Privacy & Cookie Policy

Privacy & Cookie Policy | Isabel De Lorenzo ← Back to website

Website: www.isabeldelorenzo.net · Last updated: October 12, 2026

This page explains how personal data of visitors to www.isabeldelorenzo.net (the “Website”) is processed, and how cookies and similar technologies are used. It is provided pursuant to Articles 12–14 of Regulation (EU) 2016/679 (“GDPR”), Legislative Decree 196/2003 (Italian Privacy Code, as amended), Article 5(3) of Directive 2002/58/EC (“ePrivacy Directive”) and the Italian Data Protection Authority’s Guidelines on cookies and other tracking tools of 10 June 2021.Contents

Who we are (Data Controller)
Personal data we collect
Purposes and legal bases
Processing methods, security and automated decisions
Who we share your data with
Data received from third parties
Where we send your data
How long we retain your data
Data breach procedures
Your rights
Cookie Policy
Embedded content and external links
Minors
Additional information
Changes to this policy
Contact

1. Who we are (Data Controller)

The Website address is https://www.isabeldelorenzo.net. The Data Controller is Isabel De Lorenzo, based in Rome, Italy.

Email: isabeldelorenzo@gmail.com

The Website is operated for the promotion of the artistic, teaching and cultural activities of the Data Controller (dance performance, classes, workshops, cultural projects). No Data Protection Officer (DPO) has been appointed, as this is not required under Article 37 GDPR for this type of processing.

2. Personal data we collect

2.1 Browsing data

The IT systems and software procedures that operate the Website acquire, during normal operation, some personal data whose transmission is implicit in the use of Internet protocols. This includes IP addresses, browser type and version, operating system, device type, domain names and addresses of the requested resources (URI), time of the request, method used, size of the response file, response status code, and other parameters relating to the operating system and the user’s IT environment. This data is used only to obtain anonymous statistical information on Website use, to ensure its correct functioning and security, and to ascertain responsibility in case of hypothetical cybercrimes against the Website.

2.2 Contact forms and emails

If you contact us through a contact form or by email (for example to invite Isabel for a festival, workshop, intensive or private session, or to propose a collaboration), we collect the data you provide: name, email address, phone number (if provided) and the content of your message. This data is used only to reply to your request.

2.3 Newsletter

If you subscribe to the newsletter, we collect your email address and, where requested, your first name, in order to send you updates on performances, classes, workshops and events.

2.4 Comments (where enabled)

If comments are enabled on any page of the Website and you leave a comment, we collect the data shown in the comment form, as well as your IP address and browser user agent string, to help with spam detection. An anonymized string created from your email address (a “hash”) may be provided to the Gravatar service to check whether you use it. The Gravatar privacy policy is available at automattic.com/privacy. After approval of your comment, your profile picture (if any) is visible to the public in the context of your comment.

2.5 User accounts (where applicable)

Where user accounts exist (for example for the Website administrator or any registered users), the information provided in the user profile is stored. Registered users can see, edit or delete their personal information at any time (except their username). Website administrators can also see and edit that information.

2.6 Cookies and similar technologies

See the Cookie Policy section below.

Providing data is optional, but failure to provide it may make it impossible to answer your request, to publish your comment or to send you the newsletter.

3. Purposes and legal bases of processing

Purpose	Legal basis (GDPR)
Operating the Website, ensuring its security and technical functioning	Legitimate interest of the Controller (Art. 6(1)(f))
Responding to enquiries, invitations and collaboration or booking requests sent by the user	Pre-contractual measures taken at the user’s request and/or legitimate interest (Art. 6(1)(b) and (f))
Sending the newsletter	Consent (Art. 6(1)(a)), which can be withdrawn at any time
Publishing and moderating comments, and spam detection	Consent given by submitting the comment, and legitimate interest in protecting the Website from spam (Art. 6(1)(a) and (f))
Managing user accounts, where applicable	Performance of a request by the user and legitimate interest (Art. 6(1)(b) and (f))
Use of non-technical cookies (analytics, embedded third-party media, marketing), where present	Consent (Art. 6(1)(a) and Art. 122 Privacy Code)
Compliance with legal obligations (e.g. tax, accounting, requests from authorities)	Legal obligation (Art. 6(1)(c))
Establishing, exercising or defending legal claims	Legitimate interest (Art. 6(1)(f))

The Website does not intentionally collect special categories of personal data (Art. 9 GDPR). Please do not include such data in your messages or comments.

4. Processing methods, security and automated decisions

How we protect your data. Data is processed by electronic means and, where necessary, on paper, with logic strictly related to the purposes stated above. We apply appropriate technical and organizational measures to guarantee security and confidentiality and to prevent unauthorized access, loss, alteration or misuse, including encrypted connections (HTTPS), regular software updates, access controls, and the use of reputable hosting and service providers.

Automated decision-making and profiling. The Controller does not carry out fully automated decision-making or profiling of users that produces legal effects or similarly significantly affects them (Art. 22 GDPR). The only automated processing is the technical spam filtering of comments and forms described in this policy.

5. Who we share your data with

Personal data is not sold and is not disclosed to the public, except for comments you choose to publish. It may be accessed, only to the extent necessary for the stated purposes, by:

the website hosting provider and the technical maintenance and web design providers, acting as Data Processors under Art. 28 GDPR;
automated spam detection services used to check comments and form submissions;
the Gravatar service (Automattic), limited to a hash of your email address, if you leave a comment;
the email and newsletter service providers used by the Controller;
professional advisors (e.g. accountants, legal counsel) bound by confidentiality;
public authorities, where required by law.

An updated list of Data Processors can be requested at any time by writing to the contact address below.

6. Data received from third parties

As a rule, we collect personal data directly from you. We may receive your data from third parties only in limited cases, for example when you contact us through the pages or profiles of partner organizations, event organizers or social media platforms (such as San Lo’ Dance Studio, Roma Tribal Meeting, Facebook or Instagram) and your request is forwarded to us, or when we receive public information needed to handle a collaboration. In such cases, we process the data only to follow up on that request.

7. Where we send your data

Data is processed mainly within the European Economic Area. Some service providers (for example email, newsletter, video-sharing, spam-detection or social media platforms) may be located outside the EEA, including in the United States. In such cases, transfers take place only on the basis of an adequacy decision of the European Commission (including the EU–US Data Privacy Framework for certified companies), Standard Contractual Clauses, or another safeguard provided for by Chapter V of the GDPR.

8. How long we retain your data

Browsing and server log data: kept for a limited period, generally not exceeding 12 months, unless needed to investigate security incidents.
Messages and contact requests: kept for the time necessary to handle the request and for up to 24 months afterwards, unless a longer period is required to follow up on a collaboration or contract.
Newsletter data: kept until you unsubscribe or withdraw consent.
Comments and their metadata (where enabled): kept for up to 24 months from your last interaction with the Website, so that follow-up comments can be recognized and approved without moderation, unless you ask for earlier deletion.
User account data: kept until the account is deleted.
Accounting and tax records: kept for the period required by law (generally 10 years).
Cookies: for the durations indicated in the Cookie Policy.

9. Data breach procedures

In the event of a personal data breach, the Controller will assess the risk to the rights and freedoms of the individuals concerned. Where required, the breach will be notified to the Italian Data Protection Authority (Garante) within 72 hours of becoming aware of it (Art. 33 GDPR), and affected individuals will be informed without undue delay where the breach is likely to result in a high risk to them (Art. 34 GDPR). All breaches are documented internally.

10. Your rights

Under Articles 15–22 GDPR you have the right to:

obtain confirmation of whether your personal data is being processed and access it, including receiving an exported file of the data we hold about you;
request rectification of inaccurate data and completion of incomplete data;
request erasure of your data (“right to be forgotten”) in the cases provided by law. This does not include data we are obliged to keep for administrative, legal or security purposes;
request restriction of processing;
receive your data in a structured, commonly used and machine-readable format (data portability);
object, at any time, to processing based on legitimate interest;
withdraw your consent at any time, without affecting the lawfulness of processing carried out before withdrawal (for the newsletter, you can also use the unsubscribe link in each email).

To exercise your rights, write to isabeldelorenzo@gmail.com. Requests will be answered within one month, extendable by two further months in cases of particular complexity.

You also have the right to lodge a complaint with the supervisory authority. In Italy this is the Garante per la protezione dei dati personali (Piazza Venezia 11, 00187 Rome – www.garanteprivacy.it), or with the authority of your EU country of habitual residence, work or where the alleged violation occurred.

11. Cookie Policy

11.1 What are cookies?

Cookies are small text files that websites send to your device, where they are stored and then sent back to the same site on your next visit. Similar technologies (such as local storage, pixels and scripts) work in a comparable way. In this policy, the term “cookies” includes all of them.

11.2 Categories of cookies used

a) Technical (strictly necessary) cookies. These are essential for the Website to function (for example, to ensure security, manage login sessions, balance server load or store your cookie choices). They do not require your consent under Art. 122 of the Privacy Code, and they cannot be disabled through the Website’s systems, though you may block them in your browser (which may affect how the Website works).

b) Functionality cookies. If you leave a comment, you may opt in to saving your name, email address and website in cookies, so you do not have to fill in your details again next time. These are set only if you tick the corresponding box.

c) Analytics cookies. Where the Website uses analytics tools to understand how visitors use it (pages visited, time spent, etc.), these are used in aggregated form. If the tool is configured to anonymize IP addresses and to prevent cross-referencing with other data, it is treated as a technical cookie. Otherwise, it is activated only after you give consent.

d) Third-party / embedded content cookies. The Website may embed content from third-party platforms, such as YouTube videos (artistic works and performances), and links or widgets from Facebook, Instagram, Flickr. These providers may set their own cookies and collect data (such as IP address and browsing behavior) when you play or interact with the embedded content. They are activated only after you give consent, or when you click on the content.

e) Profiling / marketing cookies. The Website does not use its own profiling or advertising cookies. Third-party providers of embedded content (see above) may nevertheless use such cookies according to their own policies.

11.3 Cookies in detail

Category	Provider / cookie	Purpose	Duration	Consent required
Technical	This Website (WordPress): test cookie	Checks whether your browser accepts cookies. Contains no personal data	Session (discarded when the browser is closed)	No
Technical	This Website (WordPress): login cookies	Save login information for users and administrators who log in	2 days; 2 weeks if “Remember Me” is selected. Removed on logout	No
Technical	This Website (WordPress): screen options cookies	Save display preferences of logged-in users	1 year	No
Technical	This Website (WordPress): post editing cookie	Indicates the ID of the article just edited by a logged-in user. Contains no personal data	1 day	No
Technical	This Website: cookie preference cookie	Stores your cookie consent choices	Up to 6 months	No
Functionality	This Website (WordPress): comment cookies	Remember your name, email and website for future comments, if you opt in	1 year	Yes (opt-in)
Analytics	This Website or analytics provider	Aggregated statistics on Website use	Up to 24 months (depending on tool)	Only if not anonymized
Embedded video	YouTube (Google Ireland Ltd.)	Playing embedded videos; may collect usage data	Session up to 13 months	Yes
Social media	Facebook / Instagram (Meta Platforms Ireland Ltd.), Flickr	Social links and embedded content	According to provider policy	Yes

The exact cookies set may vary over time depending on the plugins and embedded content in use. For the up-to-date details of third-party cookies, please refer to the providers’ policies listed in section 12.

11.4 How to manage or withdraw consent

Through the Website: when you first visit, a cookie banner allows you to accept, refuse or customize your choices. You can change or withdraw your consent at any time by deleting the cookies stored in your browser and reloading the Website, which will display the banner again, or through the cookie settings link, where available.
Through your browser: you can block or delete cookies in your browser settings. Instructions:
Third-party advertising preferences: you can manage personalized advertising choices at www.youronlinechoices.eu.

Your consent choice is stored for up to 6 months, after which you may be asked again, in line with the Italian Data Protection Authority’s guidelines. Refusing or closing the banner does not prevent you from browsing the Website.

12. Embedded content and external links

Pages on this Website may include embedded content from other websites (for example videos, images or other media). Embedded content from other websites behaves in the exact same way as if you had visited the other website. These websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that content, including if you have an account and are logged in to that website.

The Website also contains links to external websites and services, including San Lo’ Dance Studio (sanlo.it), Roma Tribal Meeting (romatribal.com), FatChanceBellyDance® (fcbd.com), Linktree, YouTube, Facebook, Instagram and Flickr. The Controller is not responsible for the privacy practices or content of these third-party sites. When you leave the Website, we recommend reading their privacy policies:

Google / YouTube: policies.google.com/privacy
Meta (Facebook, Instagram): facebook.com/privacy/policy
Flickr: flickr.com/help/privacy
Linktree: linktr.ee/s/privacy
Gravatar / Automattic: automattic.com/privacy

13. Minors

The Website is not directed at children under 14. The Controller does not knowingly collect personal data from minors under 14 without the consent of the person holding parental responsibility (Art. 2-quinquies Italian Privacy Code). If you believe a minor has provided personal data, please contact us and the data will be deleted.

14. Additional information

The Controller is not subject to any industry-specific regulatory disclosure requirements regarding personal data beyond those set out in this policy and in applicable data protection law. Data may be disclosed to the competent authorities where required by law or in response to a lawful request.

15. Changes to this policy

This policy may be updated to reflect legal, technical or organizational changes. The latest version is always available on this page, with the date of the last update shown at the top. Significant changes will be highlighted on the Website.

16. Contact

For any question about this Privacy & Cookie Policy or to exercise your rights, please contact:

Isabel De Lorenzo
Rome, Italy
Email: isabeldelorenzo@gmail.com