Privacy policy

Data controller

The controller of the data collected through this site is Stefano Pesce, who runs it personally as a professional portfolio. For any request concerning your data you can write to the address given under How to reach me.

Data I collect

Browsing the site requires no account and no personal data. I collect information in two cases only, described below.

Contact data

When you send me an email: your name, address and the content of the message. I receive them only because you chose to get in touch.

Technical data

Aggregated, anonymous browsing data (pages viewed, device type) collected to understand how the site is used. They do not identify you.

I do not collect special categories of data (health, opinions, financial details) and I never ask for information beyond what the reason you contacted me requires.

Why I use this data

• To reply to you. If you write to me, I use your contact data only to read you and answer.
• To improve the site. Aggregated technical data helps me see which content is useful and where to intervene.
• Legal obligations. Where necessary, to comply with obligations under applicable law.

I do not use your data for advertising profiling, and I make no automated decisions concerning you.

Legal basis for processing

I process contact data on the basis of my legitimate interest in answering the requests you send me, and technical data on the basis of your consent, which you can withdraw at any time from the privacy settings. Where a legal provision requires it, the basis is compliance with a legal obligation.

Cookies and analytics tools

This site uses only technical cookies, necessary for it to work, and — with your consent — privacy-respecting analytics tools that do not track your identity across different sites.

Third-party services

To work, the site relies on a few providers that may process data on my behalf, as data processors:

• Hosting — to serve the pages of the site.
• Font provider — typefaces served in a GDPR-friendly way, without tracking.
• Email — to receive and handle the messages you send me.

I do not sell or pass your data to third parties for commercial purposes.

How long I keep the data

I keep the messages you send me for as long as it takes to handle our conversation and any relationship that follows from it, then I delete them. Aggregated technical data is kept for limited periods and in a form that cannot be traced back to you.

Your rights

At any time you can exercise the rights granted by data protection law. In particular, you can ask to:

• Access the data concerning you and obtain a copy of it.
• Rectify inaccurate or incomplete data.
• Erase your data, where no obligation to keep it applies.
• Restrict or object to the processing, and withdraw the consent you gave.
• Lodge a complaint with the competent supervisory authority.

To exercise them, just write to me: I reply as soon as I can, and in any case within the time limits set by law.

How I protect the data

I take reasonable technical and organisational measures to protect data from unauthorised access, loss or misuse — including encrypted connections and access limited to the information strictly needed. No system is 100% secure, but I handle your data with the care I would want for my own.

Changes to this policy

I may update this policy to reflect changes to the site or to the law. The date of the last update is shown at the top of the page; substantial changes will be flagged clearly.

How to reach me

For any question about this policy, or to exercise your rights, write to me at the address at the bottom of this page, or through the Write button at the top. I read and answer myself, in person.