Privacy Policy
Last updated: 10/11/2026
This Privacy Policy explains how personal data of visitors to the website www.tarantinomarchesi.com (the “Website“) is processed, in accordance Regulation (EU) 2016/679 (“GDPR“) and Italian Legislative Decree No. 196/2003, as amended by Legislative Decree No. 101/2018 (the “Italian Privacy Code“).
The Website is purely informational and is intended to present our professional work. It does not include contact forms, user accounts, newsletters or any other tools for the active collection of personal data.
1. Joint controllers
The Website is operated jointly by the following joint controllers pursuant to Article 26 GDPR (each a “Controller” and together the “Controllers“, “we“, “us“):
Martina Marchesi, architect registered with the Order of Architects of Milan (Ordine degli Architetti di Milano) under No. 21605, VAT No. 11642120965, Tax Code MRCMTN94T60F205S, domiciled at Via Mauro Macchi 89, 20124 Milan, Italy.
Cecilia Tarantino, architect registered with the Order of Architects of Ancona (Ordine degli Architetti di Ancona) under No. 149, VAT No. 02878880422, Tax Code TRNCCL95R65I608I, domiciled at Via Brodolini 22, Ostra (AN), Italy.
The Controllers jointly determine the purposes and means of the processing described in this Privacy Policy.
You may exercise your rights under the GDPR in respect of and against each of the Controllers (Article 26(3) GDPR). For any request concerning the processing of your personal data, you can contact us at:
2. Personal data we process, purposes and legal bases
2.1 Browsing data
The IT systems and software used to operate the Website collect, during their normal operation, certain data whose transmission is inherent in the use of Internet communication protocols. This includes, for example, your IP address, browser type and operating system, the date and time of your request, the pages visited and the server response code. This data is recorded in the server logs kept by our hosting provider.
We process this data for the following purposes:
- to ensure the technical functioning and security of the Website and to establish liability in the event of cybercrime;
- to obtain aggregated statistics on the use of the Website (for example, number of visits and most viewed pages), through the statistics tool provided by our hosting provider and generated from the server logs. This tool does not use cookies or other technologies that store information on your device, and we do not use it to identify individual visitors;
- to establish, exercise or defend our rights in legal proceedings.
The legal basis for this processing is our legitimate interest in keeping the Website secure and operational, in understanding, in aggregated form, how it is used and in protecting our rights (Article 6(1)(f) GDPR).
Server logs are retained for 12 months after which they are deleted, unless a longer retention period is necessary for the investigation of criminal offences or, in the event of legal proceedings, until they are concluded.
2.2 Data you provide voluntarily
The Website displays our contact details ([email / telephone]). If you choose to contact us using these details, we will process the personal data you share with us (such as your name, email address, telephone number and the content of your message) in order to respond to your enquiry.
The legal basis for this processing is the performance of pre-contractual measures taken at your request (Article 6(1)(b) GDPR) or, for general enquiries, our legitimate interest in responding to the communications we receive (Article 6(1)(f) GDPR).
This data is retained for as long as necessary to handle your enquiry and, if no professional engagement follows, for no longer than 24 months from our last contact. If a professional engagement follows, the retention periods set out in the relevant privacy notice and applicable law will apply.
With your consent (Article 6(1)(a) GDPR), we may also use your contact details to invite you to events and presentations relating to our work. If you are our client, we may do so without your consent, based on our legitimate interest (Article 6(1)(f) GDPR and Article 130(4) of the Italian Privacy Code), unless you object. You can withdraw your consent or object at any time by writing to us. We keep your data for this purpose until then, and for no longer than 24 months from our last contact.
Where necessary, we may also use this data to establish, exercise or defend our rights in legal proceedings, based on our legitimate interest (Article 6(1)(f) GDPR and, for special categories of data, Article 9(2)(f) GDPR). In this case, it is kept until the proceedings are concluded.
We kindly ask you not to send us special categories of personal data (Article 9 GDPR) unless strictly necessary.
3. Cookies and similar technologies
The Website does not use cookies, and does not use analytics, advertising or profiling tools.
The Website only uses the following technical items stored in your browser’s session storage (sessionStorage), which are necessary for the Website to work as intended, do not contain personal data and are automatically deleted when you close your browser:
| Name | Technology | Purpose | Duration |
| wpEmojiSettingsSupports | sessionStorage | Technical check performed by WordPress to verify whether your browser supports emoji | Session |
| tmPreviousOpening | sessionStorage | Prevents the same opening image of the homepage carousel from being repeated | Session |
Under Article 122 of the Italian Privacy Code and the Italian Data Protection Authority’s Cookie Guidelines of 10 June 2021, these technical items do not require your consent. You can delete them at any time through your browser settings.
5. Recipients of personal data
Your data may be disclosed, to the extent strictly necessary, to the following parties acting as processors under Article 28 GDPR:
- OVH SAS, 2 rue Kellermann, 59100 Roubaix, France, which provides the Website’s hosting services and the related statistics tool;
- Aruba S.p.A., Via San Clemente 53, 24036 Ponte San Pietro (BG), Italy, which provides our email hosting and management services.
Your data may also be processed by the Controllers’ collaborators who have been authorised to process personal data and, where required by law, disclosed to the competent authorities.
Personal data is not disseminated or sold to third parties.
6. Transfers outside the European Economic Area
Personal data is processed within the European Economic Area (EEA) and is not transferred to third countries.
7. Your rights
As a data subject, you have the right, in the cases provided for by the GDPR, to:
- access your personal data (Article 15);
- have inaccurate data rectified (Article 16);
- have your data erased (Article 17);
- restrict the processing of your data (Article 18);
- receive your data in a portable format (Article 20);
- object at any time, on grounds relating to your particular situation, to processing based on our legitimate interest (Article 21);
- withdraw your consent at any time and object to receiving invitations (Articles 7(3) and 21(2)).
To exercise your rights, please send a request to the contact details set out in Section 1. You may address your request to either or both Controllers. We will respond without undue delay and in any event within one month of receipt of your request, subject to extension in the cases provided for by Article 12 GDPR.
You also have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali, www.garanteprivacy.it) or with the supervisory authority of the EU Member State in which you habitually reside, work, or where the alleged infringement took place.
8. Provision of data
Browsing the Website involves the processing of the browsing data described in Section 2.1, which is necessary for the technical operation of the Website. Providing data through our contact details is optional; however, if you do not provide it, we will not be able to respond to your enquiry.
Consent to receive invitations is optional.
We do not carry out automated decision-making, including profiling, within the meaning of Article 22 GDPR.
9. Changes to this Privacy Policy
We may update this Privacy Policy from time to time, for example to reflect changes in the law or to the Website. The updated version will be published on this page, together with the date of the latest update.