PRIVACY
Privacy Notice
This Privacy Notice explains how personal data is processed when you use arshialashgari.org or contact me through the website.
Effective date: 10 September 2026
Version: 2026-09-10
This Privacy Notice explains how personal data is processed when you use arshialashgari.org or contact me through the website.
1. Data Controller
The Data Controller is Arshia Lashgari.
Contact: contact@arshialashgari.org
2. Personal Data Processed
When you use the Contact form, the website may process information such as:
- your name;
- your email address;
- the subject and content of your message;
- technical information necessary for security and service operation;
- anti-spam and abuse-prevention information generated through Cloudflare Turnstile.
Please do not submit sensitive or special-category personal data unless strictly necessary.
3. Purposes of Processing
Personal data submitted through the Contact form is processed to:
- receive and respond to your inquiry;
- communicate regarding projects, services or professional opportunities;
- prevent spam, abuse and automated submissions;
- maintain the security and proper operation of the website;
- establish, exercise or defend legal claims where necessary.
4. Legal Basis
Contact-form data is processed where necessary:
- to take steps at your request before entering into a contract;
- for legitimate interests in responding to genuine communications, operating the website securely and preventing abuse;
- where applicable, to comply with legal obligations.
5. Cloudflare Turnstile
This website uses Cloudflare Turnstile to protect forms against spam and automated abuse.
Turnstile may process technical and security-related information necessary to determine whether a request is legitimate.
The website does not use the Turnstile secret key in client-side code.
6. Email Delivery
Messages and notifications generated by the Contact system may be processed using Resend for transactional email delivery.
Only information necessary to send and deliver the relevant communication is shared with the email service provider.
7. Media Storage
Website media may be stored using Cloudflare R2.
R2 is used for website asset storage and does not intentionally receive Contact-form message contents unless required by a specific website feature.
8. Recipients and Service Providers
Personal data may be processed by service providers used to operate the website, including hosting, infrastructure, anti-abuse, storage and email-delivery providers.
They receive data only to the extent necessary to provide their respective services.
9. International Data Transfers
Some service providers may process data outside the European Economic Area.
Where applicable, transfers are handled using appropriate safeguards required under applicable data-protection law.
10. Retention
Normal Contact inquiries are retained for up to 24 months from the last meaningful interaction, unless a longer period is necessary for contractual, legal or dispute-related reasons.
Spam, rejected or abuse-related submissions are normally retained for no more than 30 days where retention is necessary for security and abuse prevention.
At the end of the applicable retention period, the data is deleted unless continued retention is required by law or for the establishment, exercise or defence of legal claims.
11. Security
Appropriate technical and organisational measures are used to protect personal data.
These measures include restricted access to production credentials, server-side secret handling, HTTPS, access controls and separation between public and private application configuration.
12. Your Rights
Subject to the conditions established by applicable law, you may request:
- access to your personal data;
- rectification of inaccurate data;
- deletion of your data;
- restriction of processing;
- objection to processing;
- data portability where applicable.
Requests may be sent to: contact@arshialashgari.org
13. Right to Lodge a Complaint
You may lodge a complaint with the competent supervisory authority.
In Italy, the supervisory authority is the Garante per la protezione dei dati personali.
14. Automated Decision-Making
The website does not use personal data submitted through the Contact form for automated decision-making or profiling producing legal or similarly significant effects.
Automated anti-abuse mechanisms may be used solely to detect spam or suspicious submissions.
15. Changes to this Notice
This Privacy Notice may be updated when the website, service providers or processing activities change.
The current version and effective date are displayed at the top of this notice.