Privacy Policy
How we handle your data
Last updated: June 2025
1. Data Controller
The data controller is Alessandro Coretti, based in Rome, Italy. Contact: alessandrocoretti2002@gmail.com
2. Data collected and purpose
Contact form: we collect your name, email address, and message. This data is used exclusively to respond to your enquiry and is never shared with third parties. The form is powered by Supabase (supabase.com), with servers in Europe.
Strictly necessary cookies: we use cookies required for the site to function (language preference, session state). We do not use third-party tracking cookies without your explicit consent.
Functional and analytics cookies: only with your consent, cookies that remember your preferences or help us understand site usage may be activated, without collecting personally identifiable data.
3. Legal basis
Contact form data is processed on the basis of your explicit consent (Art. 6(1)(a) GDPR) given when submitting the form. Strictly necessary cookies are processed under legitimate interest for the technical operation of the site (Art. 6(1)(f) GDPR).
4. Data retention
Contact form data is retained for as long as needed to handle your request, and no longer than 24 months. You may request deletion at any time by writing to the email address above.
5. Your rights (GDPR)
As a data subject, you have the right to:
- ›Access your personal data
- ›Rectify inaccurate data
- ›Obtain erasure of your data ("right to be forgotten")
- ›Restrict processing
- ›Data portability
- ›Object to processing
- ›Withdraw consent at any time
- ›Lodge a complaint with your national data protection authority
6. Data transfers
Contact form data is stored on Supabase with infrastructure in Europe (AWS eu-west-1). Data is not transferred outside the European Economic Area.
7. Changes to this policy
This policy may be updated periodically. The date of the last update is shown at the top of this page. Continued use of the site after changes constitutes acceptance of the revised policy.