Privacy Policy

1. Data Controller

The Data Controller responsible for the processing of personal data collected through this website (www.andreatorretta.com) is:

2. Categories of Personal Data Collected

Depending on how you interact with this website, the following categories of personal data may be collected:

• Inquiries & Contact Form: First name, last name, email address, musical project details, and any information you voluntarily submit in your messages.
• Newsletter & Waitlist: First name and email address provided upon subscribing to "Studio Notes" or masterclass waiting lists.
• Browsing & Technical Data: IP address (anonymized where applicable), browser type, device information, operating system, and session statistics collected automatically for site security and optimization.

3. Purposes and Legal Bases of Processing

Your data is processed strictly for the following purposes:

• Service Inquiries & Pre-contractual Measures (Art. 6.1.b GDPR): To respond to your requests, evaluate production/mix projects, schedule studio sessions, and provide bespoke quotations.
• Newsletter & Priority Enrollment (Art. 6.1.a GDPR): To send you private studio dispatches, educational articles, and priority announcements regarding upcoming masterclasses, only upon your explicit, opt-in consent.
• Legitimate Interest & Security (Art. 6.1.f GDPR): To monitor system performance, prevent spam/fraud (e.g., Honeypot / reCAPTCHA), and maintain website integrity.
• Legal Compliance (Art. 6.1.c GDPR): To fulfill statutory accounting, fiscal, and administrative obligations once a professional engagement is formalized.

4. Third-Party Processors & Data Transfers

Data is never sold or rented to third parties. We may share minimal necessary data with reliable service providers operating as Data Processors:

• Hosting & Infrastructure: Web servers ensuring website availability and security located within the European Union.
• Newsletter Delivery (Mailchimp): Managed in accordance with standard contractual clauses ensuring GDPR compliance for international transfers.
• Spam Protection: Automated filtering systems protecting contact forms from automated bots.

5. Data Retention

Personal data collected for contact requests is retained for as long as necessary to process the inquiry and any subsequent correspondence. Newsletter subscription data is retained until you unsubscribe via the link present in every email. Accounting and billing records are stored for 10 years as required by Italian tax law.

6. Your Rights Under the GDPR

Pursuant to Articles 15–22 of the GDPR, you have the right at any time to:

• Access, verify, and receive a copy of your personal data;
• Request rectification of inaccurate or incomplete information;
• Request the erasure ("right to be forgotten") of your data;
• Withdraw consent previously given for newsletter communications;
• Object to the processing or request restriction of processing;
• Lodge a complaint with a supervisory authority (in Italy: Garante per la Protezione dei Dati Personali).

To exercise any of these rights, simply email: info@andreatorretta.com. Requests are handled promptly and free of charge.