Paolo Gianfelici

Privacy and cookies

This site is a portfolio: no analytics, no advertising, no cookies. This page says what it does process, and why.

Last updated: October 3, 2026

Who is responsible

The data controller is Paolo Gianfelici, Jesi, Marche, Italy. For anything about your data, write to: [email protected]

When you visit

The site is served from a server in Oracle Cloud’s Milan region (Italy), through Cloudflare, a network that delivers and protects websites. Every request reaches them with your IP address, your browser’s identification and the page asked for: without them no page can be sent.

The server keeps a log of the requests with the IP address shortened (its last part removed), the time, the page and the browser; error messages, such as a file not found, can contain the full address. The log is overwritten as it fills up, within a few weeks at the current traffic.

Cloudflare handles the same data to deliver the site and keep attacks away, as a processor under its data processing terms; for transfers to the United States it is certified under the EU-US Data Privacy Framework.

The legal basis is my legitimate interest in running the site and keeping it secure (GDPR art. 6(1)(f)).

Cookies and your browser’s storage

The site sets no cookies and tracks nothing. It loads nothing from other services: fonts, videos and pictures all come from this site.

Two choices of yours are kept in your browser’s storage, and never sent anywhere: the colour theme, if you switch between light and dark, and the language, if you pick one. The live demo on the Indennizzo Diretto page keeps its sample data in your browser in the same way.

These are technical tools that work only for you, so they need no consent (Italian data protection authority, cookie guidelines of 10 June 2021). You can delete them at any time from your browser’s settings.

If you write to me

Your address and what you write stay in my mailbox (Gmail, by Google), to reply and for any work that follows. The legal basis is the steps you ask for before a contract, or my legitimate interest in replying (GDPR art. 6(1)(b) and (f)). I keep them as long as the conversation or the work needs them.

Your rights

You can ask to see your data, correct it, delete it, limit its use, object to its use or receive it in a portable format (GDPR arts. 15–21), by writing to the address above. You can also complain to the Italian data protection authority, the Garante per la protezione dei dati personali (garanteprivacy.it).

No decision about you is made automatically, and no profile is built.