{"id":3,"date":"2026-01-30T20:18:25","date_gmt":"2026-01-30T20:18:25","guid":{"rendered":"https:\/\/antoniocolonna.com\/?page_id=3"},"modified":"2026-10-09T20:06:04","modified_gmt":"2026-10-09T20:06:04","slug":"privacy-policy","status":"publish","type":"page","link":"https:\/\/www.antoniocolonna.com\/en\/privacy-policy\/","title":{"rendered":"Privacy Policy"},"content":{"rendered":"
\n\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

Privacy Policy<\/h1>\n\n

Last updated:<\/strong> October 9, 2026<\/p>\n\n

\nPursuant to Regulation (EU) 2016\/679 (\u201cGDPR\u201d) and Legislative Decree\n196\/2003, as amended by Legislative Decree 101\/2018, this Privacy Policy describes how the personal data of users who visit\nhttps:\/\/www.antoniocolonna.com<\/strong>\nor contact ANTONIO COLONNA<\/strong> through the channels available on the website are processed.\n<\/p>\n\n

1. Data controller<\/h2>\n\n

The Data Controller is:<\/p>\n\n

\nANTONIO COLONNA<\/strong>
\nVia Annibale Maria di Francia 66
\n70022 Altamura (BA), Italy
\nEmail:\nart@antoniocolonna.com<\/a>
\nWebsite:\nhttps:\/\/www.antoniocolonna.com<\/a>\n<\/p>\n\n

2. Types of data processed<\/h2>\n\n

\nThe following categories of personal data may be processed, depending\non the services used and the manner of interaction with the site.\n<\/p>\n\n

\na) Identification and contact details<\/strong>
\nName, surname, email address, telephone number, postal address and any other data voluntarily provided by the user in messages, information requests, appointment requests, quotes or communications sent to the Data Controller.\n<\/p>\n\n

\nb) Data relating to requests, appointments and contractual relationships<\/strong>
\nData contained in requests for information, consultations, quotes, appointments, orders, bespoke work, repairs, appraisals, experiences in the workshop, pre- and post-sales assistance, as well as data necessary for the administrative, accounting and fiscal management of the relationship.\n<\/p>\n\n

\nc) Navigation data<\/strong>
\nThe computer systems and software procedures responsible for the functioning of the website may acquire, during their normal operation, certain data the transmission of which is implicit in the use of Internet protocols, such as IP addresses, technical identifiers of the device, data related to the browser, operating system, time of the request, pages visited and technical logs.\n<\/p>\n\n

\nd) Data collected via cookies and similar tools<\/strong>
\nThe site uses technical cookies and, according to the preferences expressed\nby the user, statistical tools, measurement systems, pixels,\ntags, scripts and other tracking tools, as described in the Cookie Policy.\n<\/p>\n\n

\nSome tools can operate, before consent is given for the optional categories, in a limited mode without using the cookies normally used for full measurement. The behavior of individual services is described in the following sections and in the Cookie Policy.\n<\/p>\n\n

\ne) Data provided for promotional and newsletter purposes<\/strong>
\nIf the user chooses to subscribe to the newsletter or receive\npromotional communications, the data necessary for sending these\ncommunications and managing the related preferences may be processed.\n<\/p>\n\n

\nf) Data relating to interactions with external services<\/strong>
\nWhen the user clicks on links to external services, such as WhatsApp, TidyCal, social profiles, external customer areas, or other platforms linked to the Data Controller\u2019s services, the data processing may continue in accordance with the privacy and cookie policies of the respective providers.\n<\/p>\n\n

3. Purposes of the processing and legal bases<\/h2>\n\n

Personal data is processed for the following purposes.<\/p>\n\n

\na) Management of user requests<\/strong>
\nTo respond to requests for information, consultations, appointments,\nquotes, business contacts or assistance.
\nLegal basis:<\/strong>\nexecution of pre-contractual measures adopted at the request of the data subject, pursuant\nto Article 6, paragraph 1, letter b) of the GDPR.\n<\/p>\n\n

\nb) Performance of the contractual relationship and related obligations<\/strong>
\nTo manage orders, sales, bespoke work, services, appointments,\nassistance, warranties, repairs, shipments, and any other\nactivity related to the execution of the relationship with the customer.
\nLegal basis:<\/strong>\nExecution of a contract or pre-contractual measures\npursuant to Art. 6, Par. 1, letter b) of the GDPR.\n<\/p>\n\n

\nc) Compliance with legal obligations<\/strong>
\nTo fulfill regulatory, fiscal, accounting,\nadministrative or orders from competent authorities.
\nLegal basis:<\/strong>\ncompliance with a legal obligation pursuant to Article 6, paragraph\n1, letter c) of the GDPR.\n<\/p>\n\n

\nd) Site security and protection of the Data Controller's rights<\/strong>
\nTo ensure the security of the site, prevent abuse, spam,\nmalfunctions, or unauthorized access, as well as to ascertain,\nexercise, or defend a right in judicial or extrajudicial proceedings.
\nLegal basis:<\/strong>\nlegitimate interest of the Data Controller pursuant to Article 6, paragraph\n1, letter f) of the GDPR.\n<\/p>\n\n

\ne) Sending promotional communications and newsletters<\/strong>
\nWith the prior consent of the data subject, to send informational and promotional communications by email or other means of contact, including invitations to events and updates on the Data Controller\u2019s services, creations, initiatives or content.
\nLegal basis:<\/strong>\nconsent of the data subject pursuant to Article 6, paragraph\n1, letter a) of the GDPR.\n<\/p>\n\n

\nf) Statistical analysis and site improvement<\/strong>
\nTo understand how users use the site, improve content, structure, navigation, performance, functionality, and the quality of the browsing experience. Some statistical tools may operate in a limited mode before consent and switch to full measurement after consent regarding the Statistics category.
\nLegal basis:<\/strong>\nconsent of the data subject pursuant to Article 6,\nparagraph 1, letter a) of the GDPR, where required by applicable law.\n<\/p>\n\n

\ng) Marketing, conversion measurement and promotional activities<\/strong>
\nTo measure the effectiveness of communication activities and promotional campaigns, monitor relevant interactions with the site and improve marketing activities. The full functionality of advertising, attribution, profiling and remarketing is used with consent, where required.
\nLegal basis:<\/strong>\nconsent of the data subject pursuant to Article 6,\nparagraph 1, letter a) of the GDPR for activities subject to consent.\n<\/p>\n\n

\nh) Cookie consent management<\/strong>
\nTo record and respect the preferences expressed by the user\nthrough the cookie banner, also through technical cookies\nnecessary for storing the choices made.
\nLegal basis:<\/strong>\ncompliance with regulatory obligations and legitimate interest\nin the proper technical management of consent.\n<\/p>\n\n

\nThe provision of data for the purposes referred to in letters a), b) and c) is necessary in order to be able to respond to the user\u2019s requests or to properly execute the contractual relationship and the legal obligations.\n<\/p>\n\n

\nThe provision of data for promotional purposes and for activities that require consent is optional; failure to provide such consent will not affect your ability to browse the website or use the main services.\n<\/p>\n\n

4. Method of processing<\/h2>\n\n

\nThe processing of personal data takes place using paper, computer and telematics tools, in accordance with logics strictly related to the indicated purposes and in compliance with the principles of legality, correctness, transparency, minimization, accuracy, integrity, confidentiality and limitation of retention.\n<\/p>\n\n

\nThe Data Controller adopts appropriate technical and organizational\nmeasures to protect personal data from unauthorized\naccess, loss, disclosure, alteration or destruction.\n<\/p>\n\n

5. Services and tools used by the website<\/h2>\n\n

\nFor the operation of the site, the management of requests,\nperformance measurement and communication activities,\nthe site uses or may link to the following services and tools.\n<\/p>\n\n

5.1 WordPress, hosting and technical infrastructure<\/h3>\n\n

\nThe site is built with WordPress and uses hosting, maintenance, security, caching, backup, and technical management services necessary for the proper functioning of the pages and the connected services.\n<\/p>\n\n

5.2 Complianz<\/h3>\n\n

\nThe website uses Complianz<\/strong> for the management\nof the cookie banner, the collection of consent preferences\nand the technical storage of the choices expressed by the user.\n<\/p>\n\n

5.3 Google Tag Manager<\/h3>\n\n

\nThe website uses Google Tag Manager<\/strong>\nto centrally manage some scripts,\nmeasurement tools, and third-party services.\n<\/p>\n\n

\nGoogle Tag Manager allows you to manage, among others, Google Analytics 4, Microsoft Clarity, Microsoft Advertising UET and Meta Pixel according to the technical configuration of the site and the consent preferences expressed by the user.\n<\/p>\n\n

5.4 Google Consent Mode v2<\/h3>\n\n

\nThe website uses Google Consent Mode v2<\/strong>\nto communicate to Google services the state of consent\nexpressed by the user through the cookie banner.\n<\/p>\n\n

\nDepending on the preferences expressed by the user, the analysis, measurement and marketing tools can operate in full mode, limited mode or remain deactivated.\n<\/p>\n\n

5.5 Google Analytics 4<\/h3>\n\n

\nThe website uses Google Analytics 4<\/strong>,\nthrough Google Tag Manager, to collect statistical data on the use of the pages and on the interaction events configured on the site.\n<\/p>\n\n

\nBefore the Statistics consent, Google Analytics 4 can operate in a limited mode without using Analytics cookies. After the Statistics consent, it can switch to the full measurement provided by the service configuration.\n<\/p>\n\n

5.6 Microsoft Clarity<\/h3>\n\n

\nThe website uses Microsoft Clarity<\/strong>\nto analyze the navigation experience of users, also\nthrough heat maps, clicks, scrolling, and\ntechnical recordings of interactions with the pages.\n<\/p>\n\n

\nBefore consent is granted, Clarity can operate in limited mode without using its own analytics cookies. After consent is granted, it can switch to the full collection provided by the service.\n<\/p>\n\n

\nThe tool is configured to respect the user\u2019s\nconsent preferences and must not be used to\ncollect sensitive data entered in forms.\n<\/p>\n\n

5.7 Microsoft Advertising \/ Universal Event Tracking (UET)<\/h3>\n\n

\nThe website uses Microsoft Advertising Universal Event Tracking (UET)<\/strong>,\nthrough Google Tag Manager, to measure visits, interactions and conversions and to evaluate the effectiveness of promotional activities.\n<\/p>\n\n

\nUET may process technical information related to the visit and interaction with the site, such as the page URL, the origin of the visit, technical information about the browser and device, and configured measurement events.\n<\/p>\n\n

\nBefore the Marketing consent, Microsoft Advertising UET\ncan operate in a limited mode without using\nadvertising cookies.\n<\/p>\n\n

\nAfter consent from Marketing, the service can use cookies and identifiers provided by the platform for complete measurement, attribution, and remarketing functionality.\n<\/p>\n\n

\nThe consent state is transmitted to Microsoft UET\nthrough the configuration of the Consent Mode\nintegrated with Google Tag Manager.\n<\/p>\n\n

5.8 Meta Pixel \/ Facebook Pixel<\/h3>\n\n

\nThe website uses Meta Pixel<\/strong>,\nthrough Google Tag Manager, to measure some\nuser interactions with the site.\n<\/p>\n\n

\nThe monitored events may include, for example, page views, clicks on WhatsApp, telephone and email links, clicks to the appointment booking system, and successful newsletter form submissions, where configured.\n<\/p>\n\n

\nMeta Pixel and the related marketing events\nare activated after the Marketing consent.\n<\/p>\n\n

5.9 Mailchimp<\/h3>\n\n

\nThe website uses Mailchimp<\/strong>\nfor the management of the newsletter and the\ncommunications sent to users who voluntarily choose\nto subscribe.\n<\/p>\n\n

\nSubscription to the newsletter takes place through confirmation by\nthe user in accordance with the procedures provided for by the service.\n<\/p>\n\n

5.10 TidyCal<\/h3>\n\n

\nThe site contains links to\nTidyCal<\/strong> or other external\nappointment booking systems.\n<\/p>\n\n

\nWhen the user clicks on such links and accesses the external service, the processing of data is also governed by the privacy and cookie policies of the relevant provider.\n<\/p>\n\n

5.11 WhatsApp, phone, email and social media profiles<\/h3>\n\n

\nThe site contains links that allow the\nuser to contact the Data Controller via WhatsApp, phone,\nemail, or social media profiles.\n<\/p>\n\n

\nThe simple connection present on the website does not, per\nse, involve the installation of third-party\ncookies by the external service.\n<\/p>\n\n

\nWhen the user clicks on the link and accesses the external service, the processing of data is also governed by the information provided by the relevant provider.\n<\/p>\n\n

5.12 YouTube<\/h3>\n\n

\nThe site contains embedded videos from\nYouTube<\/strong>.\n<\/p>\n\n

\nVideos are blocked when the required consent is not yet available and can be displayed after the user\u2019s acceptance or interaction, according to the consent system configuration.\n<\/p>\n\n

5.13 Google Fonts<\/h3>\n\n

\nThe site uses fonts provided by\nGoogle Fonts<\/strong> configured\nto be hosted locally on the site server.\n<\/p>\n\n

\nIn this way, a direct call to Google's\nservers for the loading of the\ncharacters is not normally made.\n<\/p>\n\n

5.14 Google Search Console<\/h3>\n\n

\nThe website uses Google Search Console<\/strong>\nfor the management of indexing,\nmonitoring of presence in search engines and verification\nof the status of the site.\n<\/p>\n\n

\nThe service is used for technical and SEO purposes, such as verifying domain ownership, sending sitemaps, monitoring indexing, and analyzing any scanning errors.\n<\/p>\n\n

\nWhen verification is carried out using DNS records or other equivalent technical methods, this tool does not, per se, involve the installation of profiling or marketing cookies on the user\u2019s device.\n<\/p>\n\n

5.15 Payments via Stripe<\/h3>\n\n

\nFor the payment of the amounts due,\nthe site may direct the user to a payment\npage managed by Stripe<\/strong>.\n<\/p>\n\n

\nStripe processes the data necessary to complete the payment, prevent fraud and manage the transaction in accordance with its Privacy Policy.\n<\/p>\n\n

\nAntonio Colonna receives only the data and transaction outcome necessary to manage the request and comply with administrative and tax obligations.\n<\/p>\n\n

\nThe payment card data are entered directly\non the page managed by Stripe and are\nnot processed through antoniocolonna.com.\n<\/p>\n\n

5.16 Cloudflare Turnstile<\/h3>\n\n

\nThe website uses Cloudflare Turnstile<\/strong>,\nprovided by Cloudflare, Inc., as an anti-bot security measure to protect the site's modules from automated submissions, spam, abuse, and potentially harmful activities.\n<\/p>\n\n

\nTo perform the verification, Turnstile can process technical signals related to the connection and the device, such as IP address, User-Agent and other technical parameters necessary for the verification.\n<\/p>\n\n

\nThe processing carried out by the Data Controller through Turnstile is based on the legitimate interest in the security of the site and in the prevention of abuse, pursuant to Article 6, paragraph 1, letter f) of the GDPR.\n<\/p>\n\n

\nThe Turnstile is configured on the site in mode\nInvisible<\/strong> and performs the\nverification in the background normally without\nrequiring any visible interaction from the user.\n<\/p>\n\n

\nFor more information, please consult the\n\nCloudflare Turnstile Privacy Addendum\n<\/a>.\n<\/p>\n\n

5.17 Google reCAPTCHA<\/h3>\n\n

\nSome features or modules of the site may be used\nGoogle reCAPTCHA<\/strong> as a technical security\nmeasure against spam, abuse and automated traffic.\n<\/p>\n\n

\nThe service may process technical information necessary\nfor verification, such as data related to the\nbrowser, device, and connection.\n<\/p>\n\n

\nThe service is used for security and site\nprotection purposes.\n<\/p>\n\n

6. Recipients of the data<\/h2>\n\n

\nPersonal data may be disclosed, to the\nextent strictly necessary for the purposes set out above, to:\n<\/p>\n\n