Privacy Policy

This notice describes how the personal data of users who visit erikdercole.com (the "Site") is processed, in compliance with EU Regulation 2016/679 ("GDPR"). The Site is a personal, informational website and performs no profiling or marketing activities.

Data controller

The data controller is Erik D'Ercole. For any request regarding your data you can write to erik.dercole@encodia.it.

Data collected and purposes

Contact form

If you use the contact form, you are asked for your name,email address and the message text; you may also optionally provide a subject. This data is used solely to reply to your request. Submission is handled by the Web3Forms service, acting as data processor: it delivers the message via email and stores it on Amazon Web Services (AWS) infrastructure, encrypted at rest. For spam filtering, the IP address and email of the sender may be forwarded to the CleanTalk and Akismet (Automattic) services. Legal basis: pre-contractual measures and the legitimate interest in replying (Art. 6.1 (b) and (f) GDPR). For details see the Web3Forms privacy policy.

Server logs and hosting

The Site is hosted on Cloudflare Pages. The hosting provider may record, for technical and security purposes, data such as your IP address, browser type and the date/time of the request. Legal basis: legitimate interest in the security and correct operation of the Site (Art. 6.1 (f) GDPR). All static assets, including the typefaces, are served directly from this infrastructure: the Site uses no third-party CDN or fonts (e.g. Google Fonts), so simply browsing it does not disclose your IP address to any other party.

Visit statistics (Umami)

To understand how the Site is used, I collect aggregated, anonymous statistics through Umami (Umami Cloud). Umami is a cookieless, privacy-friendly analytics tool: it records aggregated data such as page views, referrer, browser and device type and country (derived from your IP address, which is not stored). This data cannot identify you and is not used for profiling or advertising. Legal basis: legitimate interest in understanding use of the Site (Art. 6.1 (f) GDPR).

"Now Playing" widget (Spotify)

Some pages show the track currently being played through a Spotify integration. This data concerns only the Site owner: no data about the visiting user is collected or processed.

Cookies and local storage

The Site does not use cookies of any kind — not even for visit statistics — and performs no profiling. The only information stored on your device is your light/dark theme preference, saved in the browser's localStorage: this is a purely technical, non-identifying value that is never transmitted to third parties.

Data retention

Messages received through the contact form are kept for as long as needed to handle the request and any follow-up, and in any case no longer than required by law.

Your rights

As a data subject you have the right to request access to, rectification, erasure, restriction and portability of your data, as well as to object to processing. You can exercise these rights by writing to erik.dercole@encodia.it. You also have the right to lodge a complaint with the Italian Data Protection Authority (garanteprivacy.it).

Changes

This notice may be updated over time. The date at the top of the page indicates the latest revision.