LEGAL
Privacy Notice
Privacy Notice
Last updated: 7 October 2026
This notice explains how personal data are processed when you visit fabriziotodaro.com or contact me through the forms on this website, in accordance with Regulation (EU) 2016/679 (GDPR).
This notice explains how personal data are processed when you visit fabriziotodaro.com or contact me through the forms on this website, in accordance with Regulation (EU) 2016/679 (GDPR).
Data controller
Data controller
Fabrizio Todaro, freelance consultant
Fabrizio Todaro, freelance consultant
Via Giovanni da Procida 3, 63074 San Benedetto del Tronto (AP), Italy
Via Giovanni da Procida 3, 63074 San Benedetto del Tronto (AP), Italy
VAT number: IT02433490444
VAT number: IT02433490444
Email: contact@fabriziotodaro.com
Email: contact@fabriziotodaro.com
Which data I process
Which data I process
Data you provide through the contact and audit request forms: name, company, email address, country, the package you are interested in, number of formulas and the content of your message.
Data you provide through the contact and audit request forms: name, company, email address, country, the package you are interested in, number of formulas and the content of your message.
Technical data: the website’s hosting provider may automatically process technical data such as IP address, browser type and access times, as needed to deliver the website and keep it secure.
Technical data: the website’s hosting provider may automatically process technical data such as IP address, browser type and access times, as needed to deliver the website and keep it secure.
Please do not send confidential formulas or special categories of personal data through the website forms. Formulas are exchanged only later, under a separate confidentiality agreement.
Please do not send confidential formulas or special categories of personal data through the website forms. Formulas are exchanged only later, under a separate confidentiality agreement.
Purposes and legal basis
Purposes and legal basis
Responding to your request and preparing a quote: steps taken at your request prior to entering into a contract (Art. 6(1)(b) GDPR).
Performing the services you commission: performance of a contract (Art. 6(1)(b) GDPR).
Complying with tax and accounting obligations: legal obligation (Art. 6(1)(c) GDPR).
Protecting my rights in case of disputes: legitimate interest (Art. 6(1)(f) GDPR).
Responding to your request and preparing a quote: steps taken at your request prior to entering into a contract (Art. 6(1)(b) GDPR).
Performing the services you commission: performance of a contract (Art. 6(1)(b) GDPR).
Complying with tax and accounting obligations: legal obligation (Art. 6(1)(c) GDPR).
Protecting my rights in case of disputes: legitimate interest (Art. 6(1)(f) GDPR).
I do not use your data for newsletters or marketing communications unless you give separate consent.
I do not use your data for newsletters or marketing communications unless you give separate consent.
Who receives the data
Who receives the data
Your data are not sold or disclosed to third parties for their own purposes. They may be processed, on my behalf and only as necessary, by:
Your data are not sold or disclosed to third parties for their own purposes. They may be processed, on my behalf and only as necessary, by:
the website hosting and form provider (Framer);
my email service provider;
my accountant, for invoicing and tax obligations.
the website hosting and form provider (Framer);
my email service provider;
my accountant, for invoicing and tax obligations.
Where a provider processes data outside the European Economic Area, the transfer is based on an adequacy decision or on the European Commission’s standard contractual clauses.
Where a provider processes data outside the European Economic Area, the transfer is based on an adequacy decision or on the European Commission’s standard contractual clauses.
External partners (for example safety assessors or a Responsible Person) receive your data only if you ask me to involve them, and only with appropriate confidentiality arrangements.
External partners (for example safety assessors or a Responsible Person) receive your data only if you ask me to involve them, and only with appropriate confidentiality arrangements.
How long I keep the data
How long I keep the data
Requests that do not lead to an assignment: up to 24 months from the last contact.
Data related to assignments and invoices: for the period required by Italian tax law (generally 10 years).
Requests that do not lead to an assignment: up to 24 months from the last contact.
Data related to assignments and invoices: for the period required by Italian tax law (generally 10 years).
Your rights
Your rights
You can ask to access, correct or delete your data, to restrict or object to their processing and, where applicable, to receive them in a portable format (Articles 15–22 GDPR). To exercise these rights, write to contact@fabriziotodaro.com.
You can ask to access, correct or delete your data, to restrict or object to their processing and, where applicable, to receive them in a portable format (Articles 15–22 GDPR). To exercise these rights, write to contact@fabriziotodaro.com.
You also have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali, www.garanteprivacy.it) or with the supervisory authority of your country of residence.
You also have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali, www.garanteprivacy.it) or with the supervisory authority of your country of residence.
Provision of data
Provision of data
Providing your name, email and the content of your request is necessary to receive a reply. The other fields are optional.
Providing your name, email and the content of your request is necessary to receive a reply. The other fields are optional.
Changes
Changes
I may update this notice. The date at the top shows the latest version.
I may update this notice. The date at the top shows the latest version.