Privacy

Privacy policy

This page explains what personal data this website collects, why it collects it, who receives it and what you can ask me to do with it.

Who is responsible

Michele Di Nardo is responsible for the personal data collected on this site. I work in Italy as a libero professionista with P.IVA 12745050018, and I run this site under the name Spritz Consulting. You can reach me at [email protected].

What I collect and why

The contact form. When you send the form, I receive your name, your company, your email address and your message. Name and company are optional. The form also records the page you sent it from, the page that brought you to the site, the time of sending, your IP address and the country Cloudflare associates with that address. I use this data to reply to you and to follow up on your enquiry. The legal bases are the steps you ask me to take before a contract (GDPR art. 6(1)(b)) and my legitimate interest in answering enquiries (GDPR art. 6(1)(f)). Your IP address also lets the form limit how many messages one connection can send in ten minutes, which protects it from abuse.

Booking a call. The booking links open zcal.co, an external scheduling service. Anything you enter there is handled by zcal under its own privacy policy.

Analytics. The site uses Cloudflare Web Analytics. It counts page views and measures how fast pages load. It sets no cookies and builds no advertising profiles.

Technical logs. GitHub Pages and Cloudflare host and deliver this site. To do that, they process your IP address.

Who receives the data

• Cloudflare runs the network in front of the site, the form backend and the storage that holds form submissions. It also provides the analytics.
• GitHub hosts the site files through GitHub Pages.
• Resend sends me an email notification for each form submission.
• Google hosts my email inbox, where those notifications and any email you send me arrive.
• zcal receives your data only if you book a call.

I do not sell your data and I do not use it for marketing.

Transfers outside the EU

Some of these providers process data in the United States. They rely on the transfer mechanisms the GDPR provides, such as the EU-US Data Privacy Framework or standard contractual clauses.

How long I keep it

I keep contact form submissions for 24 months after our last contact, and then I delete them. The record of your IP address that the form uses to limit messages expires after ten minutes.

Your rights

You can ask me for access to your data. You can also ask me to correct it, erase it, restrict its use or send it to you in a portable format, and you can object to processing based on my legitimate interest. To do any of this, write to [email protected]. You also have the right to complain to the Garante per la protezione dei dati personali.

Cookies and browser storage

This site sets no cookies. If you choose the light or dark theme, your browser remembers that choice in local storage under the name mdn-theme. The site stores nothing else in your browser.

Changes

The Updated date at the top of this page shows when I last changed it.