Data Processing Record (pursuant to Article 30 GDPR)
| Item | Description |
|---|---|
| Data Controller | Andrea Pauletto ā paulettoandrea92@gmail.com |
| Purpose of Processing |
– Responding to user inquiries via contact form – Anonymous statistical analysis of web traffic (Google Analytics) – Display of advertising (Google AdSense) – Conversion tracking for Amazon affiliate program |
| Data Subjects | Website visitors |
| Categories of Data Processed | Name, email, IP address, technical browsing data, cookie preferences |
| Legal Basis for Processing |
– User consent (Art. 6.1.a GDPR) – Legitimate interest of the controller (Art. 6.1.f GDPR) – Legal obligation (Art. 6.1.c GDPR) for cookie consent management |
| Data Recipients |
– Google LLC (Analytics, AdSense, Search Console) – Amazon Europe (affiliates) – Website hosting provider – Complianz B.V. (cookie banner management) |
| Data Retention Period |
– Contact form: max 12 months – Statistical data: 14 months (Google Analytics) – Advertising cookies: max 13 months (AdSense) – Amazon affiliate cookie: approx. 24 hours |
| Transfers Outside the EU | Yes, to the U.S. via Google and Amazon, covered by Standard Contractual Clauses (SCC) |
| Security Measures |
– HTTPS connection – Restricted access to email inboxes – Secure hosting with regular backups – Updated and monitored plugins |
