Privacy notice

Information under Article 13 of Regulation (EU) 2016/679 (GDPR). Last updated: 29 September 2026.

Data controller

Massimo Romanato, Milan, Italy. VAT number (P.IVA) 12962420969.
Contact: massimo.romanato@gmail.com

Cookies

This site sets no cookies and uses no tracking or profiling technologies. Nothing is stored in your browser. For this reason no cookie banner is shown.

Contact form and email

When you write through the contact form, or by email or phone, I receive your name, email address and message. I use them only to reply to you and, if we decide to work together, to handle that request.

• Legal basis: steps taken at your request before a possible contract (Art. 6(1)(b) GDPR).
• Providing the data is optional, but without an email address I cannot reply.
• The form does not store messages: it forwards them as a single email to my inbox.
• Retention: messages are kept as long as needed to handle your request. If no professional relationship follows, they are deleted within 24 months.

Hosting and technical data

The site is hosted on Cloudflare. To deliver pages and protect the site against abuse, Cloudflare processes technical data such as your IP address, browser type and the pages requested. Legal basis: my legitimate interest in running a secure site (Art. 6(1)(f) GDPR).

The site may use Cloudflare Web Analytics, which counts visits in aggregate form. It sets no cookies, stores nothing in your browser and does not identify or track individual visitors.

Fonts and all other resources are served from this site. No data is sent to Google or other third parties when you load a page.

Who processes the data

• Cloudflare, Inc. (hosting, security, form forwarding, analytics)
• Google LLC (Gmail, where contact emails are received)

Both providers may process data in the United States. Both are certified under the EU-US Data Privacy Framework, which the European Commission recognises as providing adequate protection. Data is never sold or used for marketing.

Your rights

You can ask to access, correct or delete your data, to restrict or object to its processing, and to receive it in a portable format (Articles 15 to 22 GDPR). Write to the email address above. You also have the right to lodge a complaint with the Italian supervisory authority, the Garante per la protezione dei dati personali.