IT Consultant and Digital Innovator – From code to business strategies.
Always looking for the next big idea.
blog articles
CONTACTS

Privacy Policy

Last updated: October 5, 2026

This information describes the methods of processing the personal data of users who visit and use the site emruocco.com, pursuant to Regulation (EU) 2016/679 (“GDPR”) and applicable Italian legislation on the protection of personal data.

1. Data controller

The Data Controller is:

Enzo Mattia Ruocco
IT Consultant – Freelance
Nova Milanese (MB), Italy
E-mail: itconsulting@emruocco.com

For any information regarding the processing of personal data or to exercise your rights, you can contact the Data Controller via the email address above.

2. Types of data processed

While using the site, the following categories of data may be processed.

Browsing data

The computer systems and software procedures used to operate the site may automatically acquire certain information relating to navigation, including, for example:

  • IP address;

  • type of browser and device used;

  • operating system;

  • pages visited;

  • date and time of the visit;

  • Referrer URL;

  • technical information necessary for the correct functioning and security of the site.

This data is used primarily to ensure the operation, security, and correct delivery of the site.

Data provided voluntarily by the user

The voluntary submission of requests via contact forms, email, telephone, WhatsApp, or other channels indicated on the site entails the processing of the data provided by the user.

This data may include:

  • name and surname;

  • e-mail address;

  • telephone number;

  • company or organization you belong to;

  • information contained in the message;

  • any additional data voluntarily communicated.

Please do not send unnecessary or special category personal data through the site forms, except when strictly necessary.

3. Purposes and legal bases of the processing

Personal data may be processed for the following purposes.

Site operation and security

Technical and navigation data may be processed for:

  • allow navigation on the site;

  • ensure system security;

  • prevent fraudulent or abusive use;

  • identify technical problems and malfunctions.

The legal basis is the legitimate interest of the Data Controller to ensure the security, integrity, and proper functioning of the site.

Contact request management

The data provided by the user is used to respond to requests for information, quotes, consultations, or other communications.

The legal basis is the execution of pre-contractual measures adopted at the request of the interested party or, depending on the nature of the communication, the legitimate interest in responding to the requests received.

Execution of professional assignments and relationships

If the request gives rise to a professional relationship, the data may be processed for:

  • assignment management;

  • customer communications;

  • administration and accounting;

  • billing;

  • tax and regulatory compliance.

The processing is based on the performance of a contract and compliance with applicable legal obligations.

Site statistics and analysis

If analysis tools that require user consent are used, these are activated only after obtaining such consent through the cookie management system.

The information collected may be used to understand, for example:

  • number of visitors;

  • most consulted pages;

  • traffic origin;

  • how to use the site.

The legal basis, when required, is the consent of the interested party.

Marketing and advertising

If the site uses advertising, remarketing, or profiling tools, these tools are activated only with the user's consent, where required by law.

Consent can be modified or revoked at any time through the cookie settings available on the site.

4. Methods of processing

Personal data is processed using computerized tools and, where necessary, manual tools.

Appropriate technical and organizational measures are adopted to protect data from:

  • unauthorized access;

  • loss;

  • destruction;

  • edit;

  • disclosure;

  • illegal or incorrect use.

The processing is carried out according to the principles of lawfulness, fairness, transparency, data minimization and storage limitation.

5. Hosting and site infrastructure

The site is created through WordPress and is hosted through hosting services provided by Aruba.

The infrastructure provider may process technical data necessary for the provision, security, and maintenance of the service, operating in accordance with their respective roles established by data protection legislation.

6. Contact forms, emails and WhatsApp

When the user contacts the Data Controller through a form on the site, by email, or using links to messaging services such as WhatsApp, the data provided is used exclusively to manage the communication and any subsequent activities requested by the user.

The use of external platforms, such as WhatsApp, may involve additional data processing by the relevant provider in accordance with the terms and privacy policies applicable to that service.

7. Google Services

The site may integrate services made available by Google, for example for statistical analysis, site management, advertising or other digital tools.

Depending on the site configuration, services such as:

  • Google Analytics;

  • Google Search Console;

  • Google Tag Manager;

  • Google Ads;

  • Google reCAPTCHA;

  • other Google services strictly connected to the functionality of the site.

Services that involve tracking activities that are not strictly necessary are activated, where required by law, only after obtaining the user's consent.

This section needs to be adapted by eliminating tools that are not actually used on the site.

8. Social networks and third-party content

The site may contain links or integrations with external platforms, such as:

  • LinkedIn;

  • Facebook;

  • Instagram;

  • YouTube;

  • WhatsApp;

  • other social networks or multimedia services.

When you interact with these services, you may be subject to their respective terms and privacy policies.

Where technically possible, any embedded content that involves tracking is only loaded with the user's consent.

9. Cookies and tracking tools

The site may use cookies and similar technologies.

Strictly necessary cookies may be used without consent when essential for the proper functioning of the site.

Possible cookies:

  • statisticians;

  • analytical not comparable to technical;

  • advertisers;

  • profiling;

  • belonging to external services;

Instead, they are managed in accordance with applicable legislation and, when necessary, activated exclusively after the user's consent.

Further information on the cookies used, their duration, suppliers and how to change your preferences is available in the Cookie Policy of the site.

10. Data recipients

Personal data may be disclosed, to the extent strictly necessary, to parties who support the Data Controller in managing the site and its professional activities, including:

  • hosting and IT services providers;

  • cloud service providers;

  • email providers;

  • analytics and marketing platform managers;

  • cybersecurity service providers;

  • tax, administrative or legal consultants;

  • public authorities, when required by law.

These entities operate, depending on the case, as data controllers, independent data controllers, or authorized parties.

Personal data is not sold to third parties.

11. Data transfers outside the European Economic Area

Some technology providers used by the site may process data through infrastructures located outside the European Economic Area.

When such transfers occur, they are carried out in compliance with the conditions set out in the GDPR, based, as appropriate, on:

  • European Commission adequacy decisions;

  • standard contractual clauses;

  • additional guarantees provided by applicable legislation.

12. Retention period

The data is retained exclusively for the period necessary to achieve the purposes for which it was collected.

In particular:

  • technical data is retained for the period necessary for the operation and security of the site;

  • data relating to contact requests are retained for the time necessary to manage the request and any subsequent relationships;

  • data relating to contractual relationships and invoicing are retained for the periods required by tax, civil, and accounting regulations;

  • Data processed on the basis of consent is retained until consent is revoked or until the deadline for the specific processing expires.

At the end of the retention period, the data is deleted or made anonymous, unless further retention is required by law.

13. Nature of the data provision

Providing data through the contact forms is optional.

However, failure to provide the data indicated as necessary may make it impossible to respond to the request or provide the requested service.

For data processed via cookies and non-essential technologies, the user is free to give or deny consent without this preventing normal navigation in the essential sections of the site.

14. Rights of the interested party

In the cases provided for by the GDPR, the interested party can exercise his or her rights, including:

  • obtain confirmation as to whether or not personal data concerning him or her exists;

  • obtain access to your data;

  • request the rectification of inaccurate data;

  • request deletion of data;

  • request limitation of processing;

  • obtain, where applicable, data portability;

  • oppose the processing in the cases provided for;

  • revoke the consent previously given at any time.

The withdrawal of consent does not affect the lawfulness of the processing carried out before the withdrawal.

Requests can be sent to:

itconsulting@emruocco.com

15. Complaint to the Supervisory Authority

If you believe that the processing of your personal data violates applicable law, you have the right to lodge a complaint with:

Guarantor for the protection of personal data

Furthermore, the interested party's right to appeal to the competent judicial authorities remains unaffected.

16. Automated decision-making processes

Unless otherwise indicated in relation to specific services, the data collected through the site are not used for decisions based solely on automated processing capable of producing legal effects or similarly significant consequences for the user.

17. Links to external sites

The site may contain links to third-party websites or services.

The Data Controller does not control how these parties process personal data. Users are therefore encouraged to consult the privacy policies of the relevant external services.

18. Changes to this Privacy Policy

This Privacy Policy may be updated from time to time as a result of:

  • regulatory changes;

  • introduction of new services;

  • changes in treatment modalities;

  • technical changes to the site.

The updated version is posted on this page indicating the date of the last update.