Privacy Policy

This policy explains which personal data this website processes, why, and what your rights are, in accordance with the EU General Data Protection Regulation (GDPR, Regulation (EU) 2016/679).

Data controller

Daniele Crea, Rome, Italy — email: creadaniele@gmail.com.

What data is processed and why

Contact form. When you send a message, the site processes your name, email address and the text of your message in order to reply to you. The legal basis is the handling of your request (Art. 6(1)(b) GDPR — steps taken at your request before a possible contract) and, for unsolicited messages, my legitimate interest in answering (Art. 6(1)(f)).

Anti-spam protection. To limit automated abuse of the form, an irreversible encrypted fingerprint (hash) of your IP address is stored together with the message and used only to count how many messages are sent in a short time (legitimate interest, Art. 6(1)(f)).

Email. If you write directly to the email address shown on the site, your message is handled by my email provider and used only to reply.

Website statistics (only with your consent). If you click “Accept” in the cookie banner, Google Analytics 4 is loaded to produce aggregate statistics on visits (Art. 6(1)(a) GDPR — consent). If you click “Reject” or do nothing, Analytics is not loaded. You can change your choice at any time with “Cookie settings” in the footer.

Technical data. Like every website, the hosting servers automatically record technical data (such as IP address, browser and date/time of the request) for security and to keep the site running (legitimate interest, Art. 6(1)(f)).

Who processes the data on my behalf

• Vercel Inc. (USA) — website hosting and delivery.

• Supabase Inc. — database where contact messages are stored; servers located in the European Union (Frankfurt, Germany).

• Resend (USA) — delivery of the email notification of your message.

• Google Ireland Ltd / Google LLC — Google Analytics, only if you accept statistics cookies.

• Vimeo.com Inc. (USA) — some project videos are embedded from Vimeo, which receives your IP address when the video is displayed. The player is loaded with the “do not track” option.

Where data is transferred outside the European Union, the transfer is based on the EU–US Data Privacy Framework and/or the Standard Contractual Clauses adopted by the European Commission.

How long data is kept

• Contact messages: for the time needed to handle your request and, at most, 24 months; then they are deleted.

• IP fingerprint for anti-spam: together with the related message.

• Google Analytics data: 2 months (Google Analytics data-retention setting).

Your rights

You can ask at any time to access, correct or delete your data, to restrict or object to its processing, and to receive it in a portable format (Articles 15–22 GDPR). Where processing is based on consent, you can withdraw it at any time without affecting the lawfulness of previous processing. To exercise your rights, write to creadaniele@gmail.com.

You also have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali, www.garanteprivacy.it).

Is providing data mandatory?

No. However, without your name, email and message it is not possible to reply to your request through the form.

No automated decision-making or profiling is carried out.

More details on cookies are in the Cookie Policy.