Privacy policy

Browsing data

During normal use, the systems running this website (the virtual server hosting it and the Cloudflare network that routes and protects its traffic) collect some technical data that is inherent to Internet protocols: IP address, date and time of the request, requested page, response code and browser information (user agent).

This data is used only to keep the website running and secure, and to detect abuse. It is not used to identify or profile visitors.

Data you provide

If you write to the email or PEC addresses shown on the website, your email address, name and any other information in your message are processed only to reply to your request and, if you ask for it, to prepare a proposal.

Legal basis

• Browsing data: the controller's legitimate interest in keeping the website running and secure (art. 6(1)(f) GDPR).
• Email requests: pre-contractual measures taken at your request (art. 6(1)(b) GDPR) and the legitimate interest in replying to messages received (art. 6(1)(f) GDPR).

Data retention

• Browsing data: on the server hosting the website, for a limited period of no more than 30 days, unless needed to investigate abuse or crimes. Cloudflare keeps its own logs under its own privacy policy.
• Emails: for as long as needed to handle the request; if a contract follows, for the period required by law, for example for tax and accounting purposes.

Cookies

This website does not use profiling cookies, analytics or tracking tools. To protect the website from automated traffic and attacks, Cloudflare may set strictly necessary technical cookies (for example __cf_bm), which do not require consent. For this reason there is no cookie consent banner.

Third-party services

To display the pages correctly, your browser downloads some resources from external services (content delivery networks). When this happens, these services receive your IP address and technical browser information:

• Tailwind CSS (cdn.tailwindcss.com), for the website's styling;
• jsDelivr (cdn.jsdelivr.net), for the scripts behind the interactive features.

These providers may process data outside the European Union, under their own privacy policies. This processing is based on the legitimate interest in the website working correctly (art. 6(1)(f) GDPR). External links, for example to the LinkedIn profile, lead to websites with their own privacy policies.

Recipients

Data is not sold or shared with third parties for marketing purposes. It is processed, as data processors, by the providers that make the website available: the provider of the virtual private server (VPS) hosting it and Cloudflare, Inc., which routes and protects traffic to the website. Messages sent to the email address are handled by Google (Google Workspace), which provides the email service. Cloudflare and Google may process data outside the European Union, under the safeguards provided by the GDPR, such as standard contractual clauses and the EU-U.S. Data Privacy Framework. Data may also be disclosed to authorities when required by law.

Your rights

At any time you can request access to your data, rectification, erasure, restriction of processing and portability, or object to processing (articles 15-22 GDPR), by writing to the email or PEC addresses above.

You also have the right to lodge a complaint with the Italian Data Protection Authority, the Garante per la protezione dei dati personali (www.garanteprivacy.it).

Whether providing data is required

Processing browsing data is necessary to display the website; sending an email is optional. No automated decision-making takes place.

Changes to this policy

This policy may be updated over time; the date of the last update is shown at the top of the page.