Privacy & cookies
This page describes how personal data is handled and which cookies are used while browsing this site.
Data controller
The data controller is Valentina Damiano, an individual artist and craftsperson, who processes the data collected through this site. As no dedicated email address is published, any privacy-related request — including requests to exercise the rights described below — should be sent solely through the contact page.
Purposes and legal basis for processing
Data collected through this site is processed for the purposes and on the legal basis set out below, according to the type of data involved.
Purpose: to respond to your enquiry and, where applicable, to manage the commission you've requested. Legal basis: performance of pre-contractual steps taken at your request (Art. 6.1.b GDPR), triggered by voluntarily submitting the form.
Purpose: to understand, in aggregate form, how the site is used, in order to improve it. Legal basis: your consent (Art. 6.1.a GDPR), collected via the cookie banner and revocable at any time without affecting the lawfulness of processing carried out beforehand.
Purpose: to protect the commission request form from automated submissions, spam, and abuse. Legal basis: the controller's legitimate interest in the security of the site and fraud prevention (Art. 6.1.f GDPR).
Cookies used
This site uses the following categories of cookies:
Google reCAPTCHA v3, used to protect the contact form from spam. Always active — no consent is required as it is strictly necessary for the form to function.
Google Analytics 4, used in aggregated form to understand how visitors use the site. It is only activated after consent is given via the cookie banner.
Detailed cookie list
The table below summarises the individual cookies this site sets.
| Name | Provider | Purpose | Duration | Consent |
|---|---|---|---|---|
| _ga | Distinguishes users for aggregated statistical analysis | Around 2 years (Google Analytics 4's default value) | Required | |
| _ga_<container-id> | Distinguishes users for aggregated statistical analysis | Around 2 years (Google Analytics 4's default value) | Required | |
| reCAPTCHA cookie (e.g. _GRECAPTCHA) | Distinguishes genuine human traffic from automated/bot traffic on the commission form | No exact duration is published by Google; typically a few months | Not required |
Alongside the cookies listed above, the site stores two technical values in the browser's localStorage (not cookies in the technical sense — they are never sent to the server): your chosen language ('vd-locale') and your cookie preference ('vd-cookie-consent'). Both stay on your device only, until you clear your browsing data.
Data retention periods
Data submitted through the site's forms is retained for as long as needed to handle the request and any resulting relationship with the client. There is no automatic deletion deadline: the data is reviewed periodically and deleted upon request, or in any case once it is no longer needed for the purposes it was collected for, unless a longer retention period is required by law.
User-level and event-level data collected through Google Analytics 4 is retained for 2 months, Google Analytics 4's default retention period (adjustable by the controller up to a maximum of 14 months in Analytics Admin → Data Settings → Data Retention). Aggregated report data is not subject to this limit.
International data transfers
Google Analytics 4 and Google reCAPTCHA are provided by Google LLC, based in the United States. Any transfer of data to the US relies on the safeguards Google has in place, including its participation in the EU-US Data Privacy Framework and/or the use of Standard Contractual Clauses approved by the European Commission. See Google's own privacy policy, linked below, for further detail.
Your rights
As a data subject, you may request the following at any time, within the limits and conditions set out in Articles 15-21 of the GDPR:
- Access to your personal data
- Rectification of inaccurate or incomplete data
- Erasure of your data ("right to be forgotten")
- Restriction of processing
- Portability of your data in a structured format
- Objection to processing
- Withdrawal of consent at any time, without affecting the lawfulness of processing carried out before the withdrawal
To exercise any of these rights, get in touch via the contact page.
Right to lodge a complaint
If you believe the processing of your data breaches applicable law, you have the right to lodge a complaint with the Italian data protection authority (Garante per la protezione dei dati personali), whose website is garanteprivacy.it.
Manage your preferences
You can change your choice at any time and bring back the cookie banner.
Third-party notices
For more details on data handled by Google, see the Google Privacy Policy.
Changes to this notice
This notice may be updated from time to time — for example, if the services used by the site change, or if applicable law changes. We recommend checking back periodically.
Last updated: 12 July 2026