Privacy Policy

1. Data Controller

The Data Controller is Aramis Todesco (Todesco Digital), VAT no. [P.IVA da inserire], with registered office at [Indirizzo della sede / domicilio fiscale da inserire].

For any request you can write to todescodigital@gmail.com (certified email: [PEC da inserire]).

2. What data I collect

• Data you provide by filling in the contact form: name, email address, type of project and the text of your message.
• Browsing datacollected automatically by the site's systems (IP address, browser type, pages visited, date and time). It is used in aggregate form for the security and correct functioning of the service.
• Cookies and similar tools, as described in the Cookie Policy.

I do not collect special categories of data (Art. 9 GDPR). Please do not enter sensitive data in the message field.

3. Why I process data and legal basis

• To respond to your requests and provide you with a quote or consultation. Legal basis: performance of pre-contractual measures taken at your request (Art. 6.1.b GDPR) and your consent (Art. 6.1.a), given by ticking the box in the form.
• To ensure security and functioning of the site (technical cookies, logs, anti-spam protection of the form). Legal basis: legitimate interest of the Controller (Art. 6.1.f GDPR).
• Statistics and marketing, only with your prior consent (Art. 6.1.a GDPR), which can be withdrawn at any time.

Providing the form data is optional, but without your name, email and message I cannot get back to you.

4. Who I share data with

Your data is neither disclosed nor sold. It may be processed, on my behalf and as data processors (Art. 28 GDPR), by the technical providers that enable me to deliver the service:

• Vercel Inc. — hosting and delivery of the site.
• Resend (Plus Five Five, Inc.) — sending the emails generated by the contact form.
• Any statistics/marketing tools (e.g. Google Analytics, Microsoft Clarity), active only with your prior consent, as detailed in the Cookie Policy.

5. Transfers outside the European Union

Some providers are based in the United States. Any transfers take place in compliance with Art. 44 et seq. of the GDPR, on the basis of Standard Contractual Clauses approved by the European Commission and/or the provider's adherence to the EU-US Data Privacy Framework.

6. How long I keep the data

• Form data: for as long as necessary to handle your request and, if a relationship begins, for the related legal obligations; otherwise, for a maximum of 24 months.
• Technical logs: for the time strictly necessary for security.
• Cookie consent: 6 months, after which I ask you again.

7. Your rights

As a data subject you may exercise at any time the rights set out in Art. 15-22 of the GDPR: access, rectification, erasure, restriction of and objection to processing, data portability and withdrawal of consent (without affecting the lawfulness of processing carried out before withdrawal).

To exercise them, write to todescodigital@gmail.com. You also have the right to lodge a complaint with the Garante per la protezione dei dati personali (the Italian supervisory authority) if you believe the processing breaches the law.

8. Changes to this notice

I may update this notice to bring it into line with regulatory or service changes. The version in force is always the one published on this page, with the last-updated date shown at the top.