GIAMPIERO ZITO / PRIVACY

Privacy notice

Updated 28 September 2026

Notice under Article 13 of Regulation (EU) 2016/679 (GDPR), covering visits to giampierozito.com, contact requests and appointments arranged through this website.

1. Controller and contact details

The data controller is Giampiero Zito, Via Pasquale Di Domenico, 54, 84013 Cava de’ Tirreni (SA), Italy. For privacy enquiries and requests: privacy@giampierozito.it. This mailbox is hosted by Aruba.

2. Personal data collected

We process information you provide: first and last name, email address, website or LinkedIn profile, messages and other professional details you choose to share. Appointment information also includes the date, time and details needed to organise the meeting.

The systems delivering this website and its embedded services may process IP addresses, browser and device information, server requests and technical security data. Analytics tools collect information about visits and interactions according to the applicable preferences.

Please do not include health information, other particularly sensitive information or unnecessary third-party personal data in your messages.

3. Purposes and legal bases

Service enquiries and appointments: responding and taking pre-contractual steps at your request (Article 6(1)(b) GDPR).
Other professional correspondence: responding to proposals and messages, based on the legitimate interest in following up incoming enquiries (Article 6(1)(f)).
Operation and security: delivering the website and preventing abuse, based on the legitimate interest in protecting systems (Article 6(1)(f)).
Optional analytics: understanding website use on the basis of consent (Article 6(1)(a)).
Legal requirements: meeting applicable obligations (Article 6(1)(c)).

Submitting a form or booking an appointment does not automatically subscribe you to a newsletter or constitute consent to promotional communications.

4. Required fields and professional reference

Fields marked as required must be completed to submit the form. A website or LinkedIn profile is requested to understand the professional context of your enquiry and help assess it. This link does not provide conclusive identity verification.

If you prefer not to provide this reference, you can use the other contact channels on the website. Declining analytics does not prevent browsing or sending an enquiry.

5. Services and recipients

Data may be accessed by the controller and, as necessary, authorised persons and service providers:

HubSpot: contact forms, CRM enquiry management and analytics. The embedded form communicates directly with HubSpot infrastructure.
Calendly: availability, bookings and appointment communications. The calendar loads when you request to open it.
OpenAI Sites and its hosting infrastructure: website publication, delivery and security.
Aruba: the privacy mailbox and domain services; Google/Gmail, where used for professional correspondence.

Providers act under the roles and agreements applicable to their services. Data may also be disclosed to advisers or authorities where necessary to meet legal obligations or protect rights. It is not published on this website.

Links to LinkedIn, Instagram and Telegram open external services governed by their own privacy notices.

6. International processing

Cloud services may involve access or transfers outside the European Economic Area, including the United States. A European HubSpot account region does not rule out such processing.

HubSpot and Calendly publish data processing agreements providing transfer safeguards, including standard contractual clauses and, where applicable, mechanisms based on adequacy decisions. The conditions depend on the provider and service. You may contact the controller for information about recipients and applicable safeguards, including how to obtain a copy.

References: HubSpot DPA and Calendly DPA.

7. Retention

Enquiries not followed by an engagement: 24 months after the enquiry is closed.
Appointments not followed by an engagement: 24 months after the appointment.
Professional engagements: for the duration of the engagement and subsequently for the period required by applicable obligations or necessary to protect rights, limited to relevant data.
Technical and security data: as needed to deliver services, diagnose faults and manage incidents; periods depend on provider systems and the time needed to resolve those events.
Preferences and analytics: as described below. Cookie expiry does not necessarily mean that data already transmitted to a service is deleted.

At the end of the applicable period, data must be deleted or anonymised, unless further retention is justified by legal obligations or the protection of rights. Contact the privacy email address for information about retention of your data.

The “Privacy preferences” control in the footer lets you accept or decline loading the HubSpot analytics script and change your choice. Your preference is stored in browser localStorage under gz-hubspot-consent-v1 and treated as valid for 180 days, after which you will be asked again. You can remove it by clearing this website’s browser data.

HubSpot documents analytics cookies including __hstc and hubspotutk (6 months), __hssc (30 minutes) and __hssrc (session). These are provider-declared durations, not a certified inventory of cookies present on every visit. See the current HubSpot documentation.

The form and calendar are embedded services and may make technical requests to their providers. Calendly presents its own preferences: opening the calendar is not general consent to tracking. Read the HubSpot and Calendly privacy notices. You can contact us by email without using these services.

9. Your rights

Where applicable under the GDPR, you may request access, rectification, erasure, restriction and portability; object to processing based on legitimate interests; and withdraw consent without affecting the lawfulness of earlier processing. Write to privacy@giampierozito.it. Requests are normally answered within one month; any extensions permitted by law will be communicated.

You may lodge a complaint with the Italian Data Protection Authority or another competent supervisory authority.

10. Updates

This notice may be updated when services or processing change. The date on this page identifies the published version.