Privacy policy

This site is run by Giuseppe Rega, backend developer, based in Arezzo, Italy. For anything concerning your data, write to rega.giuseppe591@gmail.com.

This page describes what I collect, why, how long I keep it and how to have it deleted. It is written to be read, not to be filed.

In short

• No profiling cookies and no third-party analytics. That is why there is no cookie banner: there is nothing to consent to.
• I collect personal data only if you write to me through the contact form.
• Traffic statistics are anonymous: no IP addresses, no identifiers, no browser fingerprints.
• The automated assistant sends your question to an external provider to generate its answer. Do not put personal or confidential information into it.

Data collected by the contact form

When you write to me I collect: name, email address, company (optional), project type (optional), subject and message, interface language, date and time, a hashed, non-reversible form of your IP address, and the browser identification string.

The IP address is never stored in clear: I keep only a digest, which lets me recognise repeat submissions and abuse but not recover the address itself.

Why. To read your message and reply (Art. 6(1)(b) GDPR, pre-contractual steps at your request) and to defend the form against automated spam (Art. 6(1)(f), legitimate interest in keeping a service I rely on for work usable).

How long. Twenty-four months from our last contact, then deleted. If the conversation leads to a contract, statutory accounting retention periods apply instead.

Who receives it. The message lands in my mailbox and stays on my server. E-mail delivery uses Resend (Resend Inc., United States), acting as a processor under Standard Contractual Clauses. Nobody else receives your data, and I do not sell or share it.

Traffic statistics

I record an anonymous page-view count: page path (without parameters), language, referring domain and a coarse device class (mobile or desktop). Nothing else.

There is no cookie, no identifier and no browser fingerprint: it is not possible to identify a person or reconstruct an individual browsing session. This processing therefore does not involve personal data and does not require your consent.

Automated assistant

The site includes an assistant that answers questions about me and my work. It works like this: the text you type is sent to Google (Google Ireland Limited, with processing also in the United States) through the Gemini API, together with the public content of this site, and the model produces the answer. Transfers outside the EU rely on Standard Contractual Clauses.

I do not store conversations. I record only an aggregate count of how many requests were made and how many tokens were used, to keep costs under control.

Do not enter personal, confidential or sensitive information into the assistant. For anything that requires confidentiality, use the contact form or email me directly.

Cookies

The public site sets no cookies. The only cookie that exists is the admin session cookie, which only I can obtain: it is strictly technical, required for authentication, and a visitor never receives it.

Hosting

The site and its database run on a server I administer personally, located in Italy. I use no content delivery network and no third-party analytics service.

Your rights

You may ask me at any time to access your data, correct it, delete it, restrict its processing, receive it in a machine-readable format, or object to the processing.

Write to rega.giuseppe591@gmail.com: I answer within thirty days. If you believe the processing breaches the GDPR you may complain to the Italian Data Protection Authority or to your own national authority.

Changes

If anything substantive changes I update this page and the date below. There are no hidden versions: what you read is what I do.