Privacy notice
What data I collect, and why
This site has no forms, profiles nobody, and does not load Google Analytics until you say yes. Below is the detail, with exact names and retention times.
Who processes the data
The data controller is the person who runs this site and answers the messages that arrive through it.
| Controller | Leila Ben Hassen — IL MOSAICO Mediazione Interculturale |
| Address | Via Europa 137/F, 36010 Monticello Conte Otto (VI), Italy |
| VAT number | 04649000249 |
| leila@ilmosaicomediazione.it | |
| Phone | +39 338 171 8813 |
No Data Protection Officer has been appointed: none of the cases set out in art. 37 of the Regulation apply. For any question about your data, write to the address above.
What this notice covers
It covers the website ilmosaicomediazione.it and the channels that lead here: email, phone, WhatsApp and the appointment calendar.
It does not cover data processed during mediation assignments. Those are governed by the contract or letter of appointment with the client — public body or company — and the people involved receive their notice from that controller.
Browsing data
The site is hosted on Netlify. Like every web server, the service automatically records what your browser sends with each request: IP address, date and time, page requested, browser and operating system, outcome of the request.
This data keeps the site running and helps spot abuse or attacks. I do not use it to identify anyone and I do not combine it with anything else. Legal basis: legitimate interest in the security of the site (art. 6(1)(f)).
Cookies
Before you choose, the site writes no cookies at all and does not contact Google Analytics. These are the cookies that may be present:
| Cookie | Purpose | Duration | Consent |
|---|---|---|---|
mosaico_cc | Remembers the choice you made on the banner, so you are not asked again on every page | 12 months if you accept, 6 if you refuse | Not required: technical |
_ga | Google Analytics — tells one visitor from another when counting | 2 years | Yes |
_ga_9VTLZTX7KB | Google Analytics — keeps the state of a single visit | 2 years | Yes |
No profiling cookies, no advertising cookies, no third-party cookies other than the Analytics ones listed above.
You can change your mind whenever you like: Cookie preferences at the foot of every page reopens the choice. If you withdraw consent, the Analytics cookies are deleted straight away. Closing the banner with the × counts as a refusal.
Visit statistics
Only after your consent does the site load Google Analytics 4 (property G-9VTLZTX7KB), which counts visits and shows which pages get read. The IP address is used only to derive an approximate location and is not stored; advertising signals are switched off, so visits to this site feed no advertising profile.
Legal basis: your consent (art. 6(1)(a)), which you may withdraw at any time with no effect on browsing. The data stays in Google Analytics for the window set in the account, which in the standard version does not exceed 14 months.
Typefaces
The site's typefaces (Montserrat, Instrument Sans, and Cairo for Arabic) are served by Google Fonts. To deliver them, Google's servers receive your device's IP address. No cookies are written and nothing is counted.
Legal basis: legitimate interest in showing the site in the typefaces it was designed for, Arabic included (art. 6(1)(f)).
If you write or book
There is no contact form on this site: you reach me through one of these channels, and each handles data in its own way.
| Channel | What I receive | Legal basis |
|---|---|---|
| Your address, the message, any attachments you send | Answering your request (art. 6(1)(b)) | |
| Phone and WhatsApp | Your number and the conversation. WhatsApp messages travel encrypted, but Meta still processes the number and traffic data | Answering your request (art. 6(1)(b)) |
| Appointment calendar | Name, email, and whatever you write in the note. Run on Google Calendar | Arranging the appointment you asked for (art. 6(1)(b)) |
When booking, do not write health data, judicial data or details about other people: a name and a way to reach you is enough, the rest we go through in person. If you would rather not use WhatsApp, email and phone work just as well.
How long I keep messages
- Enquiries that do not become work — deleted within 12 months of the last exchange.
- Enquiries that do become work — kept for the duration of the assignment and then for the 10 years Italian law requires for accounting and tax records (art. 2220 of the Civil Code).
- Booked appointments — kept in the calendar as long as needed, and in any case no longer than 12 months.
Who else sees this data
No disclosure to the public, no selling, no trading with third parties for commercial purposes. Data only passes through the suppliers that make the site and the contact channels work:
| Supplier | What it does | Where |
|---|---|---|
| Netlify, Inc. | Hosts the site and records its logs | United States, under standard contractual clauses |
| Google Ireland Ltd. | Analytics, Fonts, Calendar | Ireland, with possible transfer to the United States |
| WhatsApp Ireland Ltd. | WhatsApp messages | Ireland, with possible transfer to the United States |
Transfers to the United States rest on the standard contractual clauses approved by the European Commission and, for Google, on membership of the EU–US Data Privacy Framework.
Data may also be disclosed to my accountant and, where the law requires it, to judicial or tax authorities.
What I do not do
- No profiling and no advertising based on your behaviour.
- No automated decisions: nothing about you is decided by an algorithm.
- No newsletter and no unsolicited commercial messages.
- Nothing aimed at children: the site addresses public bodies, companies and adults.
Your rights
At any time you may ask me: what data I hold about you and for a copy of it (arts. 15 and 20), to correct it (art. 16), to erase it (art. 17), to restrict its use (art. 18), to object to processing based on legitimate interest (art. 21). You may withdraw consent to statistical cookies at any time, without affecting what was done before.
Write to leila@ilmosaicomediazione.it: I reply within one month, and if the request is complex I will tell you before that deadline. Exercising your rights is free.
If you believe your data is being mishandled you may complain to the Italian supervisory authority, the Garante per la protezione dei dati personali — Piazza Venezia 11, 00187 Rome, www.gpdp.it — or go to the ordinary courts.
If this notice changes
Changes are published on this page, with the date below updated. If they ever concern new purposes, I will ask you first.
Last updated: 14 August 2026. Notice given under arts. 13 and 14 of Regulation (EU) 2016/679 and Italian Legislative Decree 196/2003 as amended by Legislative Decree 101/2018. The Italian version prevails in case of discrepancy.