Privacy notice

Who is responsible

The data controller for this website is Paolo Giannone, Milan, Italy. You can reach me at any time through the contact form or via LinkedIn for any privacy-related question or request.

What data I collect and why

If you use the contact form, I process the data you enter — your name, email address, optionally your company, and the content of your message — solely to read and reply to your request. The legal basis is my legitimate interest in responding to inquiries and, where your message concerns a possible engagement, pre-contractual measures (Art. 6(1)(f) and Art. 6(1)(b) GDPR).

I do not use your data for marketing, I do not build profiles, and I do not sell or share your data with third parties for their own purposes.

Who processes the data

This site is hosted by Vercel, which processes technical connection data (such as IP addresses in server logs) to deliver the pages, and provides the cookieless, privacy-friendly analytics described below. Messages sent through the contact form are delivered to me by email through Resend and forwarded to my private Telegram chat (processor: Telegram Messenger). The site’s database runs on a server operated by the site owner at a hosting provider (Hostinger) in Frankfurt, Germany (EU), and holds only short-lived hashed identifiers used for abuse prevention — never the content of your message. These providers act as data processors on my behalf and may process data outside the European Economic Area under appropriate safeguards (such as standard contractual clauses).

Analytics

This site uses Vercel Web Analytics, a cookieless analytics solution that measures aggregate page views and performance metrics without identifying individual visitors, without cookies and without cross-site tracking. No advertising or third-party tracking scripts are used.

Cookies

This website sets no cookies — neither for analytics nor for marketing — and uses no third-party trackers.

How long data is kept

Contact-form messages are kept only as long as needed to handle your request, and are deleted afterwards unless a continued professional relationship requires keeping them.

Your rights

Under the GDPR you have the right to access, rectify or erase your personal data, to restrict or object to processing, and to data portability. Where the Swiss Federal Act on Data Protection (FADP/nLPD) applies, you have equivalent rights of access, rectification, deletion and data portability. To exercise any of these rights, contact me through the contact form.

You also have the right to lodge a complaint with the Italian data protection authority (Garante per la protezione dei dati personali) or with your local supervisory authority.

Changes to this notice

This notice may be updated when the site changes. The current version is always the one published on this page.