1. Data controller
The data controller is Riccardi Gaetano, Italian VAT no. 01775860081, domiciled at Via Chiapparo 40 int. 1, 18024 Pornassio (IM), Italia. For any privacy request you can write to info@riccardigaetano.it.
The controller is not required to appoint a Data Protection Officer under Article 37 of Regulation (EU) 2016/679 ("GDPR").
2. In short
- This site uses no cookies and no analytics, profiling, advertising or third-party tracking tools.
- Fonts are hosted on our own server: your browser does not connect to Google or other providers to load them.
- I process the data you choose to send me (contact form, email, WhatsApp, phone) only to reply and, if you wish, to prepare a quote.
- The website check-up, the QR demo and the brief builder work without collecting your personal data.
3. Data, purposes, legal bases and retention
| Activity | Data | Purpose | Legal basis | Retention |
|---|---|---|---|---|
| Browsing the site | IP address, date and time, requested page, response code, browser type (technical server logs) | Delivering the site, keeping it secure and working, detecting abuse | Legitimate interest (Art. 6(1)(f) GDPR) | For the technical period set by the hosting provider, usually a few months; longer only if needed to investigate unlawful acts |
| Contact form, email, phone, WhatsApp | Name, email, company (optional), message content and any brief or check-up report you choose to send | Replying to requests, providing information and quotes | Pre-contractual steps taken at your request (Art. 6(1)(b) GDPR) | Up to 24 months from the last contact if no engagement follows; if it does, for the duration of the relationship and then 10 years for civil and tax obligations (Art. 2220 Italian Civil Code) |
| Spam and abuse prevention (contact form and check-up) | Pseudonymised fingerprint of the IP address (cryptographic hash with a key that changes every day) and request times | Limiting automated submissions and abuse | Legitimate interest in security (Art. 6(1)(f) GDPR) | 24 hours at most; once the key changes, the fingerprint can no longer be linked to the IP |
| Free website check-up | The web address you enter | Running the analysis you requested | Performing your request (Art. 6(1)(b) GDPR) | None: the address and the result are processed in memory and discarded when the analysis ends |
| Anti-bot check on the form (Cloudflare Turnstile) | IP address, technical information about browser and device | Telling real people from automated submissions | Legitimate interest in security (Art. 6(1)(f) GDPR) | According to Cloudflare's policy, for as long as the check requires |
The QR generator demo and the brief builder run entirely in your browser: nothing is sent to the server until you decide to submit the contact form or open WhatsApp. Theme and language preferences are stored only in your browser (see the cookie policy).
Please do not enter addresses containing personal data in the check-up (for example links with names, emails or codes in the URL).
4. Whether providing data is required
Providing data in the contact form is optional, but without a name, email and message I cannot reply. Browsing data is necessary for the technical operation of the site.
5. How data is processed and secured
Data is processed electronically with appropriate technical and organisational measures (Art. 32 GDPR): encrypted HTTPS connections, security headers, rate limiting and access restricted to the controller. I do not carry out profiling or decisions based solely on automated processing (Art. 22 GDPR).
6. Recipients
Data may be processed on my behalf, under an agreement pursuant to Art. 28 GDPR, by:
- the site's hosting provider (Globula);
- the email service provider through which I receive messages;
- Cloudflare, Inc. for the anti-bot check on the contact form;
- in case of an engagement, tax and accounting advisers, for legal obligations.
Data may also be disclosed to authorities where required by law. It is never published, sold or shared with third parties for marketing.
7. Transfers outside the European Economic Area
Cloudflare, Inc. is based in the United States and certified under the EU-U.S. Data Privacy Framework: the transfer relies on the European Commission's adequacy decision of 10 July 2023 (Art. 45 GDPR) and, where needed, on standard contractual clauses.
If you choose to contact me via WhatsApp, the service is provided by WhatsApp Ireland Ltd. (Meta group), which processes data as an independent controller under its own privacy policy and may transfer it outside the EEA.
8. Links to other sites
The site links to external services such as qriga.it and WhatsApp. When you open them, their own privacy policies apply.
9. Your rights
At any time you may request access to your data, rectification, erasure, restriction of processing and portability (Arts. 15–20 GDPR), and object to processing based on legitimate interest (Art. 21 GDPR). Just write to info@riccardigaetano.it: I will reply without undue delay and in any case within one month (Art. 12 GDPR).
10. Complaints
If you believe the processing infringes the GDPR, you may lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali, Piazza Venezia 11, 00187 Rome, www.garanteprivacy.it) or with the supervisory authority of the EU country where you live or work (Art. 77 GDPR).
11. Children
The services are aimed at businesses, professionals and adults. I do not knowingly collect data from children under 14 (Art. 2-quinquies Italian Legislative Decree 196/2003).
12. Changes
This notice may be updated following legal or technical changes. The date of the latest update is shown at the top of the page.