Privacy Policy
Last updated: September 20, 2026
This Privacy Policy describes how personal data is processed in connection with the use of enricogiaretta.com and the services associated with it, in accordance with Regulation (EU) 2016/679 (“GDPR”) and applicable Italian data protection legislation.
This Policy also covers the domains enricogiaretta.it, which is connected to the main website and is also used to deliver certain media resources, and cantaviatore.it, which is used exclusively to redirect users to the main website.
The Data Controller is:
Enrico Giaretta
Email: info@enricogiaretta.it
For any request concerning the processing of personal data or the exercise of data protection rights, users may contact the Data Controller at the email address above.
The following categories of personal data may be processed when using the website.
The IT systems used to operate the website may automatically collect certain technical information, including: -
This information is not collected for the purpose of directly identifying the user.
If the user voluntarily contacts the Data Controller, the email address and any other personal data contained in the communication may be processed.
The following information is requested when subscribing to the newsletter:
The main website and its resources are hosted using OVHcloud services.
The hosting infrastructure may generate technical logs relating, among other things, to web access, errors, connections and operations necessary for the functioning of the services.
These data are processed to ensure the proper operation of the website, protect its security, identify malfunctions, prevent abnormal or unlawful use and, where necessary, investigate security incidents.
The legal basis for this processing is the Data Controller’s legitimate interest in the proper management, protection and security of the website and its systems, pursuant to Article 6(1)(f) GDPR.
Technical logs are retained in accordance with the periods provided by the infrastructure used and, insofar as they are under the control of the Data Controller, only for as long as necessary for technical, diagnostic and security purposes.
The domain enricogiaretta.it is connected to the main website enricogiaretta.com and is also used to deliver certain media resources.
The domain cantaviatore.it is managed through Aruba services and is used exclusively to redirect users to the main website.
When these domains are accessed, the technical infrastructure required for domain resolution and redirection may process connection information strictly necessary to execute the request, ensure security and manage the service.
This information is not used by the Data Controller for advertising or profiling purposes.
Any technical logs are retained according to the periods and criteria applicable to the relevant services, including operational, security and legal requirements.
Users may voluntarily subscribe to Enrico Giaretta’s newsletter.
The data are used to send updates relating to Enrico Giaretta’s artistic activity, including new projects, releases, events, live performances and other related content.
The legal basis for the processing is the user’s consent, pursuant to Article 6(1)(a) GDPR.
Providing the data and giving consent to subscribe are optional. Failure to provide them only prevents subscription to the newsletter and does not restrict normal use of the website.
The subscription process uses single opt-in. Once the form on the website has been submitted, the user will be subscribed.
The form on the website is configured to transmit the required data to Mailchimp and not to store form submissions locally through Elementor’s submission collection feature.
This does not exclude the possible temporary presence of technical information in normal infrastructure logs, security systems or backups.
The newsletter is managed through Mailchimp, a service provided by The Rocket Science Group LLC, an Intuit company.
Mailchimp processes the data necessary to: -
In the configuration used for the newsletter, individual tracking of email opens and individual tracking of clicks on links contained in newsletters are not enabled.
Data are processed for the duration of the newsletter subscription.
Following an unsubscribe request, the minimum information necessary to record the withdrawal of consent, prevent further unwanted communications, document the proper management of the subscription and protect the Data Controller in the event of disputes may be retained.
Such information is not used for further marketing activities.
Consent to receive the newsletter may be withdrawn at any time by using the unsubscribe link included in the communications received or by writing to:
Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.
The website uses Google Tag Manager for the technical management of tags and Google Analytics 4 to obtain statistical information about the use of the website.
The Google Analytics property used by the website has the following identifier:
G-N9K4QMEH95
The Google Tag Manager container used by the website is:
GTM-K62M5847
Google Tag Manager and Google Analytics are loaded only after the user has given consent through the cookie banner.
Before consent is given, or if consent is refused, Analytics tools are not loaded.
Refusing consent does not restrict normal use of the website.
The legal basis for processing through Google Analytics is the user’s consent.
The Analytics property is not connected to Google advertising products, and the optional “Google products and services” data sharing setting is disabled.
The Google Analytics property is configured with a retention period of 14 months for user-level and event-level data.
The option to reset the retention period following new user activity is disabled.
The retention period configured in Google Analytics is separate from the technical lifespan of cookies stored in the browser and does not necessarily result in the deletion, after 14 months, of all aggregated data used in the platform’s standard reports.
The website uses a technical cookie to remember the user’s choice regarding statistical tools.
The preference expressed by the user is stored for 180 days.
Google Analytics is activated only after consent has been given.
Users may subsequently change their choice using the “Cookie Preferences” function available in the website footer.
Further information is available in the Cookie Policy.
If a user voluntarily contacts Enrico Giaretta through the contact details provided on the website, the data supplied are processed solely for the purpose of responding to the request and managing the related communication.
Depending on the nature of the request, the legal basis may be: -
The data are retained for the period necessary to handle the request and, where necessary, for any additional period required to protect legal rights or comply with applicable legal obligations.
Personal data may be processed, to the extent necessary for their respective activities, by service providers supporting the operation of the website and related services.
These include, in particular: -
These parties process data according to their respective roles and the applicable contractual terms.
Personal data are not sold.
The use of certain providers, particularly Google and Mailchimp, may involve the processing or transfer of personal data to countries outside the European Economic Area, including the United States.
Such transfers are carried out using the mechanisms provided for under applicable data protection law, including adequacy decisions, the Data Privacy Framework and, where necessary, Standard Contractual Clauses.
Mailchimp provides specific safeguards for the processing and international transfer of customer data in its Data Processing Addendum.
Personal data are processed using IT and electronic systems, with technical and organisational measures appropriate to the nature of the data and the purposes of the processing.
Data are processed solely for the purposes described in this Privacy Policy.
The website does not use the data collected to make decisions based solely on automated processing that produce legal effects or similarly significant effects on users.
The newsletter does not use individual tracking of opens or clicks to create subscriber profiles.
Where provided for by the GDPR, data subjects may exercise the rights set out in Articles 15 and following, including the right to: -
Requests may be sent to:
Data subjects also have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali).
The website may contain links to social networks, music platforms, ticketing websites, professional websites or other resources managed by third parties.
A simple hyperlink does not in itself cause cookies belonging to the destination platform to be installed through this website.
When the user follows a link and leaves this website, the processing of personal data is governed by the policies and terms of the relevant third-party service.
This Privacy Policy may be updated as a result of changes to the website, the services used or applicable legislation.
The updated version will be published on this page together with the date of the latest update.
