Privacy Policy

Last updated: 16 June 2026.

This notice explains, in a clear and cautious way, how personal data is processed through Andrea Sanna's official website, available at https://www.andreasanna.art.

Data controller

The data controller is Andrea Sanna. Privacy-related requests can be sent to info@andreasanna.art.

Purposes of processing

Data may be processed to reply to requests sent through the contact form, allow website browsing, maintain technical security and produce aggregate statistics through Google Analytics GA4 only after the user's consent.

Data processed

The site may process data voluntarily submitted through the contact form, such as first name, last name, email, subject and message. During browsing, technical data necessary for site operation may also be processed. Analytics cookies and related data are used only if the user gives consent.

Legal basis

Processing contact form data is based on the user's request. Google Analytics GA4 is used on the basis of consent. Strictly technical processing required for security and site operation is based on the controller's legitimate interest.

Recipients and third-party services

Data may be processed by technical providers needed to operate the site, including Aruba for hosting, Google Analytics for aggregate statistics after consent and FormSubmit/FormSubmit.co for contact form handling.

Retention

Data submitted through the contact form is retained for the time needed to handle the request and any resulting relationship. Technical data is retained for periods compatible with site security and operation. Cookie preferences remain stored in the browser until changed or deleted by the user.

Data subject rights under Articles 15-22 of the GDPR

In accordance with Articles 15 to 22 of Regulation (EU) 2016/679 (GDPR), the data subject may exercise the rights of access, rectification, erasure, restriction of processing, objection, data portability and the other rights provided by applicable law.

The user may exercise, in the cases and within the limits provided by applicable law, the rights of access, rectification, erasure, restriction of processing, objection and data portability. The user may also withdraw consent where processing is based on consent, without affecting the lawfulness of processing carried out before withdrawal.

The user may also lodge a complaint with the competent supervisory authority if they believe that personal data is being processed in breach of applicable law.

Withdrawing cookie consent

Analytics cookie consent can be changed or withdrawn at any time through the Cookie Preferences link in the footer.

Withdrawal does not affect the lawfulness of processing carried out before withdrawal.