Privacy notice
This notice explains how the personal data of people who visit this website, and of people who write through the contact form, is processed under Article 13 of Regulation (EU) 2016/679 (GDPR).
Last updated: [TO VERIFY: date].
Data controller
Alessandro Criscuolo, [TO VERIFY: address], VAT no. [TO VERIFY: VAT number]. For any request about your data you can write to [TO VERIFY: controller's email address for privacy requests].
What data is processed
If you use the contact form: name, email address, type of enquiry and message; optionally publication, agency or organisation, date or period. The form does not ask for special categories of data (Article 9 GDPR): it is best not to include any in your message.
When you browse the website: the technical data that the hosting service records to run and protect the website (for example IP address, browser type, pages requested) [TO VERIFY: data recorded by Cloudflare].
Why, and on what legal basis
Form data is used only to reply to your request and, if you ask, to prepare a quote. Legal basis: [TO VERIFY with the professional: steps taken at the data subject's request before entering into a contract, Article 6(1)(b), and/or legitimate interest in replying, Article 6(1)(f)]. Technical data is used to run the website and keep it secure: [TO VERIFY with the professional: legitimate interest, Article 6(1)(f)].
There is no newsletter, marketing or any other use: that is why the form has no consent boxes. There is no automated decision-making.
Providing your data
Name, email, type of enquiry and message are needed to reply to you: without them, the message cannot be sent. The other fields are optional.
Who receives the data
The data is not sold or disclosed. It is processed on the controller's behalf by these providers:
- Web3Forms, which forwards the messages sent through the form [TO VERIFY: provider's company name and registered office];
- Cloudflare, which hosts the website and records its technical data [TO VERIFY: company name and registered office];
- the provider of the mailbox where the messages arrive [TO VERIFY: mailbox and provider].
The links to WhatsApp and, once it is online, to Instagram lead to external services, which process data as independent controllers only if you choose to open them.
Transfers outside the European Union
Some providers may process data outside the European Union. [TO VERIFY: for Web3Forms, Cloudflare and the email provider, country of processing and safeguards adopted, for example an adequacy decision or standard contractual clauses.]
How long data is kept
Messages sent through the form are kept for [TO VERIFY: retention period for messages], then deleted. Technical data from the hosting service is kept for [TO VERIFY: retention period for logs].
Your rights
You can ask at any time for access to your data, rectification, erasure, restriction of processing and portability, and you can object to processing (Articles 15–22 GDPR), by writing to the address given above. If you believe the processing infringes the GDPR you can lodge a complaint with the Italian data protection authority, the Garante per la protezione dei dati personali (garanteprivacy.it).
Cookies and storage
The website does not use analytics, profiling or third-party cookies, and does not load external resources when it opens: the fonts are hosted on the website itself, and there are no maps, videos or embedded content. That is why there is no cookie banner.
The website uses only two technical storage items in the browser, which last until the tab is closed (sessionStorage) and are not sent to anyone: one shortens the opening animation on later visits, the other remembers whether you have paused the strip of stories on the home page. [TO VERIFY after publication: that the hosting service does not add cookies of its own.]
Changes to this notice
If the processing changes (for example with an analytics service), this page will be updated and, where needed, consent will be requested. The date of the last update is shown at the top.