Privacy policy

This notice explains how the personal data of the visitors of this site, and of the people portrayed in the published photographs, are processed (Articles 13 and 14 of Regulation (EU) 2016/679, "GDPR").

Data controller

Francesco Nicotra. For any privacy request: privacy@francesconicotra.com.

Data, purposes and legal bases

Browsing data

To show the pages and protect the site from abuse, the infrastructure hosting it (Cloudflare) receives the technical data of every request: IP address, date and time, requested page, browser type and preferred language. The site does not use them to identify visitors, builds no profiles and does not combine them with other information.

• Purposes: delivering the site, security (preventing attacks and abuse), troubleshooting, aggregated and anonymous traffic statistics.
• Legal basis: the controller's legitimate interest in a working and secure site (Art. 6(1)(f) GDPR).
• Retention: the site's technical logs are kept for a few days (7 at most); Cloudflare's security data and aggregated statistics according to its policies, in a form not linked to the individual visitor.

The site uses no cookies and no tracking, advertising or profiling tools: see the cookie policy. The language is chosen from your browser setting, without storing anything.

Emails

If you write to an address shown on the site, the controller processes the data in your message (email address, name, text) only to reply to you.

• Legal basis: legitimate interest in answering the requests received (Art. 6(1)(f) GDPR) or steps taken at your request before entering into a contract (Art. 6(1)(b) GDPR).
• Retention: as long as needed to handle the request and no longer than 12 months after the last exchange, unless the law requires otherwise.

People portrayed in photographs

Photographs are published without location data (GPS) and without other identifying file metadata, removed before storage. Photographs in which a person can be recognised are published only with that person's release (Art. 6(1)(a) GDPR and Articles 96-97 of Italian Law 633/1941), which can be withdrawn at any time by writing to privacy@francesconicotra.com.

If you recognise yourself in a photograph and do not want it published, write to the same address: the photograph is withdrawn at once and then deleted, original files included.

Recipients and transfers

• Cloudflare, Inc. provides hosting, network and security as a processor (Art. 28 GDPR), under its data processing agreement. The site's content (texts and photographs) is stored in the European Union. Browsing data may also be processed outside the EU, in particular in the United States: Cloudflare participates in the EU-US Data Privacy Framework and applies the European Commission's standard contractual clauses.
• The provider of the controller's mailbox, for the messages you receive or send.

Data are neither sold nor disclosed to anyone else, and are not used for automated decisions.

How long deleted data remain

When content is removed, temporary copies in caches may remain for up to 24 hours and technical backups of the database for up to 30 days; then these disappear as well.

Your rights

You can at any time request access to your data, rectification, erasure, restriction of processing and portability, and object to processing based on legitimate interest (Articles 15-22 GDPR), by writing to privacy@francesconicotra.com. You will receive an answer within one month.

You also have the right to lodge a complaint with the Italian data protection authority, the Garante per la protezione dei dati personali (garanteprivacy.it), or with the authority of your country.

Changes

Any change to this notice is published on this page, with its update date.