Privacy & Cookie Policy

Effective date: 27 September 2026

1. DATA CONTROLLER

This website is operated by:

Alberto Gontier

Aspirant Mountain Guide

VAT No. IT01317660072

Aosta Valley, Italy

Website: albertogontier.com

Email: albertogontier@gmail.com

Phone: +39 380 204 3533

For the purposes of Regulation (EU) 2016/679 (“GDPR”) and applicable Italian and European data protection legislation, Alberto Gontier is the Data Controller of personal data processed in connection with this website and the professional services offered through or in connection with it.

For any question concerning this Privacy & Cookie Policy or the processing of personal data, you may contact the Data Controller using the details above.

2. SCOPE OF THIS POLICY

This Privacy & Cookie Policy describes how personal data may be collected, used, stored, disclosed and protected when you:

• visit this website;

• browse its pages or interact with its content;

• use a contact, enquiry or booking form;

• contact Alberto Gontier by email, telephone, WhatsApp, Instagram, social media or another communication channel;

• request information about an activity, course, guided trip or other professional service;

• request or make a booking;

• enter into a contractual relationship;

• purchase or pay for a service;

• request or receive an invoice;

• subscribe to newsletters or other communications;

• participate in a guided mountain activity;

• provide information concerning your experience, equipment, physical condition, health or safety;

• provide identity, travel, insurance or administrative information;

• submit photographs, reviews, testimonials or other content;

• appear in photographs, video or audiovisual material;

• interact with maps, videos, social media content, payment systems or other embedded or third-party services;

• otherwise communicate or interact with Alberto Gontier in a professional context.

This Policy may also apply, where relevant, to personal data received from another participant, family member, group organiser, travel organiser, mountain guide, professional partner, agency, accommodation provider, insurer or another person acting on your behalf or in connection with a requested service.

3. CATEGORIES OF PERSONAL DATA THAT MAY BE PROCESSED

Depending on your interaction with the website and the services requested, the following categories of personal data may be processed.

3.1 Identification and contact information

This may include:

• name and surname;

• date and place of birth;

• country of residence;

• nationality;

• postal address;

• email address;

• telephone number;

• preferred language;

• social media username or account identifier;

• emergency contact information;

• other identification or contact information voluntarily provided by you.

3.2 Tax, invoicing and administrative information

Where necessary for invoicing, accounting, contractual, tax or administrative purposes, the following information may be processed:

• Italian tax identification number (Codice Fiscale);

• VAT identification number;

• billing name and address;

• company or professional details;

• country of tax residence;

• information required for electronic invoicing;

• SDI, PEC or equivalent information where applicable;

• transaction or payment references;

• other information required by applicable tax, accounting or administrative legislation.

3.3 Identity, travel and official document information

Where reasonably necessary for a booking, accommodation, travel arrangement, permit, insurance, identity verification, border requirement, administrative requirement or the organisation of a requested activity, information may include:

• date and place of birth;

• nationality;

• tax identification number;

• identity card number;

• passport number;

• document type;

• document issuing country or authority;

• document issue date;

• document expiry date;

• copies, scans or photographs of identity cards, passports or other identification documents;

• visa information;

• residence permit information;

• travel-document information;

• other identification information required for the relevant service.

Copies of identity documents will only be requested or retained where reasonably necessary for a specific purpose, where required by applicable law or where necessary to provide information to a relevant service provider or competent authority.

Where a purpose can reasonably be achieved by recording only specific information contained in an identity document, the full copy of the document will not be retained unnecessarily.

Identity or travel-document information may, where necessary, be communicated to accommodation providers, mountain huts, travel or transport providers, insurers, booking partners, public authorities, border authorities or other persons or organisations involved in providing the requested service.

Copies of identity documents will be deleted or securely disposed of when they are no longer reasonably necessary for the purpose for which they were collected, unless continued retention is required by applicable law or is necessary for the establishment, exercise or defence of legal claims.

3.4 Enquiry and communication data

Information contained in:

• emails;

• telephone communications;

• WhatsApp messages;

• Instagram or other social media messages;

• contact forms;

• booking forms;

• other correspondence

may be processed in order to respond to enquiries, provide information, prepare proposals, manage bookings and maintain professional communications.

3.5 Booking and contractual information

Where you request or book an activity or service, information may include:

• requested activity or itinerary;

• requested dates;

• availability;

• number of participants;

• participant names;

• participant ages where relevant;

• mountaineering experience;

• climbing experience;

• skiing experience;

• technical level;

• fitness or preparation information;

• preferences and objectives;

• equipment requirements;

• accommodation requirements;

• dietary or logistical information where relevant;

• meeting-point information;

• transport arrangements;

• insurance information;

• booking history;

• cancellation information;

• contractual communications;

• other information necessary to organise or perform the requested service.

3.6 Payment information

Where payment facilities are available, information may include:

• amount paid;

• payment date;

• payment method;

• bank-transfer information;

• transaction reference;

• payment status;

• refund information;

• deposit information.

Where payment is processed through a bank, card processor, payment platform or other third-party payment provider, financial information may be processed directly by that provider.

Alberto Gontier does not intentionally retain complete payment-card details when those details are handled directly by an authorised payment service provider.

3.7 Technical and browsing information

When visiting the website, certain information may be collected automatically, including:

• IP address;

• browser type and version;

• device type;

• operating system;

• language settings;

• screen or device information;

• network information;

• approximate geographic information derived from an IP address;

• referring website or source;

• pages viewed;

• links clicked;

• interactions with website elements;

• searches;

• scrolling behaviour;

• timestamps;

• session information;

• cookie or device identifiers;

• diagnostic information;

• security information;

• website-performance information.

Such information may be processed through server logs, JavaScript, cookies, pixels, tags, local storage or similar technologies.

3.8 Activity, experience and safety information

For the organisation and safe performance of mountain activities, participants may be asked to provide information concerning:

• mountaineering experience;

• climbing level;

• skiing level;

• previous mountain experience;

• technical abilities;

• physical preparation;

• personal equipment;

• equipment sizes where relevant;

• relevant limitations;

• emergency information;

• information reasonably necessary to assess the suitability or organisation of an activity.

3.9 Health and special-category personal data

In some circumstances, particularly where relevant to the safe organisation or performance of mountain activities, you may voluntarily provide information concerning:

• medical conditions;

• allergies;

• injuries;

• medications;

• disabilities;

• physical limitations;

• relevant previous medical events;

• other health-related circumstances that may be relevant to the activity.

Health data constitute a special category of personal data under the GDPR.

Such information will only be processed where both an appropriate legal basis under Article 6 GDPR and a valid condition under Article 9 GDPR apply.

Depending on the circumstances, this may include:

• explicit consent;

• protection of vital interests where legally applicable;

• establishment, exercise or defence of legal claims;

• another condition expressly permitted by applicable law.

Participants should provide health information only where it is relevant to the safety or organisation of the activity.

3.10 Emergency information

For safety purposes, information concerning emergency contacts or other information reasonably necessary in the event of an accident, rescue operation or medical emergency may be processed.

Where necessary in an emergency, relevant information may be communicated to:

• emergency services;

• rescue organisations;

• medical professionals;

• police or competent authorities;

• other mountain professionals;

• insurers;

• family members or designated emergency contacts.

3.11 Insurance information

Where relevant to an activity or requested by the participant, information concerning insurance may be processed, including:

• insurer;

• policy number;

• coverage information;

• assistance information;

• emergency contact details;

• information required for arranging or activating insurance;

• information reasonably necessary in connection with an insurance claim.

Where an insurance product or external insurance service is offered through a link or partner, the relevant insurer or insurance intermediary may process information independently under its own privacy policy.

3.12 Photographs, video, audio and image rights

Photographs, videos, audio recordings or other audiovisual material may be created during guided activities, courses, trips or related professional activities.

Such material may contain identifiable individuals and may therefore constitute personal data.

Photographs or videos may potentially be processed for purposes including:

• private documentation of an activity;

• professional documentation;

• safety documentation where relevant;

• website content;

• portfolio content;

• social media content;

• printed communication;

• advertising or promotional material.

Where required by applicable law, the promotional or commercial publication of identifiable images will be based on an appropriate legal basis and, where required, specific authorisation.

Where consent is relied upon, consent must be freely given, specific and informed and may be withdrawn for future processing subject to applicable legal requirements.

Refusal to authorise promotional use of a participant’s image will not by itself prevent participation in a guided activity.

This Privacy & Cookie Policy does not itself constitute consent or authorisation for promotional or commercial publication of an identifiable participant’s image.

Additional image-release or consent documentation may therefore be requested where appropriate.

3.13 Reviews and testimonials

If you voluntarily provide:

• a review;

• testimonial;

• photograph;

• recommendation;

• feedback;

• other customer content,

that information may be processed for customer-relations purposes and, where an appropriate legal basis exists, published through the website, social media or other professional communication channels.

Where publication identifies you, any legally required consent or authorisation will be obtained.

3.14 Newsletter and marketing information

Where newsletter, mailing-list or promotional communication services are enabled, information may include:

• name;

• email address;

• subscription date;

• communication preferences;

• consent status;

• unsubscribe status;

• interactions with communications where the relevant service provides such functionality.

You may unsubscribe or withdraw marketing consent at any time.

3.15 Location information

Approximate or precise location information may be processed where voluntarily provided or where reasonably necessary for:

• meeting-point coordination;

• activity organisation;

• transport coordination;

• rescue or safety;

• route coordination;

• other requested location-based functionality.

Precise location information will not intentionally be used for unrelated advertising or profiling purposes without an appropriate legal basis.

4. DATA RELATING TO MINORS

Mountain activities may involve participants under the age of 18.

Where personal data concerning minors are processed, particular care will be taken to ensure appropriate protection.

Information may be obtained from:

• a parent;

• legal guardian;

• responsible adult;

• group leader;

• school or organisation;

• another person legally entitled to provide the information.

Where legally required, appropriate parental or guardian consent or authorisation will be requested.

Identifiable photographs or videos of minors will not knowingly be used for promotional or commercial purposes without the permissions required by applicable law.

Personal data relating to minors will not intentionally be used for unrelated behavioural advertising or marketing.

5. SOURCES OF PERSONAL DATA

Most personal data are provided directly by you.

Information may also be obtained from:

• another participant making a booking for a group;

• a family member;

• parent or guardian;

• group leader;

• travel organiser;

• tour operator;

• travel agency;

• mountain guide;

• professional partner;

• guiding company or association;

• accommodation provider;

• mountain hut;

• transport provider;

• insurer;

• equipment provider;

• publicly available professional information;

• social media where you contact or interact with Alberto Gontier;

• another person acting on your instructions or in connection with the requested service.

Where required by applicable law, appropriate information will be provided when personal data have been obtained indirectly.

6. PURPOSES AND LEGAL BASES FOR PROCESSING

6.1 Operating, maintaining and securing the website

Technical information may be processed in order to:

• display the website;

• provide website functionality;

• maintain the website;

• maintain security;

• detect or prevent abuse;

• detect or prevent fraud;

• diagnose errors;

• protect systems and communications;

• provide essential online services.

The legal basis may include the legitimate interest of the Data Controller in operating and protecting the website and providing a secure online service.

6.2 Responding to enquiries

Information submitted through email, telephone, WhatsApp, social media, forms or other channels may be processed in order to:

• respond to enquiries;

• provide requested information;

• discuss possible activities;

• provide availability;

• prepare quotations;

• prepare proposals;

• take steps requested by you before entering into a contract.

The legal basis will generally be the performance of pre-contractual measures requested by you and/or the legitimate interest in responding to communications voluntarily initiated by users.

6.3 Organising and performing guided activities and professional services

Personal data may be processed where necessary to:

• manage bookings;

• enter into contracts;

• provide professional services;

• organise guided activities;

• evaluate participant experience;

• evaluate technical level;

• coordinate meeting points;

• organise equipment;

• communicate changes;

• manage accommodation;

• manage transport;

• manage mountain-hut bookings;

• coordinate logistics;

• coordinate with other guides or service providers;

• manage identity and travel-document requirements;

• manage permits;

• manage insurance requirements;

• manage administrative requirements;

• provide the requested professional service.

The legal basis will normally be the performance of a contract or steps taken at your request before entering into a contract.

6.4 Safety and emergency management

Information may be processed where reasonably necessary to:

• evaluate the safe organisation of an activity;

• protect participants;

• manage accidents;

• manage rescue operations;

• communicate with emergency services;

• protect vital interests;

• establish or defend legal rights.

Where special-category personal data are involved, an additional condition under Article 9 GDPR will apply.

6.5 Invoicing, accounting, tax and legal obligations

Personal data may be processed where necessary for:

• invoicing;

• electronic invoicing;

• bookkeeping;

• accounting;

• tax compliance;

• professional obligations;

• insurance requirements;

• legally required record keeping;

• compliance with lawful requests from competent authorities.

The legal basis is compliance with applicable legal obligations.

6.6 Establishment, exercise or defence of legal claims

Personal data may be processed or retained where reasonably necessary to establish, exercise or defend legal rights or claims.

This may include information concerning:

• contracts;

• bookings;

• cancellations;

• accidents;

• safety;

• insurance;

• communications;

• payments;

• professional activities.

6.7 Website analytics and improvement

Where permitted by applicable law, analytics may be used to understand:

• website traffic;

• visitor numbers;

• traffic sources;

• page performance;

• visitor interactions;

• technical problems;

• user journeys;

• content effectiveness;

• general usage patterns.

Analytics or performance technologies that require consent will only be activated after consent has been provided where legally required.

6.8 Newsletter and direct marketing

Where such services are enabled, personal data may be used to send:

• newsletters;

• information about guided activities;

• new trips or experiences;

• professional updates;

• other promotional communications.

Where applicable law requires consent, these communications will only be sent following valid consent.

Consent may be withdrawn at any time.

Where applicable law permits communications to existing customers on another lawful basis, recipients will retain the right to opt out.

6.9 Advertising, conversion measurement and remarketing

If advertising technologies are introduced, personal data or online identifiers may be processed for purposes such as:

• campaign measurement;

• conversion tracking;

• remarketing;

• audience creation;

• advertising attribution;

• personalised advertising;

• social-media advertising.

Such technologies will only be used with an appropriate legal basis and, where required, after valid consent has been obtained.

6.10 Photography, video and promotional material

Identifiable photographs and audiovisual content may be processed for promotional purposes only where an appropriate legal basis or legally valid authorisation exists.

Where consent is used, promotional consent will be separate from the provision of guiding services unless the processing is genuinely necessary for the requested service.

6.11 Reviews and testimonials

Reviews, testimonials or other voluntarily supplied customer content may be processed and published where appropriate, subject to applicable privacy and image-right requirements.

6.12 Fraud prevention and security

Information may be processed where reasonably necessary to:

• prevent misuse;

• protect accounts;

• prevent fraud;

• investigate security incidents;

• protect users and the Data Controller;

• maintain website integrity.

7. WHETHER PROVIDING PERSONAL DATA IS MANDATORY

Providing technical information necessary to operate the website is inherent in using an internet service.

Providing information for a general enquiry is normally voluntary.

However, certain information may be necessary in order to:

• answer a request;

• prepare a quotation;

• complete a booking;

• enter into a contract;

• perform a professional service;

• issue an invoice;

• comply with tax or legal requirements;

• arrange accommodation or travel;

• arrange insurance;

• evaluate or organise an activity safely;

• satisfy administrative or identification requirements.

Where necessary information is not provided, it may not be possible to provide or safely organise the requested service.

8. DATA MINIMISATION

Only personal information reasonably necessary and proportionate to the relevant purpose should be collected or retained.

Where the same purpose can be achieved by processing less information, the more limited information should be preferred.

In particular, full copies of passports, identity cards or other official documents will not be requested or retained merely for convenience when the necessary purpose can reasonably be achieved using only specific information contained in the document.

9. RECIPIENTS AND SERVICE PROVIDERS

Where reasonably necessary, personal data may be disclosed to categories of recipients such as:

• website hosting and platform providers;

• domain and DNS providers;

• cloud-storage providers;

• IT and security providers;

• email providers;

• communication providers;

• customer relationship management providers;

• booking-management systems;

• payment processors;

• banks and financial institutions;

• accountants and tax advisers;

• lawyers and other professional advisers;

• insurers;

• insurance intermediaries;

• mountain guides;

• aspirant mountain guides;

• other outdoor professionals;

• guiding companies;

• professional associations;

• mountain huts and refuges;

• hotels and other accommodation providers;

• lift companies;

• transport providers;

• equipment rental providers;

• travel agencies or tour operators;

• booking partners;

• newsletter providers;

• analytics providers;

• advertising providers;

• social media platforms;

• video and map providers;

• anti-spam and security providers;

• rescue services;

• medical professionals;

• public authorities;

• courts;

• police or law-enforcement bodies where legally required.

Only information reasonably necessary for the relevant purpose will be disclosed.

Where a provider acts as a processor on behalf of the Data Controller, appropriate contractual and data-protection requirements will be used where required.

Personal data are not sold by Alberto Gontier.

10. WEBSITE PLATFORM AND SQUARESPACE

This website is currently created and hosted using Squarespace.

Squarespace may process technical and other information necessary to provide services such as:

• hosting;

• website delivery;

• website security;

• content management;

• analytics;

• cookie management;

• contact forms;

• scheduling;

• commerce;

• customer accounts;

• payment-related functionality,

depending on which website features are enabled.

Squarespace uses necessary technologies and may also provide analytics and performance technologies.

The exact data processing and technologies used may vary depending on:

• website configuration;

• services enabled;

• integrations enabled;

• changes made by the platform over time.

11. FORMS

If contact, enquiry, newsletter, booking or other forms are enabled, information submitted through them will be processed for the purposes described at the point of collection and in this Policy.

Where reasonably possible, required fields will be limited to information necessary for the relevant request.

12. ONLINE BOOKINGS, E-COMMERCE AND PAYMENTS

If online booking, e-commerce, customer-account or payment functionality is introduced, personal data may be processed in order to:

• manage orders;

• manage bookings;

• take payments;

• process deposits;

• issue confirmations;

• manage refunds;

• issue invoices;

• maintain transaction records;

• comply with legal obligations.

External payment providers may process financial information independently in accordance with their own privacy policies.

13. THIRD-PARTY COMMUNICATION AND SOCIAL MEDIA SERVICES

The website may contain links to, or integrations with, external services such as:

• WhatsApp;

• Instagram;

• Facebook;

• email providers;

• YouTube;

• Vimeo;

• mapping services;

• booking services;

• payment platforms;

• insurance platforms;

• other external services.

When you use or interact with an external platform, the relevant third party may receive personal information such as:

• IP address;

• browser information;

• referring page;

• account information;

• information you voluntarily submit.

Once you interact directly with an external provider, that provider may process your information independently under its own privacy policy and terms.

Messages sent to Alberto Gontier through WhatsApp, Instagram or another third-party platform may therefore be processed both by the relevant platform and by Alberto Gontier after receipt.

14. EMBEDDED CONTENT

This website may contain embedded or interactive third-party content including:

• maps;

• videos;

• Instagram content;

• social media feeds;

• YouTube or Vimeo content;

• booking tools;

• review widgets;

• payment widgets;

• weather information;

• mapping or route tools;

• other external functionality.

Such providers may receive technical information when their content is loaded or used.

Where an embedded service uses cookies or tracking technologies requiring consent, those technologies will be subject to the applicable consent mechanism where legally required.

15. INTERNATIONAL DATA TRANSFERS

Some website, cloud, communication, social-media, analytics, advertising, payment or other technical providers may process information outside the European Economic Area.

Where the GDPR rules on international transfers apply, transfers will be based on an appropriate legal mechanism, which may include:

• an adequacy decision adopted by the European Commission;

• Standard Contractual Clauses approved by the European Commission;

• another safeguard recognised under applicable data-protection legislation;

• a lawful derogation where specifically permitted.

Additional safeguards may be adopted where appropriate.

16. DATA RETENTION

Personal data will be retained only for as long as reasonably necessary for the relevant purpose and in accordance with applicable legal requirements.

In particular:

Enquiry and communication records may be retained for the period reasonably necessary to respond to the enquiry and manage subsequent communications.

Booking and contractual records may be retained for the duration of the contractual relationship and afterwards for the periods necessary to comply with applicable legal, tax, accounting, insurance and professional requirements.

Invoices, accounting information and tax documentation will be retained for the periods required by applicable law.

Identity and travel-document information will be retained only for as long as necessary for the relevant booking, travel, accommodation, permit, insurance, administrative or legal purpose.

Full copies of identity documents will be deleted or securely disposed of once they are no longer necessary unless continued retention is required by law or necessary in connection with legal claims.

Health and safety information will be retained only for as long as reasonably necessary for the activity, safety purpose, applicable legal obligation or possible legal claim.

Insurance information may be retained where necessary in relation to an activity, claim, contractual requirement or legal obligation.

Marketing information will generally be retained until consent is withdrawn, the user unsubscribes or the information is otherwise no longer reasonably required.

Records demonstrating consent may be retained for the period reasonably necessary to demonstrate compliance.

Photographic and audiovisual content may be retained for the duration allowed by the applicable legal basis or authorisation.

Technical and security logs are retained according to legitimate technical and security requirements and the retention periods applied by the relevant service providers.

Data required in relation to a dispute or legal claim may be retained until relevant limitation periods or proceedings have concluded.

Where information is no longer required, it will be deleted, anonymised or otherwise handled in accordance with applicable law.

17. DATA SECURITY

Reasonable technical and organisational measures are used to protect personal data against:

• unauthorised access;

• accidental loss;

• unlawful disclosure;

• alteration;

• destruction;

• misuse.

Measures may include, as appropriate:

• password protection;

• account-access controls;

• multifactor authentication;

• secure cloud and website providers;

• software updates;

• backups;

• restricted access;

• appropriate transmission and storage safeguards.

Particular care should be taken when processing identity documents, health information or other information that may create increased risks if disclosed.

No internet transmission, communication platform or electronic storage system can be guaranteed to be completely secure.

18. PERSONAL DATA BREACHES

Where a personal-data breach occurs, the situation will be assessed in accordance with applicable law.

Where required by the GDPR, the competent supervisory authority will be notified.

Where a breach is likely to result in a high risk to the rights and freedoms of an affected individual, that individual will also be informed where required by law.

19. AUTOMATED DECISION-MAKING AND PROFILING

Unless specifically disclosed otherwise, Alberto Gontier does not use solely automated decision-making producing legal effects or similarly significant effects concerning individuals.

Analytics or advertising services may create statistical, marketing or audience profiles where such services are enabled.

Non-essential profiling or advertising technologies will only be used where permitted by applicable law and subject to consent where required.

20. RIGHTS OF DATA SUBJECTS

Subject to the conditions and limitations established by applicable law, you may have the right to:

• obtain confirmation as to whether personal data concerning you are being processed;

• obtain access to your personal data;

• obtain a copy of relevant personal data;

• request correction of inaccurate information;

• request completion of incomplete information;

• request deletion of personal data;

• request restriction of processing;

• object to processing based on legitimate interests;

• object at any time to direct marketing;

• receive certain personal data in a structured, commonly used and machine-readable format;

• request transmission of eligible personal data to another controller where technically feasible;

• withdraw consent at any time where processing relies on consent;

• exercise rights relating to qualifying automated decision-making;

• lodge a complaint with a competent supervisory authority.

Withdrawal of consent does not affect the lawfulness of processing performed before consent was withdrawn.

Requests may be sent to:

albertogontier@gmail.com

Reasonable identity verification may be requested where necessary to ensure that personal information is not disclosed to an unauthorised person.

21. COMPLAINTS

Where applicable, you have the right to lodge a complaint with a competent data-protection supervisory authority.

In Italy, the competent supervisory authority is:

Garante per la protezione dei dati personali

You may also have the right to contact another competent supervisory authority within the European Economic Area depending on your circumstances.

22. COOKIES AND SIMILAR TECHNOLOGIES

This website may use cookies and similar technologies.

Such technologies may include:

• browser cookies;

• local storage;

• pixels;

• tags;

• scripts;

• identifiers;

• consent-management technologies;

• similar technologies capable of storing or accessing information on a device.

Cookies are small pieces of information stored on or accessed from a visitor's device.

Different technologies may serve different purposes as described below.

23. STRICTLY NECESSARY AND TECHNICAL COOKIES

Strictly necessary or technical technologies may be used to:

• deliver the website;

• provide core functionality;

• protect website security;

• manage sessions;

• prevent abuse;

• remember privacy and cookie preferences;

• enable forms;

• enable customer accounts;

• operate shopping carts;

• operate checkout systems;

• provide functionality explicitly requested by a visitor.

Where these technologies are strictly necessary under applicable law, they may be used without prior consent.

Information concerning them may nevertheless be provided through this Policy and the website's cookie controls.

24. FUNCTIONAL AND PREFERENCE TECHNOLOGIES

Where enabled, functional technologies may remember information such as:

• language preferences;

• display preferences;

• website settings;

• previous choices;

• other optional user preferences.

Where such technologies are not strictly necessary, they will be subject to consent where required by applicable law.

25. ANALYTICS AND PERFORMANCE TECHNOLOGIES

Analytics and performance technologies may collect information concerning:

• visits;

• unique visitors;

• sessions;

• traffic sources;

• pages viewed;

• clicks;

• searches;

• scrolling;

• visitor interactions;

• website performance;

• technical errors;

• general usage patterns.

Squarespace currently uses analytics and performance cookies including cookies such as:

ss_cid

ss_cpvisit

ss_cvisit

ss_cvr

ss_cvt

Some of these may remain for periods of up to approximately two years, while others may have much shorter session-related durations.

The exact names, purposes and retention periods of cookies may change over time as Squarespace or other website services are updated.

Where analytics technologies require consent under applicable law, they will only be used after valid consent has been obtained.

26. MARKETING, ADVERTISING AND PROFILING TECHNOLOGIES

If advertising, marketing or profiling technologies are used in the future, they may support:

• advertising measurement;

• conversion measurement;

• campaign attribution;

• remarketing;

• audience creation;

• personalised advertising;

• social-media advertising.

Such technologies will only be activated where an appropriate legal basis exists and, where required, after the visitor has provided valid consent.

Refusing optional marketing technologies will not prevent access to the essential content of the website.

27. THIRD-PARTY COOKIES AND TECHNOLOGIES

Third-party integrations may use cookies or similar technologies.

These may include services provided by:

• social media platforms;

• video providers;

• mapping providers;

• analytics providers;

• advertising providers;

• booking systems;

• payment providers;

• chat and communication services;

• security providers;

• customer-management services.

Third parties may process information independently in accordance with their own privacy policies.

Where such technologies are non-essential and require consent, they will be subject to the website's applicable consent mechanism.

28. COOKIE CONSENT

Where legally required, the website will provide a cookie-consent mechanism that may allow visitors to:

• accept non-essential technologies;

• reject non-essential technologies;

• manage cookie categories;

• change their preferences;

• withdraw consent.

Non-essential tracking technologies requiring consent should remain disabled until valid consent has been obtained.

Consent preferences may themselves be stored using a necessary cookie or similar technology so that the website can remember the visitor's choice.

Squarespace distinguishes between necessary cookies and analytics/performance cookies, and the website may be configured to restrict non-essential cookies until consent has been given.

29. CHANGING OR WITHDRAWING COOKIE CONSENT

Where cookie-preference controls are available, visitors may change or withdraw their choices at any time.

Visitors may also normally delete or block cookies through browser settings.

Blocking strictly necessary technologies may prevent some website functionality from operating correctly.

30. EXTERNAL LINKS

The website may contain links to websites or services operated independently by third parties.

Alberto Gontier does not control the privacy practices, security or content of independent third-party websites.

Visitors should review the privacy information provided by the relevant third party before submitting personal information to it.

31. CHANGES TO SERVICES AND TECHNOLOGIES

The website and the professional services offered may evolve.

Features such as:

• forms;

• online bookings;

• online payments;

• customer accounts;

• newsletters;

• maps;

• social media integrations;

• videos;

• analytics services;

• advertising technologies;

• customer-management systems;

• other external services

may be introduced, modified or removed.

Where such changes materially affect the way personal data are processed, this Privacy & Cookie Policy and/or relevant information provided at the time of collection will be updated where required by applicable law.

32. CHANGES TO THIS PRIVACY & COOKIE POLICY

This Policy may be updated from time to time to reflect:

• changes to the website;

• changes to professional services;

• new providers or integrations;

• new processing activities;

• changes to cookie or tracking technologies;

• changes to legal requirements;

• regulatory guidance.

The version published on this website is the current version.

Where a change materially alters a processing activity and applicable law requires additional notice or consent, appropriate measures will be taken.

33. CONTACT

For questions, requests or concerns regarding this Privacy & Cookie Policy or the processing of personal data, please contact: