Privacy Policy

GDPR Documentation – Professional Portfolio of Giulia Governatori

(Version 1.4 – August 2025


  1. Purpose and Scope
    This documentation describes the compliance measures applied to the portfolio website: https://giulia-governatori.alwaysdata.net
    It covers:
  • the collection and minimal processing of personal data via the native WordPress contact form (protected by Google reCAPTCHA);
  • the exclusive use of strictly necessary and functional cookies, including those required for consent management and the display of embedded content;
  • compliance with the GDPR and the French Data Protection Act (“Informatique & Libertés”).

  1. Data Controller
    Controller & DPO: Giulia Governatori – giuliagovernatori@hotmail.com

  1. Categories of Data Processed
SourceCategoriesExample
WordPress contact formName, e-mail, message“Hello…”
Google reCAPTCHATechnical identifiersIP address, browser data, behavior
YouTube (embedded video)Usage, preferences, analyticsVideo viewing history, IP
Complianz, WordPressConsent status, session infocmplz_status, wordpress_test_cookie

No sensitive data (art. 9 GDPR) is collected. Messages sent via the contact form are transmitted by e-mail to the site administrator and are not stored in the database by default.


  1. Purposes and Legal Bases
PurposeLegal Basis
Responding to contact requestsExplicit consent (checkbox)
Protection against spam (reCAPTCHA)Legitimate interest + consent
Consent management (Complianz)Legal obligation (GDPR)
Embedded video playback (YouTube)Consent (opt-in, via banner)
Website operation (WordPress cookies)Legitimate interest (strictly necessary)

  1. Collection Methods
  • Native WordPress contact form, protected by Google reCAPTCHA
  • Complianz cookie banner for collecting and storing user consent
  • Embedded YouTube videos (only loaded after consent is given)

  1. Data Retention Periods
DataDurationProcedure
E-mails (contact form)12 monthsAutomatic deletion by e-mail rule
reCAPTCHA cookies (e.g., NID)1–6 monthsExpire automatically in user’s browser
YouTube cookies (e.g., YSC)Session to 8 monthsExpire automatically in user’s browser
Complianz consent cookie12 monthsDeleted automatically after expiration
WordPress technical cookiesSession/short-termDeleted after session or short period

  1. Recipients and Transfers
  • Giulia Governatori (receives and replies to e-mails)
  • AlwaysData SAS (EU hosting) for the website and associated database
  • Google Ireland Ltd. (reCAPTCHA, YouTube) as a third-party service provider
    No intentional transfer of personal data outside the EU, except as required by Google for service provision (see Google’s privacy policy).

  1. Security & Anonymization
  • HTTPS (TLS 1.3) for all site traffic
  • Outlook protected by 2FA, dedicated folder for contact messages
  • Google reCAPTCHA and YouTube embed data are transmitted securely to Google servers
  • Automatic deletion of e-mails and cookie expiration

  1. Data Subject Rights
    Access, rectification, erasure, objection: contact giuliagovernatori@hotmail.com (response ≤ 30 days)

  1. Cookie Policy
CookieProviderCategoryDurationPurpose
cmplz_statusComplianzFunctional12 monthsStore user consent preferences
wordpress_test_cookieWordPressTechnicalSessionCheck if browser supports cookies
NID, 1P_JAR, CONSENT, etc.Google (reCAPTCHA)Third-party/Security1–6 months/variesPrevent spam, security
YSC, VISITOR_INFO1_LIVE, PREF, etc.YouTubeThird-party/Embedded videoSession to 8 monthsVideo playback, preferences, stats

No Google Analytics. No marketing cookies are set by this website. Third-party cookies from Google and YouTube are only set after explicit user consent.


  1. Data Breach
    5-step procedure: detection → qualification → CNIL notification ≤ 72h → information of users if high risk → corrective measures

  1. Record of Processing Activities (extract)
IDActivityDataDurationLegal Basis
RT 01Contact request handlingName, e-mail, message12 monthsConsent
RT 02Consent managementConsent status12 monthsLegal obligation (GDPR)
RT 03reCAPTCHA protectionTechnical identifiersup to 6 monthsLegitimate interest + consent
RT 04Embedded YouTube videosUsage data, preferencesSession to 8 monthsConsent (opt-in)

DPO Contact: giuliagovernatori@hotmail.com