Privacy Policy

Last Updated: August 6, 2026

At italyoffpath.com, accessible from https://italyoffpath.com, protecting visitor privacy is a core priority. This Privacy Policy outlines the types of information collected and recorded by italyoffpath.com and how it is used, in compliance with the EU General Data Protection Regulation (GDPR).

1. Data Controller

The entity responsible for processing personal data on this website is:

• Website: italyoffpath.com
• Owner/Operator: Malgorzata Kowalewska
• Location: Italy
• Contact Email: priveng42@gmail.com

2. Data We Collect and Why

Data is processed only on valid legal grounds under Article 6 of the GDPR.

A. Server Log Files

Our hosting provider automatically logs standard technical information sent by your browser when visiting the site.

• Data collected: IP address, browser type/version, operating system, referring pages, date/time stamps.
• Legal Basis: Legitimate interest (GDPR Art. 6(1)(f)) to maintain website security, stability, and proper server performance.

B. Comments & Direct Contact

If you leave a comment on a blog post or send an email directly:

• Data collected: Name/pseudonym, email address, IP address, user-agent string, and the content of your message.
• Legal Basis: Consent (GDPR Art. 6(1)(a)) provided when submitting the form or email.
• Retention: Comments and associated metadata are retained indefinitely to recognize and approve follow-up comments automatically. Direct messages are kept only as long as necessary to address your inquiry.

C. Cookies & Consent Management

We use cookies to ensure proper site function and analyze traffic.

• Cookie Management: Non-essential cookies (such as analytics or third-party scripts) are managed via Complianz and are only activated after explicit consent is given via the cookie banner.
• Detailed Cookie Info: For a complete, dynamic list of active cookies on this site, please refer to our dedicated Cookie Policy (EU) page.

3. Third-Party Services

We share minimal necessary data with trusted service providers to run this website:

• Hosting Provider: [e.g., SiteGround / Bluehost / Hetzner] (Processes server logs)
• Consent Management: Complianz (Manages and logs cookie consent preferences locally)
• Analytics: [e.g., Google Analytics / Plausible] (Processes anonymized traffic stats)

We do not sell, rent, or trade your personal information to third parties.

4. International Data Transfers

If any third-party service transfers data outside the European Economic Area (EEA), such transfers are governed by standard contractual clauses approved by the European Commission or equivalent legal safeguards.

5. Your Rights Under the GDPR

You hold the following rights regarding your personal data:

• Right to Access: Request copies of your personal data.
• Right to Rectification: Request corrections to inaccurate or incomplete data.
• Right to Erasure (“Right to be Forgotten”): Request deletion of your personal data under certain conditions.
• Right to Restrict Processing: Request restricted processing of your data.
• Right to Object: Object to data processing based on legitimate interest.
• Right to Data Portability: Request transfer of your data to another provider or directly to you.
• Right to Withdraw Consent: Revoke consent at any time where processing relies on consent.

To exercise any of these rights, contact us at [Your Email Address]. Requests will be addressed within 30 days.

You also have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali) if you believe your data has been handled improperly.

6. Security

We use technical and organizational measures—including site-wide SSL encryption—to protect your personal data against unauthorized access, loss, or alteration.

7. Policy Updates

This Privacy Policy may be updated periodically. Any updates will be published on this page with a revised “Last Updated” date.