Urban Selection

Privacy Policy

Personal Data Processing Notice pursuant to EU Regulation 2016/679 (GDPR)
Evening cityscape with illuminated modern skyscrapers, including a tall glass tower, and light trails on a curved highway.

Last updated: April 2026

1. Data Controller

The data controller is:

Urban Selection
Matilde Malagola
Milan, Italy
info@urbanselection.com

For any request relating to the processing of personal data, please contact the controller at the email address above.

2. Data Collected

Urban Selection collects the following personal data exclusively through the contact form on the website:

— First and last name

— Email address

— Any free-text message entered by the user

The website does not collect identifiable browsing data, does not use profiling cookies, and does not install third-party trackers for advertising purposes.Technical browsing data (IP address, browser, pages visited) may be temporarily recorded by hosting servers for security and service operation purposes.

3. Purposes of Processing

Personal data collected through the contact form is processed exclusively to

— Respond to information requests submitted by the user

— Assess the initiation of a professional engagement at the user's request

— Comply with legal obligations where applicable

Data is not used for marketing, profiling, behavioural analysis or unsolicited communications.

4. Legal Basis for Processing

The processing of personal data is based on:

— The data subject's consent, expressed through the voluntary submission of the contact form (Art. 6(1)(a) GDPR)

— The controller's legitimate interest in responding to received requests (Art. 6(1)(f) GDPR)

— Compliance with legal obligations (Art. 6(1)(c) GDPR), where applicable

5. Data Retention

Personal data collected through the contact form is retained for the time strictly necessary to handle the request and, where a professional engagement is initiated, for the duration of the engagement and for the subsequent 10 years, in accordance with applicable legal obligations under tax and civil law.In the absence of a professional engagement, data is deleted within 24 months of receipt of the request, unless otherwise indicated by the data subject.

6. Data Sharing and Disclosure

Personal data is not sold, transferred or disclosed to third parties for commercial or advertising purposes.Data may be disclosed exclusively to:

— Technical service providers (hosting, email) acting as data processors under Art. 28 GDPR, bound by appropriate contractual agreements

— Legal, fiscal or technical professionals involved in the execution of the professional mandate, at the client's direction and with their consent

— Public authorities, where required by law

Technical service providers used by Urban Selection (Webflow for website hosting, email providers) may transfer data outside the European Union. Such transfers are carried out in compliance with the safeguards provided by the GDPR (Adequacy Decisions, Standard Contractual Clauses).

7. Cookies

The website urbanselection.com uses only technical cookies necessary for the operation of the site. No profiling or third-party tracking cookies are installed.Technical cookies used include:— Session cookies: required for the correct functioning of the site, deleted when the browser is closed— Preference cookies: store the user's choices (e.g. language); they do not collect identifiable personal data

Consent is not required for technical cookies under applicable regulations. Users may nevertheless disable cookies in their browser settings, which may limit certain site functionality.

8. Data Subject Rights

Under the GDPR (Arts. 15–22), the data subject has the right to:

— Access: obtain confirmation of processing and a copy of personal data

— Rectification: request correction of inaccurate or incomplete data

— Erasure ('right to be forgotten'): request deletion of data, subject to legal retention obligations

— Restriction: request suspension of processing in certain circumstances

— Portability: receive personal data in a structured, machine-readable forma

— Objection: object to processing based on legitimate interest

— Withdrawal of consent: withdraw consent at any time, without affecting the lawfulness of prior processing

To exercise these rights, the data subject may contact the controller at info@urbanselection.com. The controller will respond within 30 days of receipt of the request.The data subject also has the right to lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it) if they consider that the processing of their data infringes the GDPR.

9. Data Security

Urban Selection adopts appropriate technical and organisational measures to protect personal data against unauthorised access, loss, destruction or disclosure. The website uses encrypted connections (HTTPS/TLS) for data transmission.

10. Minors

The website and Urban Selection's services are intended exclusively for adults. Urban Selection does not knowingly collect personal data from individuals under the age of 18. Should any such data be identified, it will be deleted immediately.

11. Changes to this Privacy Policy

Urban Selection reserves the right to update this Privacy Policy to reflect regulatory or operational changes. Updates will be published on this page with the date of revision. Users are encouraged to review this page periodically.