Privacy Statement

Last updated: July 30, 2026

This privacy statement explains what personal data annabertoldini.com collects, why it is collected, how it is used, and what rights you have over it.

This website is operated by Anna Bertoldini, based in Barcelona, Spain (“I”, “me”, “my”). For any questions about this statement or your data, contact anna@annabertoldini.com.

Who is responsible for your data

I am the data controller for personal data collected through this website, within the meaning of the EU General Data Protection Regulation (GDPR).

• Controller: Anna Bertoldini
• Address: Barcelona, Spain
• Email: anna@annabertoldini.com

What data I collect, and why

1. Information you send me through the contact form

When you complete the contact form, I collect:

• Your name
• Your email address
• How you heard about me
• The type of enquiry you are making
• The details you choose to share about your enquiry

Why: to read, understand and reply to your enquiry, and to keep a record of our correspondence.

Legal basis: your consent, given by submitting the form, and my legitimate interest in responding to enquiries about my work.

Where it goes: submissions are stored in this website’s database and also sent to me by email. Email is delivered through Google Workspace.

How long I keep it: enquiries are retained for as long as needed to respond and to maintain a record of our discussions, and reviewed periodically. You can ask me to delete your enquiry at any time.

2. Website analytics

This site uses Google Analytics 4 to understand how visitors find and use it. This may include:

• Pages viewed and time spent on them
• Approximate location (country or city level)
• Device type, browser and operating system
• How you arrived at the site, such as a search engine or social link
• A truncated version of your IP address

Why: to see which content is useful and improve the site.

Legal basis: your consent. Analytics cookies are only set after you accept them in the cookie banner. If you decline, or if your browser sends a “Do Not Track” or Global Privacy Control signal, analytics tracking is not applied.

I do not use analytics data to identify individual visitors, and I do not combine it with contact form data.

Google acts as a processor for this data and may transfer it outside the European Economic Area. Google relies on the EU-US Data Privacy Framework and standard contractual clauses for those transfers. See Google’s privacy policy.

3. Search performance data

I use Google Search Console to see which search terms lead people to this site. This data is aggregated and anonymous; it does not identify individual visitors.

4. Technical and server data

This website is hosted by Hostinger. Like all web hosts, Hostinger’s servers automatically record technical information when a page is requested, including IP address, date and time, and the page accessed.

Why: to keep the site running securely, diagnose faults and prevent abuse.

Legal basis: my legitimate interest in operating a secure and functioning website.

Cookies

This website uses cookies. Strictly necessary cookies are required for the site to function and to remember your cookie preferences. Statistics cookies are only placed if you consent to them.

You can change or withdraw your cookie choices at any time through the cookie settings on this site.

A full list of the cookies used, their purpose and their duration is in the Cookie Policy.

What I do not do

• I do not sell your personal data. Ever.
• I do not share your data with third parties for their own marketing.
• I do not run advertising on this website.
• I do not use automated decision-making or profiling.
• I do not add you to a mailing list because you contacted me.

Who else processes your data

I use a small number of service providers who process data on my behalf:

• Hostinger: website hosting and server logs
• Google Workspace: email delivery and storage
• Google Analytics and Search Console: website statistics, subject to your consent

Each is bound by their own data processing terms.

Links to other sites

This website links to external platforms including LinkedIn, Instagram and TikTok. Once you follow a link, you are subject to that platform’s own privacy policy. I have no control over how they handle your data.

Children

This website is intended for a professional adult audience. I do not knowingly collect personal data from children under 16. If you believe a child has submitted data through this site, please contact me and I will delete it.

Your rights

Under the GDPR you have the right to:

• Access: request a copy of the personal data I hold about you
• Rectification: ask me to correct data that is wrong or incomplete
• Erasure: ask me to delete your data
• Restriction: ask me to limit how I use your data
• Objection: object to processing based on legitimate interest
• Portability: receive your data in a portable format
• Withdraw consent: at any time, without affecting processing that already took place

To exercise any of these, email anna@annabertoldini.com. I will respond within one month.

If you are not satisfied with my response, you have the right to complain to your national data protection authority. In Spain, this is the Agencia Española de Protección de Datos (AEPD).

Data security

This website is served over an encrypted HTTPS connection. Access to the website’s administration area is protected by strong authentication, and I keep the site’s software updated. No system is perfectly secure, but I take reasonable steps to protect the data I hold.

Changes to this statement

I may update this statement as the website changes. The date at the top shows when it was last revised. Material changes will be noted on this page.

Contact

Questions about this statement or about your data: anna@annabertoldini.com