Privacy policy

Who processes the data

The data controller is Paolo Bortolotti, Finale Ligure (SV), Italy, VAT ID IT01533710099.

For any question about your data, write to info [at] paolobortolotti.com.

Browsing data

Like any site, the server hosting these pages automatically records some technical data on every visit: IP address, date and time, requested page, response code, browser type and operating system.

They are needed to run the site and protect it from abuse. The legal basis is the controller's legitimate interest (Art. 6.1.f GDPR). I don't use them to identify you, and they stay in the hosting provider's logs for the technical period the service provides.

When you write to me

The site has no contact forms. The "Write to me" buttons open your email program with a message already addressed to info [at] paolobortolotti.com.

If you write to me, I process your email address, your name and whatever you decide to tell me, in order to reply and, if you ask, to prepare a quote. The legal basis is the performance of pre-contractual measures requested by you (Art. 6.1.b GDPR).

I keep the correspondence for as long as needed to handle the request. If an engagement follows, the data tied to contracts and invoices is kept for ten years, as required by tax law.

Visit statistics

I use Google Analytics 4 to know how many people visit the site, which pages they read and which buttons they click (contact requests, the menu), which sections they see and for how long, without recording name, email or other data that identifies you. It turns on only if you accept in the banner: without consent the script isn't even downloaded. The legal basis is consent (Art. 6.1.a GDPR), which you can withdraw at any time.

Google Analytics is configured without Google Signals and without advertising personalization. Details, cookies used and duration are in the cookie policy.

Who receives the data

The data is not sold or passed to third parties for commercial purposes. It is processed only by the providers I need to run the site and email: the hosting provider, the email service provider and, if you consent to statistics, Google Ireland Limited.

Google may transfer data to the United States. Google LLC participates in the EU-US Data Privacy Framework, found adequate by the European Commission in its decision of 10 July 2023.

Links to other sites

The site contains links to LinkedIn and Instagram. There is no embedded content: the two platforms receive data only if you click the link, and from that moment their own privacy notices apply.

Fonts, images and videos are loaded from this same server: browsing doesn't contact external services, except Google Analytics if you accept it.

Your rights

You can ask at any time to access your data, correct it, delete it, restrict its processing, receive it in a readable format or object to the processing (Arts. 15-22 GDPR). An email to info [at] paolobortolotti.com is enough.

If you believe the processing violates the GDPR, you can lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali), garanteprivacy.it.

Changes

If the services used by the site change, I update this page and the date at the top.