Skip to main content

Silvia Giachini Tiranni

Privacy Policy of sgtiranni.com

Last updated: 22 October 2026

This notice describes how personal data of users who visit the website sgtiranni.com (the "Website") is processed, in accordance with Articles 13 and 14 of Regulation (EU) 2016/679 ("GDPR") and applicable Italian data protection law.

1. Data Controller

The Data Controller is:

Architect Silvia Giachini Tiranni
Address: Via Cardinal Sanfelice 5, 00167 Rome (RM), Italy
VAT number: IT12682081000
Email: arch.giachini@gmail.com

No Data Protection Officer (DPO) has been appointed, as the conditions of Article 37 GDPR are not met.

2. Types of data processed and purposes

a) Browsing data

The IT systems and software procedures that run the Website collect, during normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols: for example IP address, date and time of the request, requested page, outcome of the request, browser type and operating system. This data is processed only to ensure the Website works properly and securely and to establish liability in case of cyber crimes against the Website. It is not used to identify or profile users.

b) Data provided voluntarily by users

The Website has no contact forms, comment areas, user registration or newsletter sign-up. If a user writes spontaneously to the email address shown, the data they provide (email address, name, content of the message) is processed only to reply to the request.

c) Images of people

Project galleries and event pages may contain photographs showing people. Recognisable people are published only with their consent (release); without consent, images are published so that the person cannot be identified (for example, with the face blurred). In some images, to protect the privacy of the people shown, faces have been blurred or replaced with digitally generated images: those faces do not represent real people. Anyone who recognises themselves in an image may ask at any time for it to be removed or blurred by writing to the Data Controller, who will act without delay.

3. Legal basis

  • Browsing data: the Data Controller's legitimate interest in ensuring the security, proper functioning and usability of the Website (Article 6(1)(f) GDPR).
  • Emails sent by users: performance of pre-contractual measures taken at the data subject's request (Article 6(1)(b) GDPR) or, for simple information requests, the legitimate interest in replying (Article 6(1)(f) GDPR).
  • Images of recognisable people: the data subject's consent (Article 6(1)(a) GDPR; Article 96 of Italian Law 633/1941), which can be withdrawn at any time. Withdrawal does not affect the lawfulness of earlier processing.

4. Processing methods and retention

Data is processed using IT and electronic tools, with security measures suited to prevent loss, unlawful use or unauthorised access. Data is kept for as long as needed for the purposes for which it was collected:

  • browsing data (server logs): for no longer than 30 days, unless needed to investigate crimes;
  • emails received: for as long as needed to reply and, if the request does not lead to an engagement, for no more than 24 months; if it leads to a professional relationship, for the period required by law (normally 10 years);
  • images of people: until consent is withdrawn or removal is requested.

5. Recipients of data

Data is not disseminated, sold or transferred to third parties for commercial purposes. It may be processed, as processors under Article 28 GDPR, by:

  • the Website's hosting provider (Hostinger), whose servers are located in Frankfurt (Germany), with backups in France;
  • the email service provider used by the Data Controller (Google, Gmail service);
  • the person in charge of the Website's technical maintenance, who is bound by confidentiality and by the Data Controller's instructions.

Data may also be disclosed to competent authorities where required by law.

6. Transfers outside the EU

Browsing data is stored on servers located in the European Union and is not transferred to third countries. Emails sent to the Data Controller are handled through Gmail: Google may process this data outside the European Economic Area, in particular in the United States, on the basis of the safeguards provided by the GDPR (adequacy decision on the EU-US Data Privacy Framework or standard contractual clauses).

7. Links to third-party websites

The Website contains links to third-party websites and platforms (for example YouTube, Instagram). The Data Controller has no control over those sites and is not responsible for how they process data. Users are encouraged to read their respective notices.

8. Data subject rights

Users have the right to access their data, to have it rectified or erased, to restrict or object to processing, and to data portability (Articles 15-22 GDPR), and to withdraw at any time any consent they have given. To exercise these rights, write to arch.giachini@gmail.com. The Data Controller will reply within one month.

Users also have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali, www.garanteprivacy.it) or with the supervisory authority of their country of residence.

9. Nature of provision and automated decisions

Providing personal data to the email address shown is optional, but necessary to receive a reply. The Data Controller does not use automated decision-making or profiling.

10. Changes

This notice may be updated. The current version is always the one published on the Website, with the date of the last update shown at the top.