Draft, to be reviewed by a privacy consultant before final publication.
Data controller
First and last name, sole trader · VAT no. to be confirmed · city, Italy.
Privacy contact: [email protected].
What data, why, and on what basis
Browsing data
When you visit the site, the servers receive the technical data needed to show you the pages: IP address, date and time, requested page, browser and operating system. We use it only to run the site, protect it from abuse and fix problems, never to identify or profile you.
Legal basis: legitimate interest in running and securing the site (art. 6(1)(f) GDPR). Retention: at most 7 days on our servers, unless needed to investigate a crime.
Cookies and analytics (Google Analytics 4)
The site uses no profiling cookies, advertising, or external maps or videos. If you accept in the banner, Google Analytics 4 counts visits and page views in aggregate, to understand which content is useful. Cookies set: _ga and _ga_<ID>, lasting up to 2 years. Advertising, ad signals and personalisation are always off.
Legal basis: your consent (art. 6(1)(a) GDPR and art. 122 of the Italian Privacy Code), which is optional: without it the site works the same and no request is sent to Google. Retention in Analytics: to be confirmed.
You can change your mind at any time from Cookie preferences (also at the bottom of every page): if you withdraw consent, the Analytics cookies are deleted. Your choice is stored only in your browser (local storage, not a cookie) for 6 months and is never sent to us.
If you write to us (for example to [email protected] or, to report a vulnerability, to [email protected]), we use your address and what you tell us only to reply. Legal basis: your request and our legitimate interest in handling it (art. 6(1)(b) and 6(1)(f) GDPR). Retention: as long as needed to handle the request.
Who receives the data
Data is never sold or shared. Only the providers we need process it on our behalf, as processors:
- OVH SAS (France), which provides the server the site runs on;
- Cloudflare, Inc. (United States), the network the site passes through for protection and delivery;
- Google Ireland Limited, for Google Analytics, only if you consent.
Transfers outside the European Union
Cloudflare and Google may process data in the United States. Transfers rely on the European Commission’s adequacy decision for the EU-U.S. Data Privacy Framework, which both companies have joined, and on standard contractual clauses.
Your rights
You can ask at any time to access, correct, erase, restrict and port your data, object to processing based on legitimate interest, and withdraw consent without affecting processing already carried out. Write to [email protected]: we reply within one month.
You also have the right to lodge a complaint with the Italian Data Protection Authority, the Garante per la protezione dei dati personali.
Other information
The site makes no automated decisions and does not profile visitors. There are no forms: no data is required to read the pages.
Last updated: 2 October 2026.