Privacy policy

Data controller

Massimo Campesato · P.IVA 04304140249. For any privacy request you can write to massimo@massimocampesato.com.

What data I collect

• Browsing data. The hosting provider automatically logs the technical data needed to run and secure the site: IP address, date and time of the request, page visited, browser type.
• Data you send me. If you write to me by email or on LinkedIn, I process the data you choose to share: name, email address, company and the content of your message.
• Statistical data. Only if you accept, Google Analytics 4 collects data on how the site is used: pages visited, visit length, referral source, device and approximate location.

The site has no contact forms, uses no profiling or advertising cookies and does not sell data to third parties.

Purposes and legal bases

• Replying to your messages and preparing a proposal: pre-contractual steps and contract (Art. 6(1)(b) GDPR).
• Running and securing the site: the controller’s legitimate interest (Art. 6(1)(f) GDPR).
• Measuring site usage for statistics: consent (Art. 6(1)(a) GDPR), which you can withdraw at any time.

Google Analytics 4

Google Analytics 4 is provided by Google Ireland Limited. It only starts after you choose “Accept” in the banner: if you reject or make no choice, the script is not loaded.

Google Analytics 4 does not log or store IP addresses. Google Signals and ad personalisation are switched off. Data is kept for 14 months.

Cookies used: _ga and _ga_<ID>, lasting 2 years, to tell visits apart.

Google may transfer data to the United States. Google LLC is certified under the EU-U.S. Data Privacy Framework, which the European Commission has found adequate.

You can change your choice at any time from the “Cookie preferences” link at the bottom of every page.

Technical storage

The site saves your banner choice in your browser’s storage so it doesn’t ask again on every visit. This is technical storage and needs no consent. You can delete it from your browser settings.

Recipients

Data is processed by the controller and by the providers that support the controller, appointed as processors where required:

• Vercel Inc., website hosting (United States, certified under the EU-U.S. Data Privacy Framework);
• Google, for email (Google Workspace) and statistics (Google Analytics 4);
• LinkedIn, for messages sent on the platform, which it processes under its own privacy policy.

Data is not published or sold.

How long data is kept

• Messages and contact details: up to 24 months from the last contact. If a professional relationship starts, for its duration and for the periods required by tax law (10 years).
• Google Analytics 4 data: 14 months.
• Browsing data: for the limited period set by the hosting provider.

Your rights

You can ask at any time for access to your data, rectification, erasure, restriction of processing and portability, and you can object to processing based on legitimate interest (Articles 15 to 22 GDPR). Withdrawing consent to statistics does not affect processing carried out before. To exercise your rights, write to massimo@massimocampesato.com.

You can also lodge a complaint with the Italian Data Protection Authority (garanteprivacy.it) or with the supervisory authority of the country where you live.

Changes

This notice may be updated. The date of the last review is shown at the bottom of the page.