Privacy policy

1. Data controller

The data controller is Maria Rosaria Bonelli, a natural person without a VAT number (partita IVA), based in Potenza (PZ), Italy.

For any privacy request:hello@mariarosariabonelli.com.

2. Types of data processed

• Browsing data: IP address, device/browser information, pages visited, date and time — collected in aggregated form via Google Analytics only with consent.
• Data you provide voluntarily: name, email and message sent through the contact form or by email.
• Essential technical data: cookie consent preference stored in the browser (localStorage), with no profiling purpose.

3. Purposes and legal bases

• Running the website (legitimate interest / pre-contractual steps at the data subject’s request): delivering the portfolio pages and responding to contact requests.
• Usage statistics (consent): measuring visits with Google Analytics 4. Without consent, analytics cookies are not enabled.
• Content delivery: site content is also served via the Sanity CMS (portfolio images and text).

4. Cookies and similar technologies

This site uses cookies and local storage. You can change your preferences anytime viaManage cookies.

• Essential: consent preference (localStorage). These do not require consent.
• Analytics: Google Analytics 4 — only after explicit consent.

5. Google Analytics

With your consent we use Google Analytics 4 (Google LLC / Google Ireland Limited) for traffic statistics. Data may be transferred outside the EU; Google applies standard contractual clauses and other measures required by law.

More information:Google Privacy Policy.

6. Contact form and Web3Forms

If you use the contact form, the data you enter (name, email, message) is sent throughWeb3Forms for delivery to the controller’s inbox. Processing is necessary to respond to your request. Messages are kept for as long as needed to handle the conversation and no longer than required by law.

7. Sanity CMS

Editorial content and portfolio images are managed with Sanity. Visitors do not create an account; Sanity processes the requests needed to display the site’s public content.

8. Recipients and transfers

In addition to the controller, technical providers may process data: Google (Analytics), Web3Forms (form delivery), Sanity (CMS), and the site’s hosting provider. Some providers may process data outside the European Economic Area, with appropriate safeguards (e.g. standard contractual clauses).

Links to social profiles (e.g. Instagram) are simple outbound links: those sites’ own privacy notices apply when you open them.

9. Retention

• Cookie preference: until you clear it from the browser or change it.
• Analytics data: according to the controller’s GA4 property settings.
• Contact messages: for as long as needed to handle the request.

10. Your rights

You may exercise the rights under Articles 15–22 GDPR (access, rectification, erasure, restriction, portability, objection, withdrawal of consent) by writing tohello@mariarosariabonelli.com. You also have the right to lodge a complaint with the Italian Data Protection Authority (Garante) (www.garanteprivacy.it).

11. Updates

This notice may be updated for legal or technical reasons. The current version is published on this page.

Last updated: 26 August 2026