Privacy Policy — rnlmkt.com
Pursuant to Articles 13-14 of Regulation (EU) 2016/679 (“GDPR”) and Italian Legislative Decree 196/2003, as amended and supplemented (Legislative Decree 101/2018), as well as the cookie and other tracking-tools guidelines of the Italian Data Protection Authority (Garante per la protezione dei dati personali, 9 July 2021).
1. Data Controller and Contact Details
The Data Controller for the personal data collected through the website rnlmkt.com is:
- Roseline Noemie Lemoine, freelance professional under Italy’s flat-rate (“forfettario”) VAT regime, trading as “RNL-MKT”
- VAT number (Partita IVA): 04156900120
- Registered address: Via Giuseppe Mazzini 72, 21020 Casciago (VA), Italy
- Contact email:
The Controller can be contacted for any request relating to the processing of personal data at the address indicated above.
No Data Protection Officer (DPO) has been appointed, as this is not mandatory under Art. 37 GDPR for the activity carried out.
2. Categories of Data Collected
The website rnlmkt.com collects the following categories of personal data:
- Data voluntarily submitted via the contact form: name, email address, and any message entered by the user in the embedded Google Form in the “Contact” section of the site.
- Technical data automatically collected by the hosting infrastructure (Vercel): IP address, browser and device type, requested pages, access date and time, system logs needed for the operation and security of the site.
- Browsing and statistical analytics data (Google Analytics 4): device/cookie identifier, pages visited, visit duration, traffic source. Collected only after prior consent — see Section 8.
- WhatsApp conversation data: phone number and content of the messages sent by the user who voluntarily chooses to contact the Controller via the WhatsApp link on the site.
3. Purposes and Legal Basis of Processing
| Purpose | Legal basis |
|---|---|
| Responding to contact/quote requests received via the form | Art. 6.1.b GDPR (pre-contractual measures at the data subject’s request) and/or Art. 6.1.f (legitimate interest in responding to business inquiries) |
| Managing the communication voluntarily initiated by the user via WhatsApp | Art. 6.1.a and/or 6.1.b GDPR (consent implied in voluntarily starting the conversation) |
| Statistical analysis of site traffic (Google Analytics 4) | Art. 6.1.a GDPR (explicit consent, collected via the cookie banner before the cookies are activated) |
| Accounting and tax obligations, where the contact gives rise to a contractual relationship | Art. 6.1.c GDPR (legal obligation) |
| Security and proper functioning of the site (technical hosting logs) | Art. 6.1.f GDPR (legitimate interest in IT security) |
4. Processing Methods and Security Measures
Data is processed using electronic and IT tools, with logic strictly related to the purposes indicated above and in such a way as to ensure its security and confidentiality.
rnlmkt.com is a static site with no database of its own for the server-side storage of user data: the data entered in the contact form is stored directly on Google Forms; conversations started via WhatsApp are stored on WhatsApp/Meta’s servers. The Controller adopts the following measures: connection always secured via the HTTPS/TLS protocol; hosting on the Vercel infrastructure with industry-standard security measures; access to the data limited to the Controller alone.
5. Recipients and Transfer of Data to Non-EU Countries
To provide the site and its related services, the Controller uses the following third parties, which may be based or process data outside the European Economic Area (EEA):
- Vercel Inc. (United States) — provider of the site’s hosting infrastructure. Vercel Inc. is certified under the EU-US Data Privacy Framework (DPF), the mechanism recognised by the European Commission as an adequate safeguard for the transfer of data to the United States.
- Google Ireland Limited / Google LLC (United States) — provider of the contact form (Google Forms) and the statistical analytics service (Google Analytics 4). Google adheres to the EU-US Data Privacy Framework and/or applies the Standard Contractual Clauses (SCCs) approved by the European Commission as the legal basis for the transfer of data.
- WhatsApp Ireland Limited / Meta Platforms, Inc. (United States) — messaging service used at the user’s own initiative. The processing of data exchanged via WhatsApp is governed by the WhatsApp/Meta privacy policy, which provides its own safeguards for the international transfer of data.
The Controller does not sell or transfer users’ personal data to third parties for those third parties’ own commercial purposes.
6. Retention Period
Data collected via the contact form is retained for a maximum period of 1 (one) year from the date of the last interaction with the user, unless a longer period is required to fulfil legal obligations (e.g. retention of accounting/tax documentation, according to the terms provided by the applicable legislation).
Analytics data collected via Google Analytics 4 is retained for a maximum period of 14 (fourteen) months.
7. Data Subject Rights
As a data subject, the user has the right, under the conditions provided by Articles 15-22 GDPR, to:
- access their personal data (right of access, Art. 15);
- obtain the rectification of inaccurate data (Art. 16);
- obtain the erasure of data, in the cases provided for (right to be forgotten, Art. 17);
- obtain the restriction of processing (Art. 18);
- obtain the portability of the data (Art. 20);
- object to the processing (Art. 21), in particular for consent-based statistical analysis purposes, which may be withdrawn at any time without affecting the lawfulness of the processing carried out before the withdrawal.
To exercise these rights, the user may contact the Controller at the address indicated in Section 1.
The data subject also has the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali, www.garanteprivacy.it), should they consider that the processing of their personal data has taken place in breach of the applicable legislation.
8. Cookie Policy — Summary
The website rnlmkt.com uses Google Analytics 4 for statistical traffic-analysis purposes. The cookies associated with Google Analytics 4 are non-technical/non-essential and are NOT installed automatically on the first visit: they are activated only following the user’s explicit, freely given, specific and informed consent, expressed via the dedicated cookie banner, in accordance with the Garante’s cookie guidelines (9 July 2021).
The user may withdraw consent at any time as easily as it was given, via the cookie preferences banner on this site, or through their browser's cookie settings.
Indicative cookie table (to be verified and updated according to the actual configuration):
| Cookie name | Provider | Duration | Purpose |
|---|---|---|---|
| _ga | Google Analytics 4 | 2 years | Distinguishes unique users |
| _ga_<container ID> | Google Analytics 4 | 2 years | Maintains the session state |
| _gid | Google Analytics 4 | 24 hours | Distinguishes users in the current session |
9. Changes to This Policy
The Controller reserves the right to modify or update this policy, in whole or in part, including as a result of regulatory changes. The user is invited to consult this page periodically to stay informed of any changes.
Last updated: 1 September 2026.