Privacy Policy Information on the processing of personal data pursuant to Regulation (EU) 2016/679 (GDPR)

1. Data Controller

The Data Controller is Matteo Menardi, with fiscal domicile in Italy. E-Mail: [email protected]

For further information about the Data Controller, please refer to the “Imprint” page.

2. Categories of data processed and purposes

This website processes only the personal data strictly necessary for the following purposes:

Responding to information requests, quotes or collaboration inquiries sent via E-Mail;
Managing professional relationships;
Ensuring the security and proper functioning of the website (technical navigation data handled by Cloudflare).

No profiling, analytics or tracking cookies are used. The website does not collect data for marketing, remarketing or user profiling purposes.

3. Legal basis for processing

The processing of personal data is based on:

Consent of the data subject (Art. 6(1)(a) GDPR), expressed by voluntarily sending messages or requests;
Performance of pre-contractual measures or a contract (Art. 6(1)(b) GDPR), in the case of requests relating to professional services;
Legitimate interest of the Controller (Art. 6(1)(f) GDPR) in the security of the website and prevention of abuse.

4. How data is collected

Data is collected primarily when the user:

Sends an E-Mail to the addresses indicated on the site ([email protected] or [email protected]);
Uses any contact forms present on the website.

Additionally, Cloudflare (provider of Content Delivery Network and security services) may automatically process certain technical data (IP address, user agent, timestamp) for security reasons, DDoS protection and performance optimisation. Such data is processed in accordance with Cloudflare’s policies and applicable regulations.

5. Data retention

Personal data is retained only for the time strictly necessary to:

Respond to the user’s request and manage any subsequent professional relationship;
Comply with legal obligations (e.g. fiscal and accounting retention, where applicable).

After this period, data is deleted or anonymised, unless different legal obligations apply.

6. Data sharing and disclosure

Personal data is not sold, transferred or disclosed to third parties for commercial or marketing purposes.

Data may be shared only with:

Cloudflare, Inc. (USA) – acting as a data processor for hosting, CDN and security services (subject to appropriate contractual safeguards and Standard Contractual Clauses);
External professionals or consultants (e.g. accountant, lawyer) strictly necessary for fiscal or legal compliance, bound by confidentiality obligations;
Public authorities, only when required by law.

7. Security measures

The Data Controller implements all appropriate and reasonably practicable technical and organisational measures to protect personal data against unauthorised access, loss, destruction or accidental disclosure, in accordance with Article 32 of the GDPR. Particular attention is given to the security of E-Mail communications and data storage.

8. Data subject rights

Pursuant to Articles 15–22 of the GDPR, the data subject has the right to:

Access their personal data;
Request rectification or erasure of data;
Request restriction of processing;
Request data portability;
Object to data processing;
Withdraw consent at any time (without affecting the lawfulness of processing based on consent before its withdrawal).

To exercise these rights, please send a written request to [email protected]. The data subject also has the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali – www.garanteprivacy.it).

9. Changes to this Privacy Policy

The Data Controller reserves the right to modify or update this Privacy Policy at any time. Changes will be published on this page with an indication of the update date. We recommend consulting this page periodically.

Last updated: 25.10.2026