Privacy Policy 

1) Data Controller

The data controller under the GDPR is:

Sylvie Schoch
Address: Via Cristalliera, 2 – 10139 Torino, Italy
Email: privacy@sylvieschoch.com

VAT number: IT13383760017

2) Your rights

You may exercise the following rights at any time:

  • Right of access (Art. 15 GDPR)
  • Right to rectification (Art. 16 GDPR)
  • Right to erasure (Art. 17 GDPR)
  • Right to restriction of processing (Art. 18 GDPR)
  • Right to object (Art. 21 GDPR)
  • Right to data portability (Art. 20 GDPR), where processing is based on consent or a contract

To exercise your rights, please contact the controller at privacy@sylvieschoch.com.

Where processing is based on consent, you can withdraw your consent at any time with effect for the future.

You also have the right to lodge a complaint with a supervisory authority (Art. 77 GDPR). In Italy, the competent authority is:

Garante per la protezione dei dati personali
Piazza Venezia 11, 00187 Rome, Italy
Email: protocollo@gpdp.it – PEC: protocollo@pec.gpdp.it

3) General data collection when visiting the website (server logs)

Nature and purpose of processing

When you visit this website without registering and without submitting forms, technical data is collected automatically (server log files), such as:

  • browser type/version
  • operating system
  • internet service provider
  • IP address
  • date/time of access
  • requested pages/resources and similar technical information

Purposes:

  • ensure a stable and secure connection
  • ensure proper website functionality
  • analyse system security and stability
  • optimise performance and content

Legal basis

Art. 6(1)(f) GDPR (legitimate interests: security, stability, and functionality of the website).

Recipients

Technical service providers (e.g., hosting/maintenance) acting as processors where applicable.

Retention

Server log data is retained only for as long as necessary for the purposes above and then deleted or anonymised (depending on hosting/security configuration).

Requirement

This technical data is necessary for operating and securing the website. Without it, some services may not function reliably.

4) Cookies and tracking technologies

This website uses cookies and similar technologies.

Detailed information on cookie types, purposes, retention periods, and how to manage your preferences is provided in the separate Cookie Policy and/or within the consent management tool (cookie banner), if implemented.

You can change or withdraw your consent for non-essential cookies at any time via the consent tool. Alternatively, you can restrict or delete cookies via your browser settings. Disabling certain cookies may affect website functionality.

5) Contact form and email communication

Nature and purpose of processing

If you use the contact form, we process the data you provide (typically: name, email address, message content, and any additional voluntary details) to:

  • handle your enquiry
  • communicate with you and respond

Legal basis

  • Art. 6(1)(f) GDPR (legitimate interest: handling enquiries)
  • where an enquiry relates to pre-contractual measures (e.g., quote/service request): Art. 6(1)(b) GDPR

Recipients / email service provider (currently Mailchimp)

To send and manage responses and communications, we may use technical service providers. Currently, response/communication emails may be sent via Mailchimp. Where applicable, Mailchimp acts as a processor based on contractual arrangements.

International transfers

Depending on provider location/infrastructure, data may be transferred to third countries (e.g., the United States). In such cases, the safeguards described under “International transfers” apply.

Retention

Contact request data is generally retained for as long as needed to process the enquiry and follow-up questions. As a rule, it is deleted within 6 months after the enquiry is closed, unless legal obligations or legal claims require longer retention.

6) Newsletter (only if enabled)

A newsletter is not currently active. If a newsletter is enabled in the future, the following will apply:

  • processing of subscription details (typically email address) for sending the newsletter
  • double opt-in verification
  • legal basis: Art. 6(1)(a) GDPR (consent)
  • withdrawal at any time via unsubscribe link or by contacting privacy@sylvieschoch.com
  • use of service providers as processors; possible international transfers as described below
  • retention until consent is withdrawn, then deletion

7) Google Analytics (enabled)

Nature and purpose of processing

With your consent, this website uses Google Analytics to analyse website usage (e.g., page views, interactions, session duration) and improve content and performance.

Legal basis

Art. 6(1)(a) GDPR (consent) via the cookie banner/consent tool.

Withdrawal

You can withdraw your consent at any time via the consent tool. You can also disable cookies in your browser. Without consent, cookie-based analytics tracking is not carried out.

International transfers

Depending on configuration and provider infrastructure, data may be transferred to third countries (e.g., the United States). The safeguards described under “International transfers” apply.

8) Third-party content and services (if integrated)

If the website includes third-party content/services (e.g., YouTube, maps, fonts, social integrations), this may involve connections to third-party providers and processing of technical data (e.g., IP address).

Where technically implemented, non-essential third-party content is only loaded after your consent via the consent tool or after an active user action (e.g., “load content”).

9) International transfers (general information)

Where personal data is transferred to countries outside the European Economic Area, such transfers take place only in accordance with GDPR Chapter V, using appropriate safeguards such as:

  • EU Standard Contractual Clauses (SCCs) and/or
  • other applicable mechanisms where relevant.

10) SSL/TLS encryption

This website uses HTTPS/SSL/TLS encryption to protect data transmitted to and from the site.

11) Right to object (Art. 21 GDPR)

Where processing is based on Art. 6(1)(f) GDPR, you may object at any time on grounds relating to your particular situation.

Object by contacting: privacy@sylvieschoch.com

12) Changes to this Privacy Policy

This Privacy Policy may be updated to reflect legal requirements or changes to website services. The version published on the website applies.

13) Contact

Privacy-related questions: privacy@sylvieschoch.com

Version: 2026-01-14 (v2.1)