The data controller is Alessio Premoli, VAT number (P.IVA) 11879380969, with registered address at Via Pietro Boifava 42, 20142 Milano (MI), Italy. For any privacy-related request you can write to contact@alessiopremoli.dev.

• Data sent through the contact form: your name, email address and the content of your message.
• Data sent by email: the sender's address and whatever is written in the message.
• Browsing data: the hosting provider automatically logs some technical information (IP address, browser type, date and time of access), used only to run the site and keep it secure.
• Cookies: the site does not use profiling, analytics or third-party cookies.

Please do not include special categories of data (for example, health information) in the form unless strictly necessary.

• Replying to your contact or quote requests: the legal basis is taking steps at your request prior to entering into a contract (Art. 6(1)(b) GDPR).
• Keeping the site running and secure: the legal basis is my legitimate interest (Art. 6(1)(f) GDPR).
• Complying with legal obligations, for example tax and accounting obligations if we start working together (Art. 6(1)(c) GDPR).

I do not use your data for newsletters or marketing.

Data is processed electronically with appropriate security measures. I keep it for as long as needed to handle your request, and in any case no longer than 24 months after our last contact, unless a professional relationship begins: in that case, data related to the relationship is kept for the period required by law (usually 10 years for tax records).

Your data is never sold or made public. It is processed, as data processors, by the technical providers I use:

• Netlify, Inc. (United States), for hosting the site and receiving messages sent through the form;
• Proton AG (Switzerland), for email services.

Transfers to Switzerland are based on the European Commission's adequacy decision. Transfers to the United States are based on the EU-US Data Privacy Framework or on the Standard Contractual Clauses approved by the European Commission.

At any time, you can ask to:

• access your data and receive a copy of it;
• correct or update it;
• have it deleted;
• restrict or object to its processing;
• receive it in a machine-readable format (portability).

To exercise these rights, write to contact@alessiopremoli.dev. If you believe the processing of your data infringes the GDPR, you can lodge a complaint with the Italian Data Protection Authority, the Garante per la protezione dei dati personali (www.garanteprivacy.it).

This policy may be updated over time. The date of the latest change is shown at the top of this page.