Privacy policy
Updated: 3 October 2026
Controller and contact
Rossella Calabrese is the controller of personal data collected through this website. Location: Barcelona, Spain. For privacy questions or to exercise your rights, use the contact email below.
Data collected
The form collects your name, email, message and preferred format, together with the language, submission date and consent version. Your name, email and message are needed to handle your enquiry. Do not send diagnoses, medical reports, clinical records, health data or sensitive information about other people: this form is only for initial enquiries and arranging meetings.
Purpose and legal basis
Form data is used to respond to your enquiry and arrange a possible initial meeting. The legal basis is the consent you give by ticking the box and submitting the form (Article 6(1)(a) GDPR). You may withdraw consent at any time without affecting earlier processing. Messages are not used for newsletters, advertising or automated decisions.
Security and access
Messages are stored in a private inbox accessible only to the website owner. The application uses an account identifier for authenticated submissions or an email digest to limit repeated submissions; it does not store IP addresses in the message table. Hosting providers may process IP addresses, device information, access logs and usage data to operate and protect the platform, based on the legitimate interest in maintaining a secure service.
Retention
Messages are kept for as long as needed to respond to and manage your enquiry. They will be reviewed periodically and deleted when no longer needed; they are not kept indefinitely. Where a legal obligation or dispute applies, only the necessary information will be retained for the applicable periods. This policy covers website enquiries; any subsequent professional relationship requires its own privacy information.
Providers and transfers
OpenAI provides hosting through ChatGPT Sites and uses infrastructure providers, including Cloudflare. These providers may access data to provide, maintain and protect the service. Messages are not published or sold. Data may be disclosed where required by law. For processing entrusted to OpenAI from Spain, the Sites agreement identifies OpenAI Ireland Ltd and provides for transfers outside the EEA based on standard contractual clauses or adequacy decisions. Hosting is not guaranteed to remain solely in Spain or the EEA. If you contact me through Gmail or use WhatsApp, those services are also involved under their respective terms.
Your rights
You may request access, correction, erasure, restriction, objection and portability, where applicable, and withdraw consent by contacting the email below. Additional identity information will only be requested if necessary. Requests will generally be answered within one month; you will be informed of any extension permitted by law. You can lodge a complaint with the Spanish Data Protection Agency (AEPD).
Private access and updates
The public website can be viewed without a ChatGPT account. Sites requires identification for restricted access. The editing panel uses account identity to restrict access to the owner. The platform processes access data under its own terms. This policy will be updated if the form, providers or uses of data change.