andreacasali

🇮🇹 Questa Privacy Policy è disponibile anche in italiano.

1. Data Controller

Andrea Casali
Via Torretta 30
24125 Bergamo (BG), Italy
VAT Number: 03762400160
Email: info@andreacasali.com

2. Types of Data Collected

This website collects some personal data from users, both automatically and voluntarily provided by the user during navigation.

2.1 Navigation Data

During normal navigation, the computer systems and software procedures used to operate this website acquire some data whose transmission is implicit in the use of Internet communication protocols.

This is information that is not collected to be associated with identified data subjects, but which by its very nature could, through processing and association with data held by third parties, allow users to be identified.

This category includes:

• IP address (anonymized)
• Browser type and device parameters
• Operating system
• Domain name and address of referring websites (referrer)
• Information about pages visited
• Time of visit
• Approximate geolocation (country and city)

2.2 Technical Data for Protected Area

To access the password-protected portfolio area, the website uses browser session storage to maintain authentication state during the browsing session. This data:

• Is stored exclusively in the user's browser
• Is not transmitted or stored on our servers
• Is automatically deleted when the browser is closed
• Does not allow personal identification of the user

3. Purpose of Processing

Personal data is processed for the following purposes:

3.1 Anonymous Statistics (Analytics)

Purpose: To collect aggregate and anonymous statistics on website visits to understand how users interact with content and improve browsing experience.

Legal basis: Legitimate interest of the Controller (art. 6, par. 1, lett. f of GDPR) to improve their website.

Retention: Data is stored in aggregate and anonymized form for a maximum period of 24 months.

3.2 Technical Operation of the Website

Purpose: To ensure the proper functioning of the website and its features, including the protected area.

Legal basis: Technical necessity for the provision of the service requested by the user (art. 6, par. 1, lett. b of GDPR).

Retention: Session storage data is temporary and deleted when the browser is closed.

4. Processing Methods

Personal data is processed using automated tools for the time strictly necessary to achieve the purposes for which it was collected.

Specific security measures are implemented to prevent data loss, illicit or incorrect use, and unauthorized access.

5. Third-Party Services

5.1 Website Hosting - Vercel Inc.

The website is hosted on infrastructure provided by Vercel Inc. (USA).

Data processed: Navigation data necessary for the provision of hosting services.

Purpose: Website hosting and delivery.

Location: United States of America (non-EU third country). Vercel Inc. guarantees an adequate level of protection through the adoption of Standard Contractual Clauses approved by the European Commission.

Vercel Privacy Policy: https://vercel.com/legal/privacy-policy

5.2 Analytics - Plausible Analytics (Self-hosted)

This website uses Plausible Analytics, a privacy-friendly web analytics service, installed on servers owned by the Controller.

Features:

• Does not use cookies
• Does not collect personally identifiable data
• IP addresses are automatically anonymized
• No cross-site tracking
• Data is not shared with third parties
• Data is stored on servers located in Germany (Hetzner Online GmbH)

Data processed: Aggregate and anonymous statistics (pages visited, approximate geographic origin, device type, referrer).

Purpose: To understand how users use the website to improve their experience.

Location: Germany (EU) - Hetzner Online GmbH servers.

More information: https://plausible.io/privacy

6. Cookies and Similar Technologies

6.1 This Website Does NOT Use Cookies

The website does not use profiling cookies, analytical cookies, or third-party cookies.

The only local storage mechanism used is browser session storage for the protected area, which:

• Is not technically a cookie
• Is stored only locally in the browser
• Is not sent to our servers
• Is automatically deleted when the browser is closed
• Is strictly necessary for the functioning of the protected area

For this reason, consent via cookie banner is not required.

7. Transfer of Data Outside the EU

Some data is processed by service providers located outside the European Union (Vercel Inc. - USA). The transfer is based on Standard Contractual Clauses approved by the European Commission, which guarantee an adequate level of protection under GDPR.

8. Data Subject Rights

Under articles 15-22 of GDPR, users have the right to:

• Access: obtain confirmation whether or not personal data is being processed and access to the data
• Rectification: obtain rectification of inaccurate personal data
• Erasure: obtain erasure of personal data (right to be forgotten)
• Restriction: obtain restriction of processing
• Portability: receive data in a structured, commonly used, and machine-readable format
• Object: object to the processing of personal data
• Withdraw consent: withdraw consent at any time without affecting the lawfulness of processing based on consent before its withdrawal

To exercise these rights, users can contact the Data Controller at: info@andreacasali.com

8.1 Right to Lodge a Complaint

Users also have the right to lodge a complaint with the competent supervisory authority (Italian Data Protection Authority - www.garanteprivacy.it).

9. Changes to This Privacy Policy

The Controller reserves the right to make changes to this Privacy Policy at any time by notifying users on this page. Please check this page regularly, taking as reference the last modification date indicated at the bottom.

If changes affect processing whose legal basis is consent, the Controller will collect the user's consent again, if necessary.

---

10. Contact Information

For any questions or requests regarding this Privacy Policy or the processing of personal data, you can contact the Data Controller:

Andrea Casali
Via Torretta 30
24125 Bergamo (BG), Italy
Email: info@andreacasali.com
VAT Number: 03762400160