LEGAL

Privacy Policy

Last updated: 23 September 2026

This website is a personal professional portfolio operated by Serena Ledda. This Privacy Policy explains how personal data are handled when you visit the website or contact Serena through the contact form.

1. Data controller

The data controller is Serena Ledda. For privacy-related requests, you can write to hello@serenaledda.com.

2. Personal data collected

When you use the contact form, the website may collect the information you choose to provide, including your name, company or brand, email address, phone number if provided, and the content of your message.

Technical information necessary to deliver and secure the website may also be processed automatically by the hosting provider, such as IP address, request metadata and security logs.

3. Purposes and legal bases

• To receive, assess and reply to professional enquiries and to take steps requested by you before a possible professional collaboration.
• To operate, protect and maintain the security of the website and contact form.

The processing is based, as applicable, on steps taken at your request before entering into a potential professional relationship and on the legitimate interest in operating and securing the website and managing incoming professional communications.

4. Service providers and international transfers

The website is hosted on Netlify and uses Netlify Forms to receive contact-form submissions. Netlify may process personal data on behalf of the website operator as a service provider. Netlify states that its Data Processing Agreement is incorporated into its self-service terms and that it uses recognised safeguards, including Standard Contractual Clauses, for relevant international transfers.

You can read Netlify's own privacy information on its official website.

5. Data retention

Contact-form messages are kept only for as long as reasonably necessary to respond to the enquiry and manage any related professional discussion. If the enquiry does not lead to an ongoing professional relationship, the data are normally deleted within 12 months, unless a longer period is required for legal or security reasons.

6. Your rights

Depending on the circumstances, you may have the right to request access to your personal data, rectification, erasure, restriction of processing, objection to processing and data portability. You also have the right to lodge a complaint with the competent data protection supervisory authority.

7. No profiling or marketing automation

This website does not use the contact-form data for automated decision-making or profiling and does not subscribe visitors to newsletters or marketing communications through the form.

8. Updates

This policy reflects the current website setup. It will be updated if the website, service providers or the legal/business setup change.

9. Contact

For any privacy request: hello@serenaledda.com.