Privacy notice.

Who is responsible

The data controller is Giacomo Rossi. For privacy questions and to exercise your rights, email info@giacomorossi.eu.

Which data is collected

If you use the contact form, the information processed includes your name, email address, topic and message. A reference to a project may be included if you arrive from a case study; you can remove it before submitting. The form language is also sent. If you email directly, your address and the information you choose to send are processed.

The server records technical data needed to deliver and protect the website: IP address, request date and time, method and requested path, response status and amount of data transferred. Contact message contents are not written to application logs. Abuse prevention also uses temporary counters in memory; for the form, the email address is converted into a technical hash.

Name, email, topic and message are required to submit the form and receive a reply. Providing them is optional: you can browse without getting in touch. Please avoid including health data, other particularly sensitive information, credentials or third-party personal data that is not needed for your enquiry.

Purposes and legal bases

For enquiries about a project, consultancy or a possible professional collaboration, the legal basis is taking steps at the data subject’s request before entering into a contract (Article 6(1)(b) GDPR), where the enquiry has that nature.

For other communications, the basis is the legitimate interest in handling incoming correspondence (Article 6(1)(f)). For technical data and abuse prevention, the legitimate interest is keeping the site available, identifying faults and preventing misuse.

Contact form data is not used for newsletters, advertising or profiling. The site does not make automated decisions that produce legal or similarly significant effects on individuals.

Who may receive it

The server sends contact form messages to info@giacomorossi.eu through Aruba’s email service using an encrypted SMTP connection. Giacomo Rossi receives and handles the correspondence. The website does not create an application database of messages.

Technical hosting and email providers may process the data needed to deliver these services. Personal data is not published on the website or sold. It may be disclosed to competent authorities where required by law.

Project and demo links open separate websites with their own data processing practices. This notice applies to giacomorossi.eu.

How long data is kept

Correspondence remains in the email mailbox. Retention is based on the time needed to reply, handle follow-up and document the professional relationship. If an engagement follows, applicable legal obligations and the need to establish or defend rights relating to that relationship also apply.

Technical logs are kept according to the time needed for troubleshooting and service security, taking ongoing incidents or investigations into account. Abuse prevention counters are temporary and do not form a permanent contact archive.

Cookies and external services

The site does not integrate traffic analytics, advertising pixels or profiling cookies. Fonts and images are served with the website. The industrial simulation runs in the browser and is not connected to real machinery.

A project assistant using OpenAI’s API has been prepared, but is currently inactive and sends no questions to the provider. Before it is activated, this notice will be updated to cover conversation processing, recipients, retention and any transfers outside the European Economic Area.

Your rights

Where the GDPR provides for it, you can request access, rectification, erasure, restriction of processing and data portability. You can object to processing based on legitimate interests on grounds relating to your particular situation. Email info@giacomorossi.eu with your request; only information needed to verify your identity may be requested.

You also have the right to lodge a complaint with a supervisory authority, particularly in the country where you habitually live, work or believe an infringement occurred. In Italy, you can contact the Garante per la protezione dei dati personali.