Privacy policy

I am the data controller: Omar Bayadi, in Reggio Emilia. For anything concerning personal data the contact point is the email address below.

I have not appointed a data protection officer, because the processing carried out through this site does not fall within the cases listed in Article 37 of the Regulation.

The computer systems and software procedures that run this site acquire, in the course of their normal operation, certain personal data whose transmission is implicit in the use of internet communication protocols.

These are the IP address, the date and time of the request, the address of the requested page, the server's response code and information about the browser and the operating system. They are recorded by the hosting provider in the server logs.

I process them in order to deliver the pages, to keep the site secure and to establish whether it is being abused. The legal basis is the legitimate interest in keeping the service running and safe, Article 6(1)(f) of the Regulation.

These data are not used to identify visitors, no profile is drawn from them and they are not combined with other information.

There is no contact form on this site. The links at the foot of each page open WhatsApp, the Gmail compose window or a public profile: nothing is sent until someone decides to write.

When a message reaches me I process the data it carries, that is the name or address of the sender and the content of the communication, in order to reply and to consider or carry out the request. The legal basis is the performance of pre-contractual measures and, where the request turns into an engagement, the performance of the contract: Article 6(1)(b) of the Regulation.

This site uses no cookies of any kind, and hosts no statistics, analytics or tracking tool. Fonts and images are served from the same domain as the pages, so simply reading the site produces no request to any third party server.

The only thing the site writes to the device is one entry in the browser's local storage, recording that the notice shown on arrival has been closed so that it does not appear again on every page. It is not a cookie, it is transmitted to nobody, and it is removed at any time by clearing the site's data in the browser.

I carry out no profiling and no automated decision-making within the meaning of Article 22 of the Regulation.

I do not disclose the data I receive to third parties, do not publish it and do not pass it on for commercial purposes.

The site is hosted by Netlify, which acts as data processor for the logs described above and may process them on servers outside the European Union, under the safeguards set out in its own data processing agreement.

Messages sent through WhatsApp, Gmail or the social profiles also remain with those platforms, which process them as controllers in their own right under their own privacy policies, over which I have no control.

The server logs are kept by the hosting provider for as long as the security purposes above require, according to that service's policies, save for their retention for the investigation of offences by the judicial authorities.

Messages remain in the mailbox or the application they arrived through for as long as replying requires and, where an engagement follows, for the duration of that relationship and for the period during which the law requires the paperwork to be kept. Beyond those terms they are deleted, and they can be deleted sooner on request.

Reading the site requires no data beyond the browsing data, whose transmission is technically necessary for the pages to be delivered at all.

Providing data by writing, on the other hand, is entirely optional, but without it no reply is possible.

Articles 15 to 22 of the Regulation grant the right to access one's own data, to have it corrected or erased, to ask for the processing to be restricted, to receive the data in a machine-readable format and to object at any time to processing based on legitimate interest.

Exercising any of these rights takes no more than an email to the address given in section 1. There is no charge, and a reply follows within one month, as Article 12 of the Regulation requires.

Anyone who considers that their data is being processed in breach of the Regulation may lodge a complaint with the Italian data protection authority under Article 77 of the Regulation, or bring the matter before the courts.

This notice may be updated if the site changes, or if the services that make it reachable do. The version in force is always the one published at this address, carrying the last updated date shown at the top of the page.