Who handles your data
The data controller is Nicola Giunchi, Forlì (FC), Italy. For anything concerning your data, write to [email protected]. No Data Protection Officer has been appointed: the conditions of Art. 37 GDPR do not apply.
What I collect, and why
1. The contact form
If you write to me through the form, I collect your name, email address and the message. I use them only to reply. The legal basis is the performance of pre-contractual measures you requested (Art. 6.1.b GDPR).
The message passes through a Cloudflare Workers service, which forwards it via Resend to my mailbox. Both act as processors (Art. 28 GDPR). I keep received emails for 24 months after the last contact, then delete them.
2. Visit statistics
I use Google Analytics 4 to understand which articles get read and where readers come from. It collects pages visited, traffic source, approximate country and city, device type and a few interactions (such as form submissions).
It only runs if you consent. Until you accept in the banner, the Google Analytics script is not even loaded: your browser never contacts Google Analytics' servers and no cookie is set. The legal basis is your consent (Art. 6.1.a GDPR), which you can withdraw at any time via the “Cookie preferences” link at the bottom of every page. Data is retained for 14 months. I do not use Google Signals, I run no advertising and I profile no one.
I also use Cloudflare Web Analytics, which counts visits in aggregate without cookies and without identifying visitors. It neither stores nor reads data on your device, so it requires no consent; the legal basis is the legitimate interest in knowing how many people read the site (Art. 6.1.f GDPR).
3. Technical logs
The site is hosted on Cloudflare Pages. Like any web server, the infrastructure records technical data (IP address, timestamp, requested page) for security and diagnostics, for limited periods and under Cloudflare's control.
Who else sees your data
Only the providers needed to run the site: Cloudflare (hosting and infrastructure), Resend (email delivery), Google LLC (statistics, only with your consent). Typefaces are served from my own server, not from Google: before you choose, no request leaves the site towards third parties. I do not sell, share or trade data with anyone else.
Transfers outside the European Union
Google LLC and Resend are based in the United States. Transfers rely on the safeguards of Chapter V GDPR — the EU-US Data Privacy Framework adequacy decision and/or Standard Contractual Clauses. You can request a copy at the address above.
Your rights
You may ask me at any time to access your data, correct it, erase it, restrict processing, object to processing or receive your data in a portable format (Arts. 15-22 GDPR). If you gave consent, you can withdraw it whenever you like, without affecting the lawfulness of processing carried out beforehand.
Write to [email protected]: I reply within a month. If you believe something is wrong, you may lodge a complaint with the Italian Data Protection Authority (Art. 77 GDPR).
What I don't do
No automated decision-making, no profiling, no behavioural advertising, no newsletter unless you explicitly ask for one.
Details of individual cookies are in the cookie policy.