Notice given under Article 13 of Regulation (EU) 2016/679 (GDPR). It concerns the site noferi.it and nothing else.

Data controller

The controller is Stefano Noferi, a natural person. For any request concerning your data, use the contact page.

What I process, and why

1. Navigation data

The server hosting the site records access, as any web server does: IP address, date and time, requested URL, response code, browser user agent. This serves to run the site, diagnose faults and defend it against abuse.

  • Legal basis: legitimate interest in the security and operation of the service, Article 6(1)(f) GDPR.
  • Retention: logs are kept for as long as technically needed for diagnostics and security. They are not used to profile visitors and are not combined with other data.

2. Visit statistics

I use Google Analytics 4 to know how many people read, where they come from and which pages work. It activates only if you consent: until then the script is not even loaded and no cookie is written. The configuration enables IP anonymisation.

  • Legal basis: consent, Article 6(1)(a) GDPR and Article 122 of the Italian Privacy Code. You can withdraw it at any time from the cookie page, with immediate effect and without affecting the lawfulness of processing carried out beforehand.
  • Recipient: Google Ireland Limited, acting as processor.
  • Transfers outside the Union: data may be processed in the United States. Google LLC participates in the EU-US Data Privacy Framework, covered by the European Commission's adequacy decision of 10 July 2023.
  • Retention: the cookies last two years from the last visit; aggregated data remains in the Analytics property according to the service's retention settings.

The itemised list of cookies, with names and durations, is in the cookie policy.

3. Contact form

The form on the contact page collects name, email address, subject and message text. I use them to read you and reply.

  • Legal basis: responding to your request, Article 6(1)(b) GDPR where the message concerns an existing or prospective relationship, otherwise legitimate interest in replying to those who write to me, Article 6(1)(f).
  • Recipient: submission goes through Formspree, Inc., a United States service that receives the message and delivers it to me, acting as processor.
  • Transfers outside the Union: form data is processed in the United States.
  • Retention: I keep correspondence for as long as needed to handle the request and anything following from it.

Providing the data is voluntary, but without name, email and message I cannot reply. If you would rather not use this channel, you can write to me on LinkedIn.

What I do not do

  • No profiling, no advertising, no transfer or sale of data to third parties.
  • No newsletter and no commercial mailings: I do not collect addresses in order to write to you.
  • No automated decision-making producing legal effects concerning you.
  • Fonts are hosted on this site: loading a page does not send your IP address to any external font provider.

Your rights

You may at any time ask me for access to the data concerning you, rectification, erasure, restriction of processing, portability, and you may object to processing based on legitimate interest (Articles 15-22 GDPR). Where processing rests on consent, you may withdraw it.

To exercise these, use the contact page.

Updates

This notice may change, for instance if the tools the site uses change. The version in force is the one published here; changes are tracked in the site's repository.