Privacy Policy

This page explains how I handle the personal data of people who visit erikataranto.com or contact me through the site. I keep it plain, but the document has informational value under EU Regulation 2016/679 (GDPR) and, for contacts from Switzerland, the Federal Act on Data Protection (FADP).

Data controller

The data controller is Erika Taranto. You can reach me about anything regarding your data through the channels on the Contact page.

What data I collect

I only collect the data I need to reply and work with you.

• Data you send me via the form: name, brand or company, email, the service you are interested in, an indicative budget and your message.
• Direct contact data, if you write to me on WhatsApp: your number and the content of the conversation.
• Technical and analytics data: the site is static. The hosting provider may log technical data (such as your IP) for security. The site always counts visits in aggregate and without cookies (Google Analytics through Google Tag Manager: page viewed, where you came from, device and browser type, plus technical data such as your IP address, with no identifier stored on your device). Only after your consent are the Google Analytics cookies and Microsoft Clarity (heatmaps and browsing recordings) added. Details in the Cookie Policy.

Why I use your data and on what basis

• To reply and prepare a quote: pre-contractual steps at your request and legitimate interest in getting back to you.
• To contact you again after your request: based on the consent you give by submitting the form.
• To count visits without cookies: legitimate interest in knowing which pages are useful and in keeping the site running.
• For statistics cookies (Google Analytics, Microsoft Clarity): based on your consent.
• For the Google Analytics cookies, if you visit from Switzerland: overriding interest in knowing how the site is used (art. 31 FADP); you can object at any time by switching Statistics off in the cookie preferences. Microsoft Clarity stays based on your consent.
• To meet legal obligations, if a working relationship arises.

I do not use your data for profiling or unsolicited marketing.

Who I share data with

I do not sell or hand over your data. The following may process it on my behalf and only for the purposes described here:

• The contact form provider, which delivers the messages to me.
• The hosting provider that hosts the site.
• Google (Google Tag Manager and Google Analytics) for counting visits, with cookies only after your consent, and Microsoft (Clarity) as an analytics provider, only after your consent.
• Cloudflare, which delivers the site, protects it from attacks and checks the contact form against spam (Turnstile).
• WhatsApp / Meta, if you choose to message me there.
• A trusted partner agency, only if you ask me to put you in touch for strategy, social or marketing.

Where data is processed

Some providers (including Google and Microsoft) may process data outside the European Union. In that case the transfer happens with the safeguards required by the GDPR (standard contractual clauses or adequacy decisions).

How long I keep it

I keep contact data for as long as needed to handle your request and any relationship that follows, and no longer than the described purposes or the law require. You can ask me to delete it at any time.

Your rights

You have the right to access your data, correct it, ask for its deletion or restriction, object to processing, withdraw consent at any time and receive your data in a readable format (portability). You can also lodge a complaint with the supervisory authority (in Italy the Garante per la protezione dei dati personali; in Switzerland the FDPIC).

To exercise these rights, write to me from the Contact page.

Cookies

For the full list of cookies and data stored in your browser, for third-party tools and to change your choice, see the Cookie Policy.

Changes to this notice

I may update this page if the tools I use or the law change. The date above always shows the latest revision.