Privacy Policy

1. Data controller

The controller of the personal data collected through filippomartinelli.it is Filippo Martinelli, who can be reached at fil.martinelli96@icloud.com.

This notice is provided under Article 13 of Regulation (EU) 2016/679 (GDPR).

2. What data we process and why

• Browsing data — the server hosting the site automatically records in its technical logs data such as IP address, date and time of the request, requested page, browser and operating system. They are used to deliver the site, keep it secure and detect abuse. Legal basis: the controller's legitimate interest (Art. 6(1)(f) GDPR).
• E-mail contact — the site has no contact forms. If you write to the e-mail address shown on the site, the data in your message (e-mail address, name, text and any attachments) are used only to reply to your request. Legal basis: pre-contractual measures or legitimate interest in following up your request (Art. 6(1)(b) and 6(1)(f) GDPR).
• Private area — the /auth and /admin pages are reserved for the controller and the administrators he authorises to edit the site texts. For them, e-mail address, password (stored only as a hash) and a technical session cookie are processed. Legal basis: legitimate interest in managing and securing the site (Art. 6(1)(f) GDPR).
• Usage statistics — only if you accept them in the cookie banner, the site uses Google Analytics 4 to collect aggregate, pseudonymous information on how pages are used (page views, duration, device, approximate location). Legal basis: consent (Art. 6(1)(a) GDPR), which you can withdraw at any time.
• Preferences — your chosen language and cookie choices are stored only in your browser (local storage) and are not sent to the server.

3. What the site does not do

The site uses no profiling or advertising cookies, makes no automated decisions, embeds no third-party content (videos, maps, social widgets) and serves its fonts from its own server, with no calls to external services. The LinkedIn link is a plain link: once you open it, LinkedIn's privacy policy applies.

4. Whether providing data is required

Browsing requires no data beyond technical data. Writing to the controller is optional, but without contact details a reply is not possible. Consent to statistics is optional and refusing it does not limit your use of the site in any way.

5. Recipients

• Friuli On, which built and hosts the site, as data processor (Art. 28 GDPR); the server is located in the European Union.
• Google Ireland Limited, for Google Analytics 4, only if you have consented to statistics.
• The controller's e-mail service provider, for messages sent to the e-mail address shown on the site.

Data are not published or passed on to third parties for commercial purposes.

6. Transfers outside the European Union

Google may process data in the United States: the transfer is based on the EU-US Data Privacy Framework adequacy decision and, as a fallback, on the standard contractual clauses (SCC) approved by the European Commission. The same safeguards (adequacy decision or standard contractual clauses) apply to any processing of e-mail messages outside the European Economic Area.

7. Retention

• Server technical logs: for a limited period, with periodic rotation, unless needed to investigate unlawful activity.
• E-mail messages: for as long as needed to handle the request and the correspondence that follows.
• Private-area accounts: while the account remains active; the session cookie expires after 14 days or on logout.
• Google Analytics 4 data: 2 months.

8. Your rights

You may at any time request access to your data, rectification, erasure, restriction of processing and portability, and object to processing based on legitimate interest (Articles 15–22 GDPR), by writing to fil.martinelli96@icloud.com. You can withdraw consent to statistics at any time with the "Cookie preferences" button at the bottom of the page, without affecting the lawfulness of processing carried out before withdrawal.

If you believe the processing infringes the GDPR you may lodge a complaint with the Italian Data Protection Authority, Garante per la protezione dei dati personali (www.garanteprivacy.it), or with the supervisory authority of the EU country where you live or work.

9. Changes

This notice may be updated. The current version is always published on this page, with the date of the last update.