Privacy notice

This page explains what personal data we collect when you visit this site or write to us, why we do it, and what rights you have. We collect only what we need.

Who we are

The data controller is Federico Bulzoni (fbulzoni.dev). For any question about your data, write to fbulzoni@fbulzoni.dev.

When you write to us

If you use the contact form, or email us directly, we receive:

• your name and email address;
• the topic you choose and the text of your message.

We use them only to reply to you and, if you ask us to, to prepare a proposal. The legal basis is your request (steps taken at your request before entering into a contract, Art. 6(1)(b) GDPR): no consent is needed. Providing this data is optional, but without it we cannot reply.

A message sent from the form passes through our server, which forwards it to our mailbox and does not store it. To block automated submissions, the server remembers the IP address the form comes from for a few minutes, in memory only (legitimate interest in protecting the site, Art. 6(1)(f) GDPR). We keep the message in the mailbox for up to 24 months after our last exchange, then delete it. If your request leads to an engagement, we keep the correspondence related to the contract for as long as the law requires (up to 10 years).

The same applies if we exchange emails for work, for example as a client, a supplier or someone we write to first: we use addresses and messages to manage our relationship with you (contract or steps before a contract, Art. 6(1)(b) GDPR) or, for other work correspondence, for our legitimate interest in communicating with the people we work with (Art. 6(1)(f) GDPR). We keep correspondence related to contracts and invoices for 10 years, because the law requires it (Art. 6(1)(c) GDPR); we delete the rest once it is more than 24 months old.

We do not use your address for newsletters or promotional messages.

When you visit the site

The site uses no analytics, does not profile you and loads no third-party services in your browser: even the fonts are served by the site itself.

The server hosting the site records some technical data (IP address, date and time, requested page) only when a request fails. This keeps the site secure and working (legitimate interest, Art. 6(1)(f) GDPR), and the records are deleted automatically on a rolling basis.

The site uses a single cookie, a technical one, to remember the language you choose: details are in the cookie notice.

Who processes the data with us

We do not sell or share your data. Only these providers process it on our behalf, under a data processing agreement (Art. 28 GDPR):

• Microsoft (Microsoft 365): our email. The data is stored in Italy.
• Hetzner Online: the server hosting the site, in Finland.

Microsoft is based in the United States: any transfer outside the European Union is covered by the EU-US Data Privacy Framework and by the standard contractual clauses approved by the European Commission.

We make no automated decisions about you.

Your rights

At any time you can ask us to:

• tell you what data we hold about you and give you a copy;
• correct or complete it;
• delete it;
• restrict its use;
• stop processing based on our legitimate interest (objection);
• give it to you in a machine-readable format (portability).

Just write to fbulzoni@fbulzoni.dev: we reply within one month. If you believe the processing breaks the rules, you can also lodge a complaint with the Italian data protection authority, the Garante per la protezione dei dati personali (www.garanteprivacy.it), or with the authority of the EU country where you live or work.

Changes

If the way we handle data changes, we update this page and the date at the top.