Privacy Policy

Effective Date: 18 July 2026

Privacy Notice

This Privacy Policy explains how I collect, use, store, and protect your personal data when you visit this website, submit an inquiry, or request information about my services or engage me to provide professional services. It also explains your rights under the European Union General Data Protection Regulation (GDPR).

Data Controller

The Data Controller responsible for the processing of your personal data is:

Damien O’Farrell
Email: inquiry@damienofarrell.com

What Is Personal Data Processing?

Personal data means any information relating to an identified or identifiable individual, including names, email addresses, telephone numbers, identification documents, photographs, tax identification numbers, and similar information.

Processing means any operation performed on personal data, whether automated or manual, including collection, recording, organization, storage, consultation, use, disclosure, transmission, restriction, deletion, or destruction.

What Is the Legal Basis for Processing My Data?

I process personal data only where a lawful basis exists under Article 6 of the GDPR. Depending on the circumstances, this may include:

  • Taking steps at your request before entering into a contract, such as responding to inquiries or consultation requests.
  • Performing a contract for professional services.
  • Complying with legal and regulatory obligations, including accounting and tax requirements.
  • Your consent, where required, such as for certain cookies or where you voluntarily provide information through the website.
  • My legitimate interests in operating and improving my professional services, provided that such interests do not override your rights and freedoms.

What Personal Data Do You Process?

I process only the personal data necessary to provide the services you request or to respond to your inquiries.

Depending on the nature of the service, this may include:

  • Name and surname
  • Email address
  • Telephone number
  • Mailing address
  • Nationality and immigration-related information
  • Identification documents
  • Tax identification information
  • Information voluntarily provided through consultations, contact forms, emails, or other correspondence

I generally do not process special categories of personal data unless such information is necessary for the provision of a requested service and there is a lawful basis for doing so.

How Will My Personal Data Be Used?

Your personal data may be used to:

  • Respond to inquiries and consultation requests.
  • Provide immigration, relocation, citizenship, and related advisory services.
  • Manage client relationships and communications.
  • Issue invoices and comply with accounting and tax obligations.
  • Improve website functionality and user experience.

Where necessary, I may share relevant personal data with carefully selected professional collaborators, consultants, lawyers, accountants, translators, interpreters, or other service providers involved in delivering the requested service. Such parties will receive only the information necessary for their specific role and will process personal data in accordance with applicable data protection laws.

Contact Forms and Communications

When you submit an inquiry through the website contact form, I collect the information you voluntarily provide, which may include your name, email address, telephone number, and any details contained in your message.

This information is processed for the purpose of responding to your inquiry, assessing your needs, and, where appropriate, discussing potential professional services.

The legal basis for this processing is the performance of pre-contractual measures taken at your request and, where applicable, my legitimate interest in responding to inquiries related to my professional services.

Providing personal data through the contact form is voluntary. However, if you choose not to provide the requested information, I may be unable to respond to your inquiry or provide the requested services.

Service Providers (Processors)

To operate my website and provide my professional services, I use carefully selected third-party service providers that process personal data on my behalf. These providers act as data processors where required under the GDPR and process personal data only in accordance with my instructions or their contractual obligations.

Depending on the services you use or the way you interact with this website, these processors may include:

  • HostGator (Newfold Digital): Website hosting and related infrastructure.
  • Microsoft 365: Business email, document management, and secure business communications.
  • Wordfence: Website security, firewall protection, malware scanning, and threat detection.
  • Google Analytics: Website analytics (only where you have provided consent, where required).
  • Cookie Confirm: Cookie consent management, consent logging, and cookie compliance.

Where these providers process personal data outside the European Economic Area (EEA), appropriate safeguards, including the European Commission’s Standard Contractual Clauses (SCCs) or other lawful transfer mechanisms, are used where required.

International Data Transfers

Your personal data is processed using systems and service providers located within and, where necessary, outside the European Economic Area (EEA). However, some of the service providers that support the operation of this website and the delivery of my professional services may transfer or process personal data outside the EEA.

This website is hosted by HostGator, a brand of Newfold Digital. The hosting infrastructure and related support services may involve the transfer of personal data to the United States and, where necessary, to other countries in which its authorized personnel or service providers operate.

Where personal data is transferred outside the EEA, I ensure that appropriate safeguards are in place in accordance with the General Data Protection Regulation (GDPR). These safeguards may include:

  • Standard Contractual Clauses (SCCs) approved by the European Commission.
  • Transfers to countries that benefit from a European Commission adequacy decision.
  • Other appropriate technical, contractual, and organizational safeguards required under applicable data protection law.

These measures are intended to ensure that your personal data receives a level of protection that is essentially equivalent to that required within the European Union.

Data Retention

Personal data is retained only for as long as necessary for the purposes for which it was collected.

Generally:

  • Inquiry-related information is retained for up to 24 months after the last communication.
  • Client records are retained for the duration of the professional relationship and for any period required by applicable legal, accounting, or tax obligations.
  • Cookie-related data is retained in accordance with the retention periods described in the website’s Cookie Policy and the settings of the cookie consent management platform.

Cookies and Tracking Technologies

This website uses cookies and similar technologies to ensure the website functions correctly, improve user experience, and, where you have provided your consent, analyze website performance.

The website may use:

  • Strictly Necessary Cookies: Required for the operation and security of the website.
  • Analytics Cookies: Used to understand how visitors interact with the website through services such as Google Analytics.

Where required by law, analytics cookies will only be activated after you have provided your consent through the website’s cookie consent banner.

You may change or withdraw your consent at any time through the cookie settings available on this website or through your browser settings.

For more detailed information about the cookies used on this website, please refer to the separate Cookie Policy.

Data Security

Appropriate technical and organizational measures are implemented to protect personal data against unauthorized access, accidental loss, alteration, disclosure, or destruction. These measures include secure business systems, access controls, encryption where appropriate, malware protection, multi-factor authentication where available, and other security measures designed to protect the confidentiality, integrity, and availability of personal data.

Children

This website and the professional services offered through it are intended for adults. I do not knowingly collect or process personal data relating to individuals under the age of 18.

If you believe that a child has provided personal data through this website, please contact me at inquiry@damienofarrell.com. Where appropriate, I will take reasonable steps to delete such information without undue delay.

Automated Decision-Making

I do not use automated decision-making or profiling, as defined under Article 22 of the General Data Protection Regulation (GDPR), in relation to the personal data collected through this website or in the provision of my professional services.

Your Rights Under GDPR

Subject to applicable legal limitations, you have the right to:

  • Access your personal data.
  • Request correction of inaccurate or incomplete data.
  • Request deletion of your personal data.
  • Request restriction of processing.
  • Object to processing based on legitimate interests.
  • Withdraw consent at any time where processing is based on consent.
  • Request data portability where applicable.
  • Lodge a complaint with a supervisory authority.

To exercise any of these rights, please contact:

inquiry@damienofarrell.com

Supervisory Authority

If you believe that your personal data has been processed unlawfully, you have the right to lodge a complaint with the Italian Data Protection Authority:

Garante per la Protezione dei Dati Personali
Piazza Venezia 11
00187 Rome, Italy

Website: https://www.garanteprivacy.it

Changes to This Privacy Policy

This Privacy Policy may be updated periodically to reflect changes in legal requirements, services, or data processing activities. Any updated version will be published on this website with the revised effective date.