IT

Privacy Policy

Last updated: March 2026

1. Data Controller

Beatrice Randazzo — Make-Up Artist
Email: beatricerandazzo.mua@gmail.com
Varese (VA), Italy

2. Types of Data Collected

Among the Personal Data collected by this site, either independently or through third parties, are:

  • Data voluntarily provided by the User: name, email address, subject, and message sent through the contact form.
  • Data collected automatically (with consent): cookies, usage and browsing data collected through Google Analytics 4 with Enhanced Measurement, including:
    • IP address (automatically anonymized by Google Analytics 4)
    • Browser type and version, operating system, screen resolution
    • Pages visited, visit duration, navigation paths
    • Traffic source and acquisition channel (referral, organic search, direct, social)
    • Approximate geographic location (country, region, city — based on anonymized IP)
    • Browser language
    • Site interactions: scroll (at 90% of page), outbound link clicks, file downloads, internal searches

3. Purpose of Processing

User Data is collected for the following purposes:

  • Contact request management: responding to messages sent through the site's contact form. Legal basis: performance of pre-contractual measures at the request of the data subject (Art. 6.1.b GDPR).
  • Statistical analysis (with consent): understanding how users interact with the site to improve its content and functionality, through Google Analytics 4 with Enhanced Measurement. Legal basis: consent of the data subject (Art. 6.1.a GDPR).

4. Google Analytics 4 and Enhanced Measurement

This site uses Google Analytics 4 (GA4), a web analytics service provided by Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA) — hereinafter "Google".

GA4 is activated only after the User's explicit consent via the cookie banner. Without consent, no analytical cookies are installed and no data is transmitted to Google.

Enhanced Measurement

GA4's Enhanced Measurement feature, active on this site, automatically collects the following events without additional code:

  • Page views (page_view): records every page visited
  • Scrolls (scroll): records when the user scrolls to 90% of the page
  • Outbound clicks (click): records clicks to external domains
  • Site search (view_search_results): records searches made on the site
  • Video engagement (video_start, video_progress, video_complete): records interactions with embedded YouTube videos
  • File downloads (file_download): records file downloads (PDF, documents, etc.)
  • Form interactions (form_start, form_submit): records form start and submission events

IP Anonymization

Google Analytics 4 automatically anonymizes the user's IP address before storage. This feature cannot be disabled in GA4, as it is built into the system.

Data Transfer Outside the EU

Data collected through Google Analytics may be transferred to and stored on Google servers located in the United States. Google LLC adheres to the EU-US Data Privacy Framework, ensuring an adequate level of personal data protection under Art. 45 GDPR. For more information: policies.google.com/privacy.

Data Retention in GA4

User-level and event-level data in Google Analytics 4 is retained for a period of 2 months, after which it is automatically deleted. Aggregated data and reports remain available indefinitely.

5. Methods of Processing

Data is processed using computer and/or electronic tools, with organizational and logical methods strictly related to the stated purposes. In addition to the Data Controller, in some cases, third parties involved in the organization of the site (hosting services, statistical analysis services) may have access to the Data.

6. Data Retention

  • Contact form data: retained for the time necessary to handle the User's request and for a maximum of 12 months thereafter, unless required by law.
  • Analytical data (GA4): retained according to Google Analytics 4 settings (2 months for user/event-level data).
  • Cookies: the duration of each cookie is specified in the Cookie Policy.

7. Data Subject Rights (Arts. 15-22 GDPR)

Users may exercise the following rights at any time:

  • Right of access (Art. 15): obtain confirmation of processing and a copy of the data
  • Right to rectification (Art. 16): correct inaccurate data
  • Right to erasure (Art. 17): request deletion of data
  • Right to restriction (Art. 18): restrict processing in certain cases
  • Right to data portability (Art. 20): receive data in a structured format
  • Right to object (Art. 21): object to data processing
  • Right to withdraw consent (Art. 7.3): withdraw consent for analytical cookies at any time

To exercise your rights, send a request to: beatricerandazzo.mua@gmail.com

Users also have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la Protezione dei Dati Personali) (www.garanteprivacy.it).

8. Cookies

For detailed information about the cookies used by this site, please consult our Cookie Policy.

9. Changes to this Privacy Policy

The Data Controller reserves the right to make changes to this privacy policy at any time, informing Users on this page. Please check this page regularly for any updates.