Last updated: 28 September 2026
Who I am
This website is operated by Barbara Sbrocca. The website address is https://sbrocca.com.
For the purposes of the General Data Protection Regulation (GDPR), Barbara Sbrocca is the data controller.
You can contact me through the contact page on this website.
What personal data I collect
When you use the contact form, I collect the information you choose to provide, including:
- your name;
- your email address;
- the main reason for contacting me;
- any information included in your message;
- confirmation that you have read this Privacy Policy and consented to the processing of your data.
The website’s hosting and security systems may also process limited technical information, such as your IP address, browser information, and the date and time of your request. This information may be used to operate and protect the website and to prevent spam or misuse.
This website does not currently allow public user registration, comments or the uploading of media by visitors.
Contributions and support through PayPal
This website contains links that allow visitors to support Baci Sospesi through PayPal. When you follow one of these links, you leave this website and complete the transaction directly on PayPal’s platform. PayPal processes your personal and financial data according to its own Privacy Statement.
Following a PayPal transaction, I may receive information made available by PayPal, such as your name, email address, the amount and date of the voluntary contribution, the transaction reference, any message you include and, where applicable, delivery information. I do not receive your complete card or bank account details.
I use this information only to acknowledge and record your contribution, respond to any message connected with it and, where applicable, contact eligible patrons and arrange the delivery of a screenprint offered as a personal gesture of gratitude. Transaction information may also be retained where required by applicable law.
PayPal operates as an independent data controller for the personal data it processes through its services.
Why I use your data
I use your personal data only when necessary to:
- read and respond to your message;
- manage enquiries concerning my artistic work, Baci Sospesi, collaborations, installations, artworks or The Italian Reading Room;
- contact you about Baci Sospesi if you have specifically asked to receive updates;
- take steps requested by you before entering into a professional agreement or transaction;
- maintain the security and proper functioning of the website.
Depending on the nature of your request, the legal basis for processing is your consent, the taking of pre-contractual steps at your request, or my legitimate interest in protecting and operating the website securely.
You may withdraw your consent at any time by contacting me through the contact page on this website.
How the contact form works
The contact form is created using Forminator. Form submissions are stored in the website’s WordPress database and are also sent to me by email.
Access to this information is restricted and used only for the purposes described in this policy.
How long I retain your data
Ordinary contact enquiries are retained for up to twelve months after the last relevant exchange.
If your message leads to a collaboration, commission, purchase, coaching relationship or other professional arrangement, relevant information may be retained for longer when required for communication, contractual, administrative, accounting or legal purposes.
If you ask to receive updates about Baci Sospesi or my artistic activity in general, your contact details may be retained until you withdraw that request.
Technical security records may be retained for the period reasonably necessary to protect the website and investigate possible misuse.
Who receives your data
I do not sell your personal data and I do not share it with third parties for their independent marketing purposes.
Your data may be processed by the providers required to operate the website and its email service, including the website hosting provider. These providers receive only the information necessary to deliver their services.
Personal data may also be disclosed where required by law or when necessary to protect legal rights or the security of the website.
Cookies
This website does not currently use advertising or analytics cookies.
WordPress and its plugins may use technical cookies or similar technologies when strictly necessary for security, administration or the correct functioning of the website. Cookies used for access to the WordPress administration area concern authorised administrators rather than ordinary visitors.
If analytics, advertising services or other non-essential technologies are introduced in the future, this policy and the website’s consent arrangements will be updated accordingly.
Links to other websites
This website contains links to external services and websites, including social media, publishing and audio platforms.
When you follow one of these links, you leave this website. The external service may collect information about you according to its own privacy policy. I do not control the privacy practices of third-party websites.
Your rights
Under the GDPR, you may have the right to:
- obtain confirmation that your personal data are being processed;
- request access to your personal data;
- request correction of inaccurate or incomplete data;
- request deletion of your data;
- request restriction of processing;
- object to processing;
- request data portability, where applicable;
- withdraw your consent at any time.
To exercise any of these rights, contact me through the contact page on this website.
You also have the right to lodge a complaint with the Italian Data Protection Authority, the Garante per la protezione dei dati personali.
Changes to this Privacy Policy
This Privacy Policy may be updated if the website, its services or the applicable legal requirements change. The date shown at the top of the page indicates the most recent revision.