Privacy Policy

# Privacy Policy

*Last updated: July 11, 2026*

## 1. Who I am

This website, www.thewhatif.art (the "Site"), is operated by Melissa Debernardi, an independent visual artist and photographer working under the name **What If**, based in Italy.

VAT no. (P.IVA): **[02544340066]**

For anything related to your personal data, you can contact me at: **whatif.wonders71@gmail.com**

## 2. What data I collect

**Data you choose to share with me.** When you contact me by email or subscribe to my newsletter through the form on the Site, I collect the information you provide — typically your name, your email address, and the content of your message.

**Data collected automatically.** Like almost every website, the Site's hosting provider automatically collects some technical data when you visit, such as your IP address, browser type, device information, and the pages you view. This happens for security reasons and to make the Site work properly.

## 3. Why I use your data, and the legal basis for it

- **To reply to your messages and inquiries** — because processing is necessary to respond to your request (Art. 6(1)(b) GDPR).
- **To send you my newsletter, if you subscribed** — based on your consent (Art. 6(1)(a) GDPR). You can withdraw it at any time by clicking "unsubscribe" in any email, or simply by writing to me.
- **To keep the Site secure and functioning** — based on my legitimate interest in operating the Site (Art. 6(1)(f) GDPR).
- **To comply with legal obligations**, for example invoicing and accounting if we work together (Art. 6(1)(c) GDPR).

I never sell your data, and I don't use it for automated decision-making or profiling.

## 4. How long I keep your data

- **Emails and inquiries:** for as long as needed to handle your request, and up to 24 months afterwards.
- **Newsletter data:** until you unsubscribe.
- **Data related to contracts and invoices:** 10 years, as required by Italian law.

## 5. Who can access your data

Your data may be processed by trusted service providers that help me run the Site:

- **Framer B.V.** (Netherlands) — website hosting and form management;
- **Google LLC** (USA) — email services;

These providers process data on my behalf under data-processing agreements. Where data is transferred outside the European Economic Area (for example to the USA), it is protected by appropriate safeguards such as the EU–US Data Privacy Framework or the European Commission's Standard Contractual Clauses.

## 6. Cookies

The Site uses only technical cookies that are strictly necessary for it to function. It does not use profiling or advertising cookies.

## 7. Your rights

Under the GDPR, you have the right to:

- access your personal data and receive a copy of it;
- correct inaccurate or incomplete data;
- request the deletion of your data ("right to be forgotten");
- restrict or object to the processing of your data;
- receive your data in a portable, machine-readable format;
- withdraw your consent at any time (this does not affect the lawfulness of processing carried out before withdrawal).

To exercise any of these rights, just write to **whatif.wonders71@gmail.com**. You also have the right to lodge a complaint with your data protection authority — in Italy, the Garante per la Protezione dei Dati Personali (www.garanteprivacy.it).

## 8. Third-party links

The Site contains links to external websites and social platforms, such as Instagram. I am not responsible for how those services handle your data — please check their own privacy policies.

## 9. Changes to this policy

I may update this policy from time to time. The most recent version will always be published on this page, with the date of the last update shown at the top.