Last updated: 26 October 2026
This Privacy Policy explains how personal data is collected and used when you visit matrullo.it (the “Website”) or get in touch through it. It is provided in accordance with Articles 13 and 14 of Regulation (EU) 2016/679 (General Data Protection Regulation, “GDPR”) and the Italian Personal Data Protection Code (Legislative Decree 196/2003, as amended).
1. Data controller
The data controller is Gianluca Matrullo, web marketing, advertising and SEO consultant, with registered address at Via Spirito 77, 84090 San Mango Piemonte (SA), Italy. VAT number: IT06402850652.
Email: g@matrullo.it
No Data Protection Officer has been appointed, as one is not required for this activity.
2. Personal data collected
2.1 Browsing data
The systems that run the Website collect, as part of their normal operation, some data whose transmission is implicit in the use of internet protocols, such as IP addresses, browser type, operating system, the pages requested, the date and time of the request and the HTTP response code. This data is used only to keep the Website working, secure and to diagnose technical problems, and is not used to identify users.
2.2 Data you provide voluntarily
When you fill in the contact form or write to the email address shown on the Website, we collect the data you choose to share: your name, email address, the subject and the content of your message, plus any other information you include. Please do not send special categories of data (for example health data) unless strictly necessary.
2.3 Cookies and similar technologies
The Website uses technical cookies and, only with your consent, other cookies. Full details, and the option to change your choices at any time, are available in the Cookie Policy.
3. Purposes and legal basis
| Purpose | Legal basis |
|---|---|
| Replying to your requests sent through the contact form or by email, including arranging appointments (online or in person) and preparing quotes | Steps taken at your request prior to entering into a contract, and the controller’s legitimate interest in replying to messages (Art. 6(1)(b) and (f) GDPR) |
| Running the professional relationship if you become a client, including administrative and accounting obligations | Performance of a contract and compliance with legal obligations (Art. 6(1)(b) and (c) GDPR) |
| Keeping the Website secure, preventing spam and abuse of the contact form | Legitimate interest of the controller (Art. 6(1)(f) GDPR) |
| Establishing, exercising or defending legal claims | Legitimate interest of the controller (Art. 6(1)(f) GDPR) |
| Website usage statistics (Google Analytics 4) and embedded content such as YouTube videos | Your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time |
Your data will not be used for newsletters or marketing communications without your separate, explicit consent.
4. How data is processed
Data is processed with electronic tools, using appropriate technical and organisational measures to prevent loss, misuse and unauthorised access. Providing your data through the contact form is optional, but without it we cannot reply to your request.
5. Recipients and third-party services
Your data is not sold or disseminated. It may be processed, on behalf of the controller and as data processors, by providers that are needed to run the Website and its services, in particular:
- Hostinger – website hosting and email service;
- Cloudflare Turnstile (Cloudflare, Inc.) – protection of the contact form from spam and automated abuse;
- Google Analytics 4 (Google Ireland Ltd.) – anonymous statistics on how the Website is used, activated only if you consent to statistics cookies;
- YouTube (Google Ireland Ltd.) – embedded videos on some pages, loaded according to your cookie preferences;
- professionals and providers that support the controller with accounting, tax or legal obligations, where needed.
The fonts used on the Website are served directly from our own server, so no data is sent to Google Fonts. Data may also be disclosed to public authorities when required by law.
6. Transfers outside the EU
Some providers listed above may process data outside the European Economic Area, in particular in the United States. In these cases transfers take place on the basis of an adequacy decision of the European Commission (such as the EU-U.S. Data Privacy Framework, for certified providers) or of the Standard Contractual Clauses approved by the European Commission.
7. Retention
- Messages and contact requests: for the time needed to handle the request and in any case no longer than 24 months from the last exchange, unless a professional relationship follows.
- Data related to clients: for the duration of the relationship and afterwards for the period required by tax and civil law (usually 10 years).
- Browsing data: for a short period, unless needed to investigate security incidents.
- Cookies: as described in the Cookie Policy.
8. Your rights
Under Articles 15–22 GDPR you have the right to:
- access your personal data and obtain a copy of it;
- have inaccurate data corrected and incomplete data completed;
- have your data erased, where the conditions are met;
- restrict processing;
- receive your data in a structured, commonly used format (data portability);
- object to processing based on legitimate interest;
- withdraw your consent at any time, without affecting the lawfulness of processing carried out before the withdrawal.
To exercise your rights, write to g@matrullo.it. You also have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali) or with the supervisory authority of the EU country where you live or work.
9. Minors
The Website is aimed at professionals and businesses and is not intended for people under 16. We do not knowingly collect data from minors.
10. Changes to this policy
This Privacy Policy may be updated from time to time, for example following changes in the law or in the services used on the Website. The date of the latest update is shown at the top of this page.