Privacy Policy — SpelmanTax

This Privacy Policy explains how SpelmanTax processes personal data in accordance with Regulation (EU) 2016/679 (“GDPR”) and applicable Italian legislation.

Data Controller: SpelmanTax — Dr. Galja Spelman, Viale Druso 2, 39100 Bolzano. E‑mail: info@spelmantax.com

1. Types of data processed

SpelmanTax processes only the data necessary for communication and the technical operation of the website.

Voluntarily provided data: name, e‑mail address, telephone number, content of messages sent via e‑mail or WhatsApp.

Technical data collected automatically:

IP address
browser and system information
technical logs generated by GitHub Pages

Technical data is used exclusively for security, functionality and system monitoring.

2. Purposes of processing

Data is processed for the following purposes:

responding to requests sent via website, e‑mail or WhatsApp
communication with clients and interested users
fulfilling legal obligations related to professional activity
ensuring IT security and proper website operation
non‑profiling technical monitoring of website usage

No aggressive marketing or profiling is carried out.

3. Legal basis

Processing is based on:

Art. 6(1)(b) GDPR — pre‑contractual measures and handling user requests
Art. 6(1)(c) GDPR — compliance with legal obligations
Art. 6(1)(f) GDPR — legitimate interest (security, prevention of misuse, technical management)

4. Data recipients

Personal data may be shared only with technical service providers:

Google LLC — e‑mail management (Gmail).
GitHub, Inc. / Microsoft Corporation — website hosting via GitHub Pages.

Service providers process data solely for technical support and are bound by confidentiality obligations.

The domain spelmantax.com is managed through Namecheap, which provides registration and DNS services only and does not process any personal data of website users.

5. Transfers outside the EU

Some service providers (Google and GitHub/Microsoft) may transfer data to the United States. Transfers are carried out on the basis of the Standard Contractual Clauses (SCC) approved by the European Commission.

SpelmanTax uses only GDPR‑compliant service providers.

6. Data retention period

E‑mails and communications: stored for 24 months.
Technical logs: managed according to GitHub/Microsoft policies.

Data is stored only for the time necessary for the purposes described.

7. Rights of the data subject

Users may exercise the following rights under the GDPR:

access
rectification
erasure
restriction of processing
objection
complaint to the Data Protection Authority

Requests: info@spelmantax.com

8. Cookies

The website uses only technical cookies necessary for its operation. No profiling, marketing or analytics cookies are used.

No tracking via Google Analytics.

Users may manage cookies through their browser settings.

9. Security

SpelmanTax implements technical and organizational measures to protect personal data: security systems, access controls, and continuous system monitoring.

The technical platforms used by SpelmanTax (Google Workspace, Gmail, GitHub Pages) follow international security standards, including ISO/IEC 27001 certification. This ensures a protected infrastructure and secure data processing.

10. External links

The website may contain links to external pages. SpelmanTax is not responsible for the data processing carried out by third‑party websites.

11. Updates

This Privacy Policy may be updated. The most recent version is always available on this page.