Last updated: 3 November 2026

This privacy notice is provided pursuant to Article 13 of Regulation (EU) 2016/679 (GDPR) and describes the processing of personal data belonging to users who visit www.dianablu.it or contact the Data Controller using the contact details provided.

1. Data Controller

The Data Controller is: Diana Avenoso
Professional name: Diana Blu
Email: hello@dianablu.it
You may contact the Data Controller for information about the processing of your personal data and to exercise your rights.

2. Types of personal data processed

Browsing data

Technical data may be collected while you browse the website, including your IP address, browser, operating system, date and time of access, pages requested and information about any errors.

Data provided by users

When contacting the Data Controller, you may provide your name, email address, contact details and other information contained in your message, for example when requesting a quote, proposing a collaboration or enquiring about projects.
Please provide only the information necessary to address your request.

3. Purposes and legal bases

Personal data is processed for the following purposes:

• Operating and protecting the website: processing is based on the Data Controller’s legitimate interest in keeping the website available and secure and preventing misuse, pursuant to Article 6(1)(f) of the GDPR.

• Handling requests for quotes, commissions or collaborations: processing is necessary to take steps at your request before entering into a contract or to perform a contract, pursuant to Article 6(1)(b) of the GDPR.

• Responding to other communications: processing is based on the Data Controller’s legitimate interest in responding to requests received.

• Complying with applicable legal obligations: processing is based on Article 6(1)(c) of the GDPR.

4. Provision of personal data

Providing personal data in communications is voluntary. However, failure to provide essential contact details or information may prevent the Data Controller from responding to or handling your request.
Technical data necessary for browsing is collected automatically.

5. How personal data is processed

Personal data is processed electronically, using appropriate technical and organisational measures to protect it against unauthorised access, loss, alteration or disclosure.

6. Data retention

• Data is retained only for as long as strictly necessary to ensure the operation and security of the website, subject to legal obligations.

• Communications are retained for the time necessary to handle the request and any subsequent clarification.

• If a professional relationship is established, relevant data is retained for its duration and subsequently for the time required to comply with legal obligations or protect the Data Controller’s rights within the applicable time limits.

7. Recipients of personal data

Personal data may be processed by hosting, email, technical support and website maintenance providers, to the extent necessary to deliver their respective services.
Where applicable, these providers act as data processors pursuant to Article 28 of the GDPR. Personal data may also be disclosed to authorities when required by law.

8. Transfers outside the European Economic Area

Where the use of technical services involves transferring personal data to countries outside the European Economic Area, such transfers will be carried out in accordance with the conditions and safeguards required by the GDPR.
For information about the providers involved and the applicable safeguards, you may contact the Data Controller using the contact details provided in this notice.

9. Cookies and external services

For information about cookies and any tracking technologies used by the website, please consult the Cookie Policy.

10. Your rights

In the circumstances and subject to the limits established by the GDPR, you may request access to, rectification or erasure of your personal data, restriction of processing and data portability. You may also object to processing based on legitimate interests.
Where processing is based on consent, you may withdraw that consent without affecting the lawfulness of processing carried out before its withdrawal.
Requests may be sent to hello@dianablu.it.

You may also lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali), following the procedures described at www.garanteprivacy.it.

11. Updates

This notice may be updated to reflect changes to the website, processing activities or applicable legislation. The updated version will be published on this page with the corresponding revision date.