Privacy

Privacy Policy

Last updated 20/05/2025

This notice is provided pursuant to Art. 13 of EU Regulation 2016/679 (GDPR) to users who visit matteobordoni.it and use the contact form.

1. Data Controller

Matteo Bordoni
Via Collestatte 146 — 05100 Terni (TR)
[email protected]

2. Data collected

The site collects the following data:

• Technical navigation data (IP address, browser, operating system) — temporarily logged by servers to ensure proper site operation.
• Data voluntarily provided via the contact form: first name, last name, email address, message text.
• Technical session cookies (PHPSESSID): selected language, CSRF token, CAPTCHA answer, form submission attempt count.
• Theme preference (light/dark): stored in browser localStorage, not transmitted to the server.

No profiling data is collected. No traffic analysis tools (e.g. Google Analytics) or advertising cookies are used.

3. Purposes of processing

• Responding to requests submitted via the contact form.
• Ensuring site security and preventing abuse (anti-spam protection).

4. Legal basis

Processing of data submitted via the contact form is based on the data subject's consent (Art. 6(1)(a) GDPR), expressed by ticking the relevant box before submission. Technical navigation data is processed on the basis of legitimate interest in the proper functioning of the site (Art. 6(1)(f) GDPR).

5. Data retention

Contact form data is retained for the time strictly necessary to handle the request and, in any case, no longer than 12 months from receipt. Technical navigation data is deleted within 30 days.

6. Disclosure to third parties

Personal data is not sold or disclosed to third parties for marketing purposes. It may be processed by strictly necessary technical service providers (hosting, mail server) acting as data processors pursuant to Art. 28 GDPR.

7. Transfers outside the EU

The site loads typefaces via the Google Fonts service (Google LLC, USA). This HTTP request involves transmitting the user's IP address to Google's servers. Google states that Google Fonts does not set cookies and does not use this data for profiling. For details: policies.google.com/privacy.

8. Data subject rights

Pursuant to Arts. 15–22 GDPR, the data subject has the right to:

• Access their personal data (Art. 15)
• Obtain rectification of inaccurate data (Art. 16)
• Obtain erasure of data (Art. 17)
• Request restriction of processing (Art. 18)
• Object to processing (Art. 21)
• Receive their data in a structured format — portability (Art. 20)

To exercise these rights, write to: [email protected]. The controller will respond within 30 days of receiving the request.

9. Right to lodge a complaint

The data subject has the right to lodge a complaint with the Italian Data Protection Authority (Garante per la Protezione dei Dati Personali): www.garanteprivacy.it.

10. Cookies

For detailed information on cookies used by this site, please see the Cookie Policy.

11. Changes to this notice

The controller reserves the right to update this notice at any time. Changes take effect from the date of publication on the site, indicated at the top of this page.

Back to home