{
  "controller": {
    "name": "Valerio Evangelista",
    "email": "me@valeva.dev"
  },
  "updated": "2026-10-16",
  "processing": [
    {
      "id": "contact-form",
      "title": "The contact form",
      "summary": "If you write to me through the form, I use what you send only to reply to you, which is why every field is required.",
      "data": [
        "name",
        "email address",
        "message"
      ],
      "legalBases": [
        {
          "article": "6(1)(b)",
          "citation": "GDPR Art. 6(1)(b)",
          "when": "if the message is about a job or a collaboration with you"
        },
        {
          "article": "6(1)(f)",
          "citation": "GDPR Art. 6(1)(f)",
          "when": "my legitimate interest in replying, in any other case"
        }
      ],
      "retention": {
        "text": "Until I reply, then at most 12 months in my inbox.",
        "period": "P12M"
      },
      "providers": [
        "Resend",
        "Cloudflare",
        "Google"
      ]
    },
    {
      "id": "browsing",
      "title": "Browsing",
      "summary": "The server that hosts the site records the requests it receives, to keep it running and to stop abuse, such as repeated messages from the form.",
      "data": [
        "IP address",
        "page requested",
        "time of the request",
        "browser"
      ],
      "legalBases": [
        {
          "article": "6(1)(f)",
          "citation": "GDPR Art. 6(1)(f)",
          "when": "the legitimate interest in keeping the site running and secure"
        }
      ],
      "retention": {
        "text": "Vercel keeps the logs for 1 hour.",
        "period": "PT1H"
      },
      "providers": [
        "Vercel"
      ]
    },
    {
      "id": "statistics",
      "title": "Statistics",
      "summary": "Vercel Web Analytics counts the visits and Speed Insights measures how fast the pages are. They use no cookies and show me aggregated figures only: neither tells me who you are.",
      "data": [
        "page visited",
        "referring site",
        "approximate location",
        "browser and operating system",
        "device type",
        "page speed"
      ],
      "legalBases": [
        {
          "article": "6(1)(f)",
          "citation": "GDPR Art. 6(1)(f)",
          "when": "the legitimate interest in knowing which pages are read and how fast they are"
        }
      ],
      "retention": {
        "text": "Vercel deletes the code that tells one visitor from another after 24 hours: only aggregated figures remain.",
        "period": "PT24H"
      },
      "providers": [
        "Vercel"
      ]
    }
  ],
  "providers": {
    "summary": "The services the site relies on, which process the data above.",
    "items": [
      {
        "name": "Resend",
        "company": "Plus Five Five, Inc.",
        "country": "United States",
        "role": "Delivers the messages of the form to my inbox, and keeps a copy for 30 days.",
        "transfer": "The transfer to the United States rests on its certification under the EU-US Data Privacy Framework, which the European Commission recognises as adequate."
      },
      {
        "name": "Cloudflare",
        "company": "Cloudflare, Inc.",
        "country": "United States",
        "role": "Forwards the mail of valeva.dev to my inbox.",
        "transfer": "The transfer to the United States rests on its certification under the EU-US Data Privacy Framework, which the European Commission recognises as adequate."
      },
      {
        "name": "Google",
        "company": "Google LLC",
        "country": "United States",
        "role": "Hosts my Gmail inbox, where the messages stay.",
        "transfer": "The transfer to the United States rests on its certification under the EU-US Data Privacy Framework, which the European Commission recognises as adequate."
      },
      {
        "name": "Vercel",
        "company": "Vercel Inc.",
        "country": "United States",
        "role": "Hosts the site, its logs and its statistics.",
        "transfer": "The transfer to the United States rests on its certification under the EU-US Data Privacy Framework, which the European Commission recognises as adequate."
      }
    ]
  },
  "rights": {
    "summary": "You can exercise them at any time by writing to me at me@valeva.dev. I do not use your data for profiling or marketing.",
    "items": [
      {
        "article": 15,
        "text": "Know what data I hold about you, and get a copy.",
        "href": null
      },
      {
        "article": 16,
        "text": "Have them corrected.",
        "href": null
      },
      {
        "article": 17,
        "text": "Have them erased.",
        "href": null
      },
      {
        "article": 18,
        "text": "Restrict their processing.",
        "href": null
      },
      {
        "article": 20,
        "text": "Receive them in a machine-readable format.",
        "href": null
      },
      {
        "article": 21,
        "text": "Object to the processing based on legitimate interest.",
        "href": null
      },
      {
        "article": 22,
        "text": "Not be subject to automated decisions: the site makes none.",
        "href": null
      },
      {
        "article": 77,
        "text": "Lodge a complaint with the Italian data protection authority, the Garante per la protezione dei dati personali.",
        "href": "https://www.garanteprivacy.it/diritti/come-agire-per-tutelare-i-tuoi-dati-personali/reclamo"
      }
    ]
  },
  "cookies": "The site sets no cookies.",
  "_links": {
    "self": {
      "href": "/en/privacy"
    },
    "alternate": {
      "href": "/it/privacy",
      "hreflang": "it"
    },
    "up": {
      "href": "/en"
    }
  }
}