Privacy Policy

The data controller is Filippo Franchini, Italian VAT number 04322491202.

For any request concerning personal data, including the rights described in section 6, you can write to filippofranchini@outlook.it.

No Data Protection Officer (DPO) has been appointed: the conditions under GDPR Article 37 do not apply.

This website does not provide account registration or restricted areas.

The quote request form collects: your name (and company, if you add it), your email address, the type of project, an indicative budget range and your expected timing. A free-text description of the project is optional; all other fields are required, because without them the request cannot be assessed or answered. The date and time at which you confirmed having read this notice, and the exact wording shown to you, are recorded together with the message.

If you book a call through the calendar, the data you enter on the booking page (name, email address, selected time slot and any notes) is collected directly by Cal.com, Inc. on its own platform and passed on to me to manage the appointment.

During browsing, technical data may be processed, such as IP address, user agent, request timestamp, visited URLs, and diagnostic information required for service operation and security. The IP address is also used to limit the number of form submissions within a given time window and prevent abuse.

Traffic statistics are collected through Vercel Analytics, which produces aggregated data without profiling cookies.

Technical information is processed to deliver the website, maintain security, prevent abuse, and monitor performance and reliability. The legal basis is the controller's legitimate interest (GDPR Art. 6(1)(f)) in ensuring proper operation of the online service; aggregated traffic statistics rest on the same basis.

Data submitted through the contact form is processed to assess your request, reply to it and handle any follow-up exchanges. The legal basis is the performance of pre-contractual measures taken at your request (GDPR Art. 6(1)(b)): by asking for a quote, you are the one requesting that your enquiry be examined, and the data collected is what is needed to do so. This is why no consent is requested: the checkbox you tick before sending only confirms that this notice was made available to you, and it is recorded with a date and time.

No automated decision-making or profiling within the meaning of GDPR Article 22 is carried out: your data is not used to build behavioural profiles, and no decision affecting you is taken automatically.

Technical data is retained only for the period strictly necessary for the purposes above and according to the retention terms of the infrastructure providers in use.

Messages received through the contact form, together with the record of your acknowledgement, are retained for as long as needed to handle the request and any resulting relationship, and in any case no longer than 24 months from the last contact, unless legal obligations require otherwise.

Your data is not sold and is not disclosed to third parties for their own purposes. It is accessible to the providers used to run the service, which act as data processors on my behalf. Both are established in the United States, so a transfer of data outside the European Union does take place, under the safeguards required by Chapter V of the GDPR:

Vercel, Inc. hosts the website and processes technical data as part of the hosting service. The transfer relies on the European Commission's standard contractual clauses and the UK Addendum, which the provider states as its transfer mechanism for personal data leaving the European Economic Area in its own data processing terms.

Resend, Inc. delivers the emails generated by the form and processes your name, email address and message content. The transfer relies on the standard contractual clauses adopted by the European Commission in Decision 2021/914, incorporated into the provider's data processing terms. Resend in turn uses its own sub-processors, listed publicly on its website.

Call bookings are handled on Cal.com, an external service that opens in a separate tab. The data entered on the booking page is collected by Cal.com, Inc. (United States), which according to its own notice acts as an independent data controller: for that data I do not determine the purposes and means, and Cal.com's own terms apply. If you would rather not use the external platform, you can arrange an appointment by writing to the address in section 1.

You may request details of the applicable safeguards, including a copy of the standard contractual clauses, by writing to the address in section 1.

Data subjects may exercise rights under GDPR Articles 15-22, where applicable: access, rectification, erasure, restriction, objection, and portability. In particular, you may ask at any time for the request you sent to be deleted, and you may object to the processing of technical data based on legitimate interest.

Requests can be sent to the address in section 1 and are answered within one month.

You may also lodge a complaint with the Italian supervisory authority, Garante per la protezione dei dati personali (www.garanteprivacy.it), or with the authority of the country where you live.

This notice may be updated over time. Any updates will be published on this page with a revised date.