Privacy policy
Which personal data I process through this website, why, for how long and what your rights are, under Article 13 of Regulation (EU) 2016/679 (GDPR).
Data controller
The data controller is Alessandro Cacciola, a web developer based in the province of Milan, Italy.
For any privacy question or to exercise your rights, write to info@caccioladev.com. I have not appointed a data protection officer (DPO), as one is not required for this activity.
What data I process
Data you send me. Through the contact form: full name, email address, company (optional), type of project and message. If you write to me by email or WhatsApp: the data in your message, such as your name, email address or phone number.
Browsing data. As with any website, the server that hosts it automatically records technical data such as IP address, date and time of the request, requested page and browser type. This is needed to run and protect the website.
Spam protection. When you send the form, your IP address is turned into a non-reversible code (hash) and used for at most 10 minutes, only to count submission attempts. It is never stored in clear or linked to your message.
Statistics. Only if you consent, Vercel Speed Insights collects anonymous data about page performance. Details are in the cookie policy.
Why I use it and on what legal basis
To answer your requests and, if you ask, prepare a quote: steps taken at your request before entering into a contract (Art. 6(1)(b) GDPR) or, for general enquiries, my legitimate interest in replying to people who contact me (Art. 6(1)(f) GDPR). On the same basis I send you an email confirming that your message arrived.
To run the website and protect it from abuse and spam (browsing data, spam counter, technical cookies): legitimate interest in the security and proper functioning of the website (Art. 6(1)(f) GDPR).
To measure website performance with Vercel Speed Insights: your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time.
I do not use your data for newsletters, advertising or profiling, and I make no automated decisions about you.
Do you have to provide it?
No. Without a name, email address and message, however, I cannot reply through the form. You can also write to me directly by email or WhatsApp.
How long I keep it
Messages and contact details: only for as long as it takes to reply and to work out a possible agreement together; then I delete them. If the request becomes a job, I keep only the necessary data for the duration of the engagement and then for 10 years, because Italian tax and civil law require it (for example for invoices).
Spam counter: at most 10 minutes.
Browsing data recorded by the server: for the limited period set by the hosting provider for security and diagnostics.
Your cookie choice: 6 months, after which you are asked again.
Who processes data on my behalf
Apart from me, data is processed only by the providers of the services the website uses, as data processors (Art. 28 GDPR) and only for those services:
Vercel Inc. (United States): website hosting, server logs and, if you consent, Speed Insights.
Resend, Inc. (United States): sending the emails generated by the contact form.
If you write to me on WhatsApp, your message is also processed by WhatsApp Ireland Ltd (Meta group) as an independent controller, under its own privacy policy.
I do not sell your data or share it with anyone else, unless required by law.
Transfers outside the European Union
Some providers are based in the United States. Transfers rely on the European Commission's adequacy decision for the EU-U.S. Data Privacy Framework, for providers that participate in it, or on the standard contractual clauses approved by the Commission (Art. 46 GDPR).
Cookies
The website uses only technical cookies and, with your consent, an anonymous statistics tool that does not use cookies. The full list and how to change your choices are in the cookie policy.
Your rights
At any time you can ask to access your data, correct or delete it, restrict its processing and receive it in a readable format to pass it on to someone else (Art. 15–20 GDPR).
You can object to processing based on legitimate interest (Art. 21 GDPR) and withdraw your consent whenever you like: withdrawal does not affect processing carried out before.
To exercise these rights write to info@caccioladev.com: I reply within one month.
If you believe the processing breaks the law, you can lodge a complaint with the Italian data protection authority, the Garante per la protezione dei dati personali (www.garanteprivacy.it), or with the supervisory authority of the country where you live or work.
Changes to this policy
I may update this policy, for example if the services the website uses change. The date of the last update is shown at the top of the page.