Privacy policy

1. Who processes your data

The data controller is Luca Gaido, VAT IT13377220010. For anything concerning your data, write to info@lucagaido.it, or by certified electronic mail (PEC) to lucagaido@pec.it.

2. What I collect

There are no other forms, I do not ask for data that is not needed to reply to you, and there is nothing following you from page to page.

• From the contact form: your name, email address, company name if you fill it in, and the text of your message.
• Automatically: the IP address the submission comes from, used only to limit repeated submissions and abuse.
• The form contains a hidden field whose only purpose is to catch automated submissions: if it comes back filled in, the message is discarded and reaches nobody. If you are using the site normally that field stays empty and collects nothing about you.

3. Why I process it

To read your message and reply, and to carry on the professional conversation that may follow. Nothing else: no newsletter, no profiling, no passing your details to third parties for commercial purposes.

4. Legal basis

Your consent, given by ticking the box before sending (Art. 6(1)(a) GDPR). You can withdraw it at any time by writing to info@lucagaido.it; withdrawal does not affect the lawfulness of processing carried out beforehand.

If the conversation leads to an engagement, processing continues in order to take pre-contractual and contractual steps (Art. 6(1)(b) GDPR) and to meet the legal, tax and accounting obligations that follow (Art. 6(1)(c) GDPR).

5. How long I keep it

Messages that do not lead to an engagement are kept for 24 months from the last contact, then deleted. Where a professional relationship does begin, data is kept for as long as the law requires for contractual and tax records.

6. Who else sees it

To operate, the site relies on providers acting as data processors, who do not use the data for their own purposes:

• the provider hosting the site and serving its pages;
• the provider of the email sending service, which delivers the message to my mailbox;
• the provider of the mailbox where I read messages.

7. Transfers outside the European Union

Some of the providers above are based or run infrastructure in the United States. Where that is the case, transfers rely on the safeguards set out in Chapter V of the GDPR — standard contractual clauses and, where applicable, the provider's certification under the Data Privacy Framework. On request I will tell you which providers I am using at any given time.

8. What you can ask me

You have the right to request access to your data, its correction or deletion, restriction of processing, to object to processing, and to receive your data in a machine-readable format (Arts. 15-21 GDPR).

Write to info@lucagaido.it: I reply within one month. It is a mailbox I read myself, not a support desk.

9. If you are not satisfied

You may lodge a complaint with a supervisory authority. In Italy that is the Garante per la protezione dei dati personali (garanteprivacy.it). You may also complain in the member state where you live or work.

10. Cookies

This site sets no profiling cookies, has no social buttons that track you, and uses no analytics that follow you around. That is why there is no banner: there would be nothing to ask you to accept.

11. Changes

If I change how I handle data, I update this page and the date at the top. Earlier versions are not kept online: if you need a copy of the one in force when you wrote to me, ask and I will send it.