Privacy & cookies

The data controller is Erika Leoni (Italian VAT no. 04944110230). For any request regarding your data, write to erika.leoni@outlook.it.

Browsing data: while you visit, the systems hosting the site record technical data (such as IP address, browser type and pages requested) needed for operation and security.

Aggregate statistics: the site uses Vercel Analytics to count visits and page views in anonymous, aggregate form. No cookies are used and no profiling or cross-site tracking takes place.

Contact data: writing to the email address shown or using the contact form is entirely optional; if you do, the data you provide (name, email address and message content) is processed solely to reply to you. Name, email and message are necessary to act on your enquiry: without them no reply is possible.

A message sent through the form is transmitted by an email delivery service and lands in the controller’s mailbox, where it stays until it is deleted. The site keeps no copy of it: there is no database of messages. Details of the providers involved are in “Providers” below.

Browsing data and aggregate statistics are processed under the legitimate interest in ensuring the operation, security and improvement of the site (Art. 6(1)(f) GDPR).

Contact data is processed to respond to your enquiry, on the basis of that enquiry and any pre-contractual steps (Art. 6(1)(b) GDPR).

This site uses no cookies at all, neither its own nor third-party, and therefore shows no consent banner. The only information that may be stored in your browser is your light- or dark-theme preference, saved locally (localStorage) only if you change the theme: it is technical data, is never sent to any server, and you can clear it from your browser settings. Until you touch the theme switch, the site writes nothing to your browser.

The site is hosted by Vercel, which processes technical browsing data and provides the aggregate statistics.

Delivery of form messages is handled by Resend: the sending domain is configured to send from the European region, but the provider is US-based and, like any email delivery service, processes the message content and keeps delivery logs under its own terms.

The message then lands in the controller’s Microsoft Outlook mailbox, where it is stored and processed under Microsoft’s terms as well.

These providers act as processors on behalf of the controller and, for data they process for their own purposes, as independent controllers. Data is not sold, and is not disclosed to third parties for marketing or for any purpose unrelated to your enquiry: it is shared only with the providers named above, and only as far as running the site and delivering the messages requires.

The providers named above are established or run infrastructure in the United States, so data may be processed, wholly or partly, outside the European Union. Such transfers rely on the safeguards required by Chapter V GDPR: in particular standard contractual clauses and, where applicable, European Commission adequacy decisions.

You can ask for more information about the safeguards in place, or for a copy of the relevant documentation, by writing to erika.leoni@outlook.it.

Enquiries that lead to no engagement: messages and contact data are deleted within 24 months of the last meaningful contact.

Enquiries that become an engagement: the data needed to manage the relationship is kept for its whole duration. Accounting and tax documents, and whatever is needed to bring or defend a legal claim, are then kept for the statutory periods: as a rule ten years for accounting records, as set by Art. 2220 of the Italian Civil Code and the related tax obligations. The remaining correspondence is deleted once it is no longer necessary for those purposes.

Hosting logs and aggregate statistics are kept by the respective providers for the limited periods their services provide; the statistics cannot be traced back to an individual.

At any time you may exercise the rights set out in Articles 15-22 GDPR: access, rectification, erasure, restriction, objection and data portability. To do so, write to erika.leoni@outlook.it.

You also have the right to lodge a complaint with the competent supervisory authority, the Italian Data Protection Authority (Garante per la protezione dei dati personali, garanteprivacy.it).

No decisions are taken based solely on automated processing, including profiling, that produce legal effects concerning you or similarly significantly affect you.