Privacy Policy

This is an English translation provided for your convenience. The Italian version is the legally binding one: in case of any discrepancy, the Italian text prevails.

Information provided under Articles 13 and 14 of Regulation (EU) 2016/679 (GDPR) and of Italian Legislative Decree 196/2003 as amended by Legislative Decree 101/2018. Last updated: 8 September 2026.

1. Data controller

The data controller is Piero de Cindio, Italian VAT number 02963790783, e-mail info@pierodecindio.it. You can write to this address for any request concerning your personal data.

2. What data is collected, and why

2.1 Browsing data

In the course of normal operation, the website’s systems and software acquire certain data whose transmission is inherent in the use of Internet protocols: IP address, browser type, operating system, referring page, time of the request and pages visited. This data is processed to keep the website working, to keep it secure and to produce anonymous statistics. Legal basis: the controller’s legitimate interest (Art. 6.1.f GDPR). Server logs are kept by the hosting provider for no longer than strictly necessary, as a rule not beyond 12 months.

2.2 Contact form, e-mail, telephone and WhatsApp

If you contact me through the form on the website, by e-mail, by telephone or on WhatsApp, the data you provide (name, e-mail, telephone number, the content of your message) is processed solely to answer you and, if that is what you want, to begin a professional relationship. Legal basis: steps taken before entering into a contract, at your request (Art. 6.1.b GDPR). The data is kept for as long as it takes to deal with your request, and in any case no longer than 24 months from the last contact, unless a contract is entered into — in which case the periods set by law apply, as a rule 10 years for tax documents. WhatsApp is a service of Meta Platforms Ireland Ltd.: by using it you also accept its privacy policy.

2.3 Spam protection (Google reCAPTCHA)

The contact form is protected by Google reCAPTCHA, which analyses browsing behaviour to tell people apart from bots. The service is provided by Google Ireland Ltd. and may involve transferring data to the United States under the EU–US Data Privacy Framework. Legal basis: legitimate interest in the security of the website (Art. 6.1.f GDPR). Google’s privacy policy: policies.google.com/privacy.

2.4 Statistics (Google Analytics 4)

Only with your consent, given through the cookie banner, Google Analytics 4 is used to understand how the website is used (pages visited, time spent, device, approximate geographic area). Your IP address is not recorded by Google Analytics 4. Legal basis: consent (Art. 6.1.a GDPR), which you can withdraw at any time from your cookie preferences. Statistical data is kept for 14 months. More detail in the Cookie Policy.

2.5 Typefaces (Google Fonts)

The website loads the “Inter” typeface from Google Fonts servers: your browser sends Google its own IP address in order to download the file. Legal basis: legitimate interest in a consistent presentation of the website (Art. 6.1.f GDPR).

3. How data is processed, and security

Data is processed using computer and electronic tools, with security measures appropriate to prevent loss, unauthorised access and unlawful use (encrypted HTTPS connection, security updates, backups, protected credentials). No profiling is carried out, and no automated decision-making that produces legal effects on data subjects.

4. Who receives the data

Data may be processed by suppliers acting as processors or as independent controllers:

Keliweb S.r.l. (Italy): hosting of the website and of the e-mail service.
Google Ireland Ltd.: reCAPTCHA, Google Analytics 4, Google Fonts.
Meta Platforms Ireland Ltd.: WhatsApp, if you choose to use that channel.
Advisers and professionals (for example an accountant) for tax and legal obligations, limited to the data needed.

Data is never sold or passed to third parties for marketing purposes.

5. Transfers outside the EU

Some suppliers (Google, Meta) may transfer data to the United States. Those transfers take place on the basis of the European Commission’s adequacy decision concerning the EU–US Data Privacy Framework and, failing that, of the Standard Contractual Clauses.

6. Your rights

At any time you may exercise the rights set out in Articles 15 to 22 GDPR: access to your data, rectification, erasure, restriction of processing, portability, objection, and withdrawal of consent (without affecting the lawfulness of processing carried out beforehand). To do so, write to info@pierodecindio.it. You also have the right to lodge a complaint with the Italian data protection authority, the Garante per la protezione dei dati personali (www.garanteprivacy.it).

7. Whether you have to provide data

Providing the data requested by the contact form is optional, but it is necessary in order to receive a reply. Consent to statistical cookies is optional: refusing it does not limit your use of the website in any way.

8. Children

The website is not aimed at children under 14 and does not knowingly collect data concerning them.

9. Changes

This policy may be updated; the date of the last change is shown at the top. You are invited to check it from time to time.