Notice provided under Articles 13 and 14 of Regulation (EU) 2016/679. Last updated DD Month YYYY.
This notice covers the riccardobasilio.it website only. Any processing arising from a contractual relationship with Fideuram – Intesa Sanpaolo Private Banking is governed by the notice the bank provides when the relationship is opened, and is separate from what is described here.
The data controller is Riccardo Basilio, with an office at Via del Sale 16D, San Pietro in Vincoli, 48125 Ravenna, Italy.
For requests concerning your data the address is riccardobasilio@pec.it. If you do not have an Italian certified mailbox you can write to rbasilio@fideuram.it, with the same outcome.
No data protection officer has been appointed, as the cases set out in Article 37 of the Regulation do not apply.
The site is hosted on Netlify. It sets no cookies of its own, uses no analytics and profiles nobody. Netlify servers automatically record, for the technical time needed for transmission and security, data such as the IP address, the time of the request and the browser type. This is what every server records in order to work.
The legal basis is the legitimate interest in delivering and protecting the site, under Article 6(1)(f) of the Regulation.
Booking runs on Google Calendar Booking Pages. When you book, your name, your email address, whatever you write in the form and the slot you chose are collected.
This data reaches my calendar and my mailbox, and I process it to arrange the meeting and send you the confirmation. The legal basis is the performance of pre-contractual measures taken at your request, under Article 6(1)(b) of the Regulation. I do not use it to send you marketing and I do not pass it on to anyone.
On the same data Google acts as an independent controller, not as a supplier working on my behalf. It also processes that data for its own purposes, under its own terms of service, and over that part I have no control. If you would rather avoid it, skip the calendar and email me instead, the outcome for you is identical.
If you send me an email I process the address and the content of the message in order to reply. The legal basis is again responding to a request you made.
This site sets no profiling cookies and no cookies at all before you consent. That is why you do not see the banner that appears almost everywhere, as it is not required.
Two parts of the site, the map and the booking calendar, are content provided by Google. They are built so that nothing loads until you ask for it with a click. Before that click Google receives nothing and sets nothing.
The moment you press the button, Google receives your IP address and sets its own cookies, including non-technical ones. Your consent is that click, given after reading the notice shown next to the button.
| What | Who provides it and what it does |
|---|---|
| Map | Google Maps, to show where I meet clients. Activated only on request. Google runs it as an independent controller. |
| Calendar | Google Calendar, to let you pick a slot and book. It opens only if you ask. Google runs it as an independent controller. |
| Record of your choice | An entry stored in your browser, called rb-google-ok, whose only purpose is to remember that you already consented, so you are not asked on every visit. It contains no personal data and is not sent anywhere. |
You can withdraw your consent at any time using the "Withdraw consent" link at the foot of every page. Withdrawal is immediate and returns the site to its initial state.
To understand how Google handles data collected through its services, see the Google privacy policy.
Your data is neither published nor sold. Two external parties are involved, in different roles, and the difference is worth knowing.
Data may also be disclosed to authorities and supervisory bodies where the law requires it.
Some of the providers listed above are based in the United States or transfer data there. Transfers rely on the standard contractual clauses approved by the European Commission and, where applicable, on the provider's certification under the EU–US Data Privacy Framework.
You can ask me at any time to access your data, correct it, delete it, restrict its processing, or receive it in a machine-readable format, and you can object to processing based on legitimate interest. Where processing rests on consent, you can withdraw it without affecting the lawfulness of what was done before.
To exercise these rights write to riccardobasilio@pec.it, or to rbasilio@fideuram.it if you do not have a certified mailbox. I will reply within one month.
If you believe the processing breaches the Regulation you can lodge a complaint with the Italian Data Protection Authority or bring the matter before the courts.
You are not obliged to give me any data. Without a name and an email address, however, a meeting cannot be arranged and a request cannot be answered.
If the tools used by the site change, I will update this page and change the date at the top.