Privacy Notice Regarding the Processing of Personal Data
Pursuant to Regulation (EU) 2016/679 (“GDPR”), this page describes how the personal data of users who visit the website and contact Sara Moscariello through the available channels is processed.
1. Data Controller
The data controller is:
Sara Moscariello
Genealogist
VAT No. 03253720647
Email: sara@ricercheancestrali.net
2. What data is collected
The following categories of personal data may be collected through the website:
Data voluntarily provided by the user
When a user submits a request via email or other contact methods, the following information may be collected:
- first and last name;
- email address;
- any phone number provided voluntarily;
- information contained in the message sent;
- information about one's family history;
- documents, photographs, or other materials attached to the request.
This information is provided voluntarily by the individual concerned to enable the evaluation and, if applicable, the conduct of genealogical research.
3. Purposes of the Processing
Personal data is processed for the following purposes:
- respond to contact requests;
- provide information on genealogical research services;
- assess the feasibility of potential research projects;
- prepare customized quotes;
- conduct genealogical and historical research on behalf of the interested party;
- provide updates on the ongoing research.
The data will not be used for purposes other than those specified without additional consent, when required by law.
4. Legal Basis for Processing
The processing of personal data is based on:
- the performance of precontractual measures taken at the request of the data subject;
- the possible performance of a professional assignment;
- the consent of the data subject when required.
5. Methods of Processing
The data is processed using computer systems and, when necessary, by consulting paper documents and records.
Data processing is carried out in accordance with the principles of fairness, lawfulness, transparency, and data minimization, and appropriate measures are taken to protect the data from unauthorized access, loss, or disclosure.
6. Genealogical Documents and Information
During genealogical research, the person conducting the research may share historical documents, family photographs, and information about ancestors or family members.
These materials are used exclusively for the purposes agreed upon with the client and are not published or distributed without authorization.
7. Data Retention
Personal data is retained for the period necessary to process the request, carry out the professional assignment, and fulfill any administrative or tax obligations required by law.
At the end of the retention period, the data will be deleted or anonymized in accordance with established procedures.
8. Disclosure of Data
Personal data is not sold, transferred, or disclosed to third parties for commercial purposes.
Such information may be disclosed only to parties necessary for the performance of professional activities or to comply with legal requirements.
9. Third-Party Services and Tools
The website may use technical services provided by third parties, such as hosting services, statistical tools, or technologies necessary for the website to function properly.
These entities may process personal data in accordance with their own privacy policies and in compliance with applicable laws.
10. Rights of the Data Subject
The data subject has the right to:
- request access to your personal data;
- to have the data corrected or deleted;
- request the restriction of processing;
- to object to the processing in the cases provided for;
- request data portability when applicable;
- withdraw any consent that may have been given.
To exercise these rights, you may write to:
11. Complaint to the supervisory authority
Any data subject who believes that their data is being processed in violation of applicable law has the right to file a complaint with the Data Protection Authority.
12. Updates to This Privacy Policy
This Privacy Policy may be amended from time to time to reflect regulatory changes or changes in data processing practices.
We therefore encourage users to check this page periodically.
Last updated: July 2026