Privacy notice
What data this site processes, for what purposes, how long it is kept and which rights you can exercise.
Data controller
The data controller is Jacopo Parretti. For any request concerning your personal data, write to jacopo.parretti2003@gmail.com.
No data protection officer has been appointed.
Data processed
For each category of data, the purpose, the legal basis and the retention period are set out below.
| Category | Purpose | Legal basis | Retention |
|---|---|---|---|
| Contact data submitted through the site's forms, such as name, email address and message text | To assess the request and reply | Pre-contractual steps taken at the data subject's request (art. 6.1.b GDPR) | Twelve months from the reply |
| Account data, such as username and sign-in credentials | To enable and manage access to the restricted area | Performance of the relationship with the data subject (art. 6.1.b GDPR) | Until the account is closed |
| Connection and session data, such as IP address, technical request information and active sessions | To ensure the site works and stays secure | Legitimate interest in system security (art. 6.1.f GDPR) | The technical time required, and in any case no more than thirty days for sessions |
Providing data is optional. Without it, requests cannot be answered and the restricted area cannot be accessed.
Processing not carried out
- No analytics, traffic measurement or session recording tools are used.
- No profiling is carried out and no decisions are taken based solely on automated processing.
- Data is not sold, transferred or exchanged for commercial or advertising purposes.
Recipients
Data is processed by the controller and by providers of hosting and IT infrastructure services, appointed as processors under article 28 GDPR and contractually bound to follow the instructions given to them.
Where a provider is based outside the European Union, the transfer takes place on the basis of the standard contractual clauses approved by the European Commission or another appropriate safeguard under article 46 GDPR.
Apart from these cases, data is not disclosed to third parties, except where required by law or requested by a judicial authority.
Security
The controller applies technical and organisational measures appropriate to protect data against unauthorised access, loss, alteration and disclosure, taking into account the state of the art and the risks of the processing.
Sign-in credentials are not stored in clear text, and communications between the browser and the controller's systems take place over an encrypted connection.
Your rights
At any time you may request:
- access to the data concerning you and a copy of it;
- correction of inaccurate or incomplete data;
- erasure of the data;
- restriction of processing;
- objection to processing based on legitimate interest;
- portability of the data in a structured, machine-readable format.
Requests should be sent to jacopo.parretti2003@gmail.com and receive a reply within thirty days.
You also have the right to lodge a complaint with the Italian data protection authority (garanteprivacy.it) or to bring the matter before the courts.
Updates
The date at the top of the page marks the last change. Changes affecting processing already under way are communicated to data subjects before they take effect.