee the security and confidentiality of the data. Appropriate technical and organisational measures are in place to protect the data from unauthorised access, loss, destruction or unauthorised disclosure.

5. Data retention period

Personal data is retained only for as long as strictly necessary to achieve the purposes for which it was collected:

• browsing data is retained for the technically necessary period, except where it may be used to ascertain offences by the judicial authorities;
• data provided through contact requests is retained for the time needed to handle the request and, thereafter, for the period required by any legal obligations;
• data collected through cookies is retained for the duration indicated in the Cookie Policy.

6. Recipients of the data

Personal data may be processed by persons authorised by the Controller and by service providers (for example hosting providers and statistical analysis service providers), appointed where necessary as Data Processors pursuant to Article 28 of the GDPR. The data is not disseminated.

7. Transfer of data to third countries

Some services used by the Website, in particular Google Analytics and Microsoft Clarity, may involve the transfer of personal data to third countries, including the United States. Such transfers take place in compliance with the GDPR, on the basis of appropriate safeguards such as the adequacy decisions of the European Commission (EU-U.S. Data Privacy Framework) and/or the Standard Contractual Clauses.

8. Rights of the data subject

The data subject has the right, in the cases and within the limits set out in Articles 15-22 of the GDPR, to:

• access their personal data and obtain a copy of it;
• obtain the rectification of inaccurate data or the integration of incomplete data;
• obtain the erasure of the data (right to be forgotten);
• obtain the restriction of processing;
• object to the processing of the data;
• receive the data in a structured, commonly used and machine-readable format (data portability);
• withdraw consent at any time, without affecting the lawfulness of processing based on consent given before its withdrawal.

To exercise these rights, the data subject may write to the Controller at ellepilab1@gmail.com. The data subject also has the right to lodge a complaint with the Italian Data Protection Authority — Garante per la protezione dei dati personali (www.garanteprivacy.it).

9. Changes to this notice

The Controller reserves the right to amend or update this notice, including as a result of changes in legislation. Any changes will be published on this page together with the date of the last update.

Cookie Policy

This Cookie Policy explains the types of cookies used by the Website, their purposes and how the user can manage their preferences.

1. What cookies are

Cookies are small text files that the websites visited send to the user's device, where they are stored to be sent back to the same websites on subsequent visits. Similar technologies — such as localStorage — make it possible to store information on the device for similar purposes. In this policy the term «cookie» refers both to cookies in the strict sense and to such similar technologies.

2. Types of cookies used

2.1 Technical and necessary cookies (no consent required)

These are essential for the correct operation of the Website and to deliver the services requested by the user. Cookie consent is collected and managed through a self-hosted solution developed directly by the Controller, without relying on any third-party platform or service: the choice expressed by the user in the banner is stored solely in the browser's local storage (localStorage), on the Website's own domain, so that the banner is not shown again on every page. This information remains on the user's device and is not transmitted to any third party.

2.2 Third-party analytics cookies (consent required)

The Website uses Google Analytics 4, a web analytics service provided by Google Ireland Limited, to collect aggregated information about the number of visitors and how the Website is used. These cookies are installed only with the prior consent of the user, given through the consent banner: until consent is granted, the Google Analytics script remains blocked and is not executed.

For more information about how Google processes data, please refer to the Google Privacy Policy and the How Google uses information page.

2.3 Microsoft Clarity (consent required)

The Website also uses Microsoft Clarity, a behavioural analytics tool provided by Microsoft, which makes it possible to understand, in aggregate form, how users interact with the Website (for example heatmaps and aggregated session recordings). These cookies are also installed only with the prior consent of the user: in the absence of consent, the tool is not loaded.

Microsoft may also set further cookies (for example MUID, CLID, ANONCHK, SM) for analytics and security purposes. For more information, please refer to the Microsoft Privacy Statement.

3. Consent management

Cookie consent is managed through a self-hosted technical solution, owned by the Controller and free of any third-party service. On the first visit to the Website, a banner is displayed allowing the user to accept or reject statistical cookies, with two options of equal prominence and ease of use, or to make a selective choice through the dedicated toggle. No box is pre-selected, and the cookies subject to consent (Google Analytics 4 and Microsoft Clarity) are not loaded or executed until the user gives explicit consent.

The user can change or withdraw their preferences at any time by clicking the «Cookie preferences» button in the footer of every page of the Website, or the «Manage cookie preferences» button at the bottom of this page: the banner will be shown again. Withdrawing consent results in the deletion of the related cookies and does not affect the lawfulness of processing carried out before the withdrawal. If no choice is made, the banner keeps being shown and, in any case, consent is requested again after 180 days.

4. Managing cookies from the browser

The user can also manage or disable cookies through their browser settings. Below are links to the instructions for the most common browsers:

• Google Chrome
• Mozilla Firefox
• Microsoft Edge
• Apple Safari

Disabling technical cookies may compromise some features of the Website.

5. Updates to the Cookie Policy

This Cookie Policy may be subject to changes over time, including in relation to the introduction of new tools or developments in the applicable legislation. Users are invited to check this page periodically.

Manage cookie preferences