Privacy Policy

Last updated: Saturday, 3 October 2026. This is a translation: in case of discrepancy, the Italian version prevails.

1. Data Controller

The data controller is Francesco Maida, with registered office in Viale 4 Novembre N. 89, 30132 Venezia, Italy – VAT number 04908370275. For any request concerning the protection of personal data you can write to: privacy_3725@cesco.it.

2. Data Protection Officer (DPO)

The Data Protection Officer (DPO) is Francesco Maida, who can be contacted at: privacy_3725@cesco.it.

3. Retention Period

If, following a contact through the Formcarry form, the user becomes a client of the Controller ( Francesco Maida ), the personal data provided (name, email, phone number) will also be kept and processed afterwards for the performance of the contract and for the related administrative, accounting and operational communications. Such data will be kept for the whole duration of the contractual relationship and, afterwards, for the time needed to comply with legal obligations (for example tax and accounting obligations).

In all other cases the data are kept for the time needed to answer requests, and in any case no longer than 12 months, without prejudice to any legal obligations.

4. Purposes and Legal Basis of Processing

Users' personal data are processed for:

  • Anonymous statistical analysis of web traffic (legitimate interest of the controller pursuant to Art. 6(1)(f) GDPR).
  • Technical operation of the website, including hosting and infrastructure services and the fonts of the pages.
  • Protection of the contact form from spam and abuse (legitimate interest of the controller pursuant to Art. 6(1)(f) GDPR).

No profiling or tracking for commercial purposes is carried out.

5. Analytics Services

Umami Analytics, open source software installed on the website's server.

  • Data processed: anonymous, aggregated usage data (pages visited, referring website, browser and device type, country). Umami does not use cookies and does not store visitors' IP addresses.
  • Purpose: anonymous analysis of web traffic.
  • Place of processing: the data stay on the website's server (OVH VPS based in Milan, Lombardy (Italy)) and are not shared with third parties.

Some of the services listed below, if present, may operate through geographically distributed servers, making it difficult to determine the actual location where Personal Data are stored.

6. Hosting and Infrastructure

The website is hosted by OVH VPS based in Milan, Lombardy (Italy).

  • Personal Data processed: various types of data as specified in the privacy policy of the hosting service.
  • Privacy policy: available at this link

Some services may operate through geographically distributed servers, making it difficult to determine the exact location of personal data.

7. Contact Form – Formcarry

The website uses Formcarry as an external service to manage and send contact forms. When you fill in and submit a form, the data entered are transmitted to the Formcarry servers in order to be delivered to the controller by email. The data are then deleted or anonymised once the purpose of contact and reply has been fulfilled.

If, following the contact through Formcarry, the user becomes a client, the data will also be processed for the performance of the contract as indicated in section 3 of this policy.

  • Personal Data processed: name, email, phone number and any other data voluntarily entered in the contact form.
  • Purpose: allowing the Controller to answer users' requests and provide information about the services.
  • Legal basis: performance of pre-contractual or contractual measures at the request of the data subject (Art. 6(1)(b) GDPR).
  • Place of processing: Teijal Inc (Formcarry) is based at N. 3 Germay Dr, Unit 4 – 1278, Wilmington, DE 19804, United States. Data are processed on European servers in accordance with the GDPR.
  • Privacy policy of the service: https://formcarry.com/legal/privacy-policy

8. Spam Protection – Cloudflare Turnstile

To protect the contact form from spam and automated programs, the Contacts page uses Cloudflare Turnstile (Cloudflare, Inc.): the check is loaded only on that page and collects the technical information needed to tell a person from an automated program.

  • Personal Data processed: IP address, browser and device information, technical data about the interaction with the page.
  • Purpose: website security and prevention of spam and abuse of the contact form.
  • Legal basis: legitimate interest of the controller (Art. 6(1)(f) GDPR).
  • Place of processing: Cloudflare, Inc. is based at 101 Townsend St, San Francisco, CA 94107, United States.
  • Privacy policy of the service: https://www.cloudflare.com/turnstile-privacy-policy/

9. Fonts – Google Fonts

The website uses the Poppins font from Google Fonts: to display it, the browser downloads it from Google's servers, which receive the IP address and technical information about the browser. The service does not use cookies.

  • Personal Data processed: IP address and technical information about the browser.
  • Purpose: displaying the website's pages with a consistent design.
  • Legal basis: legitimate interest of the controller (Art. 6(1)(f) GDPR).
  • Place of processing: Google Ireland Limited is based at Gordon House, Barrow Street, Dublin 4, Ireland; data may also be processed by Google LLC in the United States.
  • Privacy policy of the service: https://policies.google.com/privacy

10. Data Transfers Outside the EU

Some providers (Formcarry, Cloudflare and Google) are based in or have servers in the United States. Should data be transferred outside the European Union, this will take place in compliance with Articles 44 et seq. of the GDPR and, where necessary, by means of standard contractual clauses or under the EU-U.S. Data Privacy Framework.

11. Rights of Data Subjects

As a data subject you can exercise the following rights at any time:

  • Access to your personal data;
  • Rectification or erasure of your data;
  • Restriction of processing;
  • Objection to processing;
  • Data portability;
  • Lodging a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali).

To exercise your rights you can contact the Controller or the DPO at the addresses above.

12. Updates

This policy may be updated at any time. We recommend checking it periodically.