Privacy Policy

Last updated: 20 July 2026

This English version is a courtesy translation; in case of any discrepancy, the Italian version prevails.

Data controller

The data controller is [PLACEHOLDER: full name / business name], [PLACEHOLDER: VAT number or tax code], based at [PLACEHOLDER: address], reachable at the email address [PLACEHOLDER: email].

Data processed

This site does not use profiling cookies. To understand, in aggregate and anonymous form, how the site is used, the statistics tool Vercel Web Analytics is employed, described further below in its dedicated section. The data processed is limited to:

• Server technical logs — on every visit the web server automatically records some information (IP address, date and time of the request, page requested, browser used) for the normal operation of the site, security, and diagnosing any technical issues.
• Voluntarily provided data — if the user chooses to contact the controller via email or phone, the personal data provided (e.g. name, email address, message content) is processed exclusively to respond to the request.
• Contact form ("Have a question? Write to me!") — the form on the Contact section of the home page collects the name, email address and message text entered by the user. This data is transmitted to the site's server exclusively to be forwarded by email to the controller's address ([PLACEHOLDER: email]); the sending is handled via the Gmail/Google Workspace email service, which therefore acts as data processor under art. 28 GDPR for the message-delivery step only. The server does not save or permanently store the data entered in the form (nothing is written to a file or database): it stays in memory for the time strictly necessary to send the email and is discarded immediately afterwards.

Visit statistics (Vercel Web Analytics)

This site uses Vercel Web Analytics, a statistics tool provided by Vercel Inc. (440 N Barranca Ave #4133, Covina, CA 91723, USA), which analyzes visits in aggregate and anonymous form, without cookies and without persistent identifiers capable of tracking the user across different sites or across sessions.

The tool collects aggregate technical data about browsing (for example pages viewed, referring page, device and browser type, country of origin of the visit) and, through the Custom Events feature, some anonymous interaction events with the site (for example opening an artwork in a gallery or submitting the contact form). This data is processed in aggregate form and does not allow identification of the individual person.

The legal basis is the controller's legitimate interest (art. 6(1)(f) GDPR) in understanding site usage in order to improve its content and usability. Vercel Inc. acts as data processor under art. 28 GDPR. The processing may involve a transfer of data to the United States, backed by the safeguards provided by the GDPR (standard contractual clauses and/or adherence to the EU-US Data Privacy Framework). More information is available in Vercel's privacy policy.

Legal bases for processing

Processing of technical logs is based on the controller's legitimate interest (art. 6(1)(f) GDPR) in ensuring the security and correct operation of the site. Processing of data voluntarily provided via email, phone, or the site's contact form is based on the performance of pre-contractual measures or on the legitimate interest in responding to requests received (art. 6(1)(b) and (f) GDPR).

Data retention

Server technical logs are kept for the time strictly necessary to ensure the security of the site, generally no longer than a few months. Data provided through direct contact is kept for the time necessary to handle the request and, subsequently, for any ongoing relationship with the controller.

Rights of the data subject

As a data subject, the user may exercise at any time the rights provided under articles 15-22 of the GDPR, including:

• the right to access their personal data;
• the right to rectification of inaccurate or incomplete data;
• the right to erasure of data ("right to be forgotten");
• the right to restriction of processing;
• the right to data portability;
• the right to object to processing.

To exercise these rights, you may write to the email address indicated above.

Complaint to the supervisory authority

If a data subject believes that the processing of their personal data occurs in violation of the GDPR, they have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali), as provided under art. 77 GDPR, or to seek redress before the competent courts (art. 79 GDPR). More information is available at www.garanteprivacy.it.

Cookies

This site does not install profiling cookies. Only technical/functional cookies are used (for example to keep the login session in the administration area reserved to the site owner), necessary for the site's own operation. The Vercel Web Analytics statistics tool, described in its dedicated section, operates without cookies and without persistent identifiers. Under the Guidelines on cookies and other tracking tools issued by the Italian Data Protection Authority, the use of technical cookies only — in the absence of cookies or tracking tools that require consent — does not require the user's prior consent, and this site therefore does not display a cookie consent banner.