Privacy policy

Who is responsible

The data controller is Nicolò Salvatore. For any privacy request, write to the email address at the bottom of this page.

What I collect and why

Contact form: your name, email address, and whatever you choose to tell me about your company and project. I use it only to reply to your enquiry and, if we work together, to prepare a proposal. Legal basis: steps taken at your request before a contract (GDPR art. 6(1)(b)).

Spam protection: the form uses Cloudflare Turnstile, which processes technical signals such as your IP address and browser characteristics to tell people from bots. Legal basis: legitimate interest in keeping the form usable (art. 6(1)(f)).

Visit counts without cookies: the site uses Cloudflare Web Analytics, which counts page views without cookies, stores nothing on your device and builds no profile of you. Legal basis: legitimate interest in knowing how much the site is used (art. 6(1)(f)).

Google Analytics, only if you accept: if you choose “Accept” in the cookie box, Google Analytics 4 records which pages you open, which contact buttons you use, whether you start and send the contact form, roughly where you are (country and city, worked out from your IP address, which Google says it does not store), your device and browser, and the site you came from. It never receives what you write in the form. Its advertising features are switched off. Legal basis: your consent (art. 6(1)(a)).

Cookies

Without your consent this site sets no cookies. Two things are kept in your browser because the site needs them, and neither identifies you: your answer to the cookie question (kept for 12 months, then I ask again) and, until you close the tab, a note that the opening animation has already played.

If you accept, Google Analytics sets two cookies, “_ga” and a second one whose name starts with “_ga_”. They hold a random number that tells one browser from another, and they last up to 12 months from your last visit.

You can change your mind at any time: “Cookie settings” at the bottom of every page, or the button at the end of this page, shows the question again. If you decline after having accepted, the Google Analytics cookies are deleted from your browser and nothing more is sent.

Who processes the data

The site is hosted by Cloudflare, Inc., which also delivers form messages to my mailbox. Messages are stored in my email account with Google. Both may process data outside the EU under the European Commission’s standard contractual clauses or the EU–US Data Privacy Framework.

Google Analytics, if you accept it, is provided by Google Ireland Limited, which may pass data to Google LLC in the United States under the EU–US Data Privacy Framework.

I do not sell personal data or use it for automated decisions.

How long I keep it

Enquiries that do not lead to a project are deleted within 24 months. If we work together, records are kept as long as tax and accounting law requires.

Google Analytics keeps data that can be tied to a cookie for at most 14 months. After that only totals remain.

Your rights

You can ask to access, correct, delete or export your data, or object to or restrict its use. Where I rely on your consent, you can withdraw it at any time; this does not affect what was done before. You can also complain to the Italian data protection authority, the Garante per la protezione dei dati personali (garanteprivacy.it), or to the authority where you live.

Privacy contact: [email protected]