Notice on the processing of personal data
Given under articles 13 and 14 of Regulation (EU) 2016/679 and Italian legislative decree 196 of 2003. It is written to be read: if anything is unclear, ask me and I will write it better.
1. Controller
Francesco Zinghinì, chartered engineer, Roma,
Italy.
To exercise your rights or for any question about personal data:
privacy@francescozinghini.it or
francescozinghini@pec.ording.roma.it.
No data protection officer has been appointed: none of the cases in which article 37 of the Regulation makes it mandatory applies.
2. What data is processed
a) Data you provide
By completing the contact form you provide: your name, email address, the capacity in which you are writing, the subject and the text of your message. Everything you write in the body of the message is data you are communicating: please do not include special category or criminal-offence data there, and wait until we move to a confidential channel before going into the substance of the matter.
The same applies if you write to me directly by email or certified email.
b) Data collected automatically
The servers record incoming requests, as any web server does: IP address, date and time, resource requested, outcome, browser type. These are technical records necessary to deliver the service and to defend it against abuse, kept for a short period.
For visit measurement the site uses a cookieless statistics system operated on the technical provider's infrastructure. It does not retain your IP address: from it, together with a secret value that changes daily, a non-reversible fingerprint is derived whose only function is to avoid counting the same visit twice within the day. It is not possible to identify you from that fingerprint, or to recognise you the following day. No data is passed to advertising platforms: this site carries no advertising and does no profiling.
3. Purposes and legal bases
| Purpose | Legal basis | Retention |
|---|---|---|
| Answering your enquiry and, where applicable, preparing a quotation | Pre-contractual steps at your request — art. 6(1)(b) | 24 months from last contact |
| Site security, abuse prevention, rate limiting | Legitimate interest in protecting the service — art. 6(1)(f) | Technical logs: a few days |
| Aggregated, cookieless visit statistics | Legitimate interest in understanding site performance — art. 6(1)(f) | Raw data 90 days, aggregates beyond |
| Legal obligations, defence of legal claims | Legal obligation and legitimate interest — arts. 6(1)(c) and 6(1)(f) | Statutory periods |
Providing the form data is optional, but without it no reply is possible. The consent checkbox serves to confirm that you have read this notice.
4. If it becomes an instruction
If the contact leads to a professional instruction, data relating to the matter is processed for the performance of the contract and for connected obligations, with retention periods reflecting the nature of the instruction and applicable limitation periods. A specific notice is given in that case: this one covers the website only.
5. Who may receive the data
Data is not disseminated and is not transferred to third parties for their own purposes. It may be processed on my behalf and on my instructions by the providers of the necessary technical services, appointed as processors under article 28 of the Regulation:
- Redbit S.r.l.s. (Viale della Grande Muraglia 494, 00144 Roma, Italy, VAT IT15237911001) — development, hosting, email, maintenance and statistics. Servers are located in the European Union.
- Cloudflare — content delivery and site protection, and the anti-robot verification on the form. Traffic passes through its nodes; transfers to third countries are governed by the standard contractual clauses adopted by the European Commission and, for the United States, by the applicable adequacy decision. You may ask me for a copy of the safeguards in place, at the address in point 1.
Data may also be disclosed to judicial or supervisory authorities where the law requires it.
6. Your rights
You have the right at any time to request access to your data, its rectification or erasure, restriction of processing, portability, and to object to processing based on legitimate interest (articles 15 to 22 of the Regulation). In particular, for processing based on legitimate interest — security and statistics — you may object at any time, and for statistics the objection is already automatic if your browser sends the signals described in point 2b. Requests go to privacy@francescozinghini.it and are answered within one month.
If you consider that the processing infringes the Regulation you may lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali, Piazza Venezia 11, 00187 Rome — garanteprivacy.it) or apply to the courts.
7. Automated decision-making
There is none. No decision concerning you is taken by automated means, and no profiling is carried out.
8. Changes
If this notice changes, the date below changes with it. Earlier versions are available on request.
This English text is provided for convenience. In the event of any discrepancy, the Italian version prevails.
Last updated: 18 August 2026.