Data Privacy Policy

This Data Protection Policy applies to all personal data collected and processed by RC Claudio Rocchio. Under Regulation (EU) 2016/679 (the "GDPR") and the Luxembourgish law, we act as a "data controller" for the personal information processed through this website and during the performance of our web development services.

1. Who is responsible for your data?

The data controller responsible for the processing of your personal data is:

2. Personal data we collect about you

We may collect and process the following categories of information:

• Identity and Contact Data: Your name, email address, phone number, and any other details you provide when submitting an inquiry through our contact forms or by directly contacting us via email or phone.
• Technical and Usage Data: Your IP address, browser type, operating system, page views, and website navigation patterns, collected automatically via server logs or analytics tools when you browse our website.
• Project and Billing Data: Address details, company information, VAT details (if applicable), banking information, and correspondence history related to the performance of our web development, visual design, or SEO contracts.

3. How we use your personal data

We process your personal data under the following legal bases and for the following purposes:

• Performance of a Contract: To manage quotes, process invoices, execute project milestones, and deliver custom websites, visual branding assets, or SEO configurations.
• Consent: To respond to your questions or information requests submitted via the contact form on our website. You can withdraw your consent at any time by contacting us.
• Legitimate Interest: To secure and monitor our website, prevent fraud, test systems, analyze traffic patterns, and optimize the user experience of our visitors.
• Legal Obligation: To comply with our legal, accounting, and tax duties under Luxembourgish commercial law.

4. Security and Storage of your data

We are committed to taking appropriate technical and organizational measures to protect your personal data against unauthorized processing, accidental loss, alteration, or disclosure. All connection traffic to our website is encrypted via SSL/HTTPS protocols.

Our servers and data infrastructures are hosted by OVH (OVH Groupe SA) within the European Union (France/Germany), ensuring that your personal data is subject to the strict security frameworks of the GDPR. We only retain your personal data for as long as necessary to fulfill the purposes outlined in this policy or to comply with statutory accounting retention periods under Luxembourg law (typically up to 10 years for invoice records).

5. Cookies or other tracking technologies

To improve our services and analyze how visitors navigate our site, we may use cookies or similar tracking technologies:

• Strictly Necessary Cookies: Required to enable standard website navigation and security features. These cannot be disabled.
• Performance and Analytics Cookies: Collect anonymous, aggregated information on which pages are visited most frequently and how users interact with the content, helping us refine our site's layout. We do not use these cookies to identify individual users.

You can choose to configure your browser to block or delete cookies. However, blocking essential cookies may impact your ability to navigate the site smoothly.

6. Sharing of your personal data

We do not sell, rent, or trade your personal data with third parties for marketing purposes. Your personal data is only shared with trusted service providers to ensure business operations:

• Hosting and infrastructure providers (specifically **OVH**).
• Tax, legal, and accounting authorities, in accordance with applicable legal duties.

7. Your rights under the GDPR

You have the following rights regarding your personal data processed by us:

• Right of Access: Obtain confirmation of whether your data is being processed, and request a copy of your personal data.
• Right to Rectification: Request correction of inaccurate or incomplete personal data.
• Right to Erasure ("Right to be Forgotten"): Request deletion of your data when it is no longer necessary for the purposes collected, or when you withdraw your consent.
• Right to Object and Restrict Processing: Request restriction of processing under certain legal criteria or object to processing based on our legitimate interests.
• Right to Data Portability: Request that your data be provided in a structured, machine-readable format to be transferred to another controller.

To exercise any of these rights, please contact us directly at info@claudiorocchio.com. We will respond to your request within one (1) month.

8. Filing a Complaint

If you believe that the processing of your personal data violates the GDPR regulations, you have the right to file an official complaint with the national supervisory authority in Luxembourg:

9. Updates to this Policy

We reserve the right to periodically update this Data Protection Policy to reflect changes in legal requirements or our internal processing activities.

This Policy was last updated on: May 19, 2026.