Privacy
Privacy Policy
Last updated: 11 August 2026
This notice is provided under Regulation (EU) 2016/679 (the “GDPR”) and explains how personal data is processed when you visit www.roodabehshahpar.com or submit an enquiry through the website contact form.
1. Data controller
The data controller is Roodabeh Shahpar, Bologna, Italy. For privacy-related requests, you can contact shahpar.roodabeh@gmail.com.
2. Personal data processed
When you use the contact form, the website may collect the data you voluntarily provide, including your name, company (optional), email address and the contents of your message.
During normal browsing, technical data required for the operation and security of the website may also be processed automatically, such as IP address, browser or device information, date and time of the request and connection-related technical data.
The website does not ask you to provide special-category personal data under Article 9 GDPR. Please do not include sensitive information that is not necessary for your enquiry.
3. Purposes and legal bases
Data submitted through the contact form is processed to read, manage and respond to your enquiry, assess potential professional services and carry out related pre-contractual communications. The legal basis is Article 6(1)(b) GDPR, namely taking steps at your request before entering into a contract.
Technical data may be processed to ensure the operation and security of the website, prevent abuse and protect the service. Where applicable, the legal basis for these purposes is the controller's legitimate interest under Article 6(1)(f) GDPR.
Where processing is necessary to comply with a legal obligation, the legal basis will be Article 6(1)(c) GDPR.
4. Whether providing data is required
Providing data through the contact form is voluntary. However, your email address and the contents of your message are necessary to understand and respond to your enquiry. If this information is not provided, it may not be possible to follow up on your request.
5. Hosting, contact form and recipients
The website is hosted on Netlify. Netlify also provides the technical infrastructure used for contact-form submissions and may process submission data and technical information needed to deliver, secure and maintain the service.
Notifications relating to contact-form messages are delivered through the email provider used by the controller. Personal data may therefore be processed, to the extent necessary, by providers supporting website hosting, form handling and email communications.
Personal data is not sold or used by the controller for advertising purposes. Data may be disclosed to authorities, professional advisers or other parties where this is necessary to comply with legal obligations, protect rights or manage a professional relationship.
6. Transfers outside the EEA
Some technology providers may process or store data outside the European Economic Area. Netlify states that, where applicable, its international transfers are governed by mechanisms recognised under the GDPR, including the European Commission's Standard Contractual Clauses and, for transfers to the United States where applicable, the EU-U.S. Data Privacy Framework.
For other providers involved in the processing, transfers are made, where required, on the basis of adequacy decisions or other safeguards under Articles 44 and following of the GDPR.
7. Cookies, analytics and profiling
The website currently does not use third-party web analytics, advertising cookies or profiling cookies. Only technical mechanisms strictly necessary to deliver and secure the website may be used; these do not require prior consent.
For this reason, no cookie-consent banner is displayed in the current configuration. If non-essential analytics, marketing or tracking tools are introduced in the future, this notice and the consent mechanism will be updated before those tools are activated.
8. Data retention
Contact enquiries that do not result in a professional relationship are normally retained for no longer than 12 months after the last relevant communication, unless longer retention is necessary to protect rights or comply with legal obligations.
If an enquiry results in a professional relationship, necessary data may be retained for the duration of that relationship and afterwards for the periods required by applicable law or necessary to establish, exercise or defend legal claims. Technical and security data may be retained by service providers according to their applicable retention periods and for as long as needed for technical and security purposes.
9. Your rights
Where provided by the GDPR, you may exercise your rights of access, rectification, erasure, restriction of processing, objection and data portability. You can exercise these rights by contacting shahpar.roodabeh@gmail.com.
You also have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali) or with the competent supervisory authority in your Member State.
10. Automated decision-making
Personal data collected through this website is not used by the controller for automated decision-making or profiling that produces legal or similarly significant effects on individuals.
11. Changes to this policy
This notice may be updated if the website, the services used or the data-processing practices change. The “Last updated” date above indicates the version currently in force.