1. Types of data collected

In the course of normal browsing and use of the site, the following categories of data may be collected:

• Data provided voluntarily: name, email address, and any information entered in the contact form (built with the WPForms plugin), when the user chooses to write to the Data Controller.
• Browsing data: IP address, browser and device type, pages visited, date and time of access, automatically collected by the hosting server for technical and security purposes (system logs).
• Technical cookies: small text files necessary for the site to function. No profiling, advertising, or third-party tracking cookies are used. See the «Cookie» section below for details.

2. Purpose and legal basis of processing

• Responding to contact requests: data entered in the contact form is processed solely to reply to the request received. Legal basis: performance of pre-contractual measures requested by the data subject, or consent (Art. 6(1)(b) and (a) GDPR).
• Security and proper functioning of the site: browsing data and system logs are processed to prevent and detect fraudulent or malicious activity. Legal basis: legitimate interest of the Data Controller (Art. 6(1)(f) GDPR).

Providing data through the contact form is optional, but necessary in order to receive a reply. Failure to provide it means it will not be possible to respond to you.

3. Processing methods and security measures

Data is processed using electronic tools, following logic strictly related to the purposes indicated, and in any case in a manner that ensures its security and confidentiality. The site uses an encrypted HTTPS connection and appropriate technical measures to protect data from unauthorized access, loss, or destruction.

4. Data recipients

Personal data is not disclosed or transferred to third parties for marketing or advertising purposes. It may be accessed, strictly to the extent necessary, by the following parties acting as data processors pursuant to Art. 28 GDPR:

• The hosting provider that hosts the site and ensures its operation.
• WPForms, for the technical management of the contact form (data entered remains stored on the site’s server and is not transmitted to external advertising services).

The site does not use third-party services that involve the transfer of data outside the EU: fonts, scripts, and graphic resources are hosted directly on the site’s server (no Google fonts or other external services are loaded).

5. Data retention period

Data submitted through the contact form is retained for as long as necessary to handle the request and, subsequently, for a maximum of 24 months for administrative purposes, unless otherwise required by law.

System logs related to browsing are retained for a limited period, generally no longer than a few weeks, except where needed to investigate unlawful activity.

6. Data subject rights

As a data subject, you have the right to ask the Data Controller at any time, pursuant to Articles 15-22 of the GDPR, for:

• Access to your personal data;
• Rectification of inaccurate or incomplete data;
• Erasure of data (“right to be forgotten”), in the cases provided for by law;
• Restriction of processing;
• Portability of the data provided;
• Objection to processing based on legitimate interest;
• Withdrawal of consent at any time, without affecting the lawfulness of processing based on consent given before its withdrawal.

To exercise these rights, simply write to marcello [at] marcellopeluso [dot] it.

You also have the right to lodge a complaint with the competent supervisory authority, the Italian Data Protection Authority (Garante per la protezione dei dati personali — www.garanteprivacy.it), if you believe that the processing of your data infringes applicable law.

7. Cookie Policy

Cookies are small text files that visited websites send to the user’s browser, where they are stored to be sent back to the same websites on the next visit.

Cookies used by this site

This site uses exclusively technical cookies, necessary for the site to function correctly. No profiling, advertising, or tracking cookies are installed, whether first-party or third-party (for example, there is no Google Analytics or other traffic-measurement tool). Prior consent for their use is therefore not required, as provided for by the Italian Garante Privacy’s simplified guidelines on cookies (Provv. no. 231/2021).

Cookie	Purpose	Duration
WordPress session cookie	Manages access to the site’s admin area	Session duration
WP Super Cache	Optimizes site performance and load times	Up to 24 hours
WPForms	Correct submission and anti-spam protection for the contact form	Session duration
Cookie banner preference	Remembers that you’ve seen this notice, so it isn’t shown again	12 months

Fonts and graphic resources

The typefaces (fonts) used by the site are hosted directly on marcellopeluso.com’s server. No connection is made to external servers (such as Google Fonts) to load the site, avoiding any unnecessary transfer of data (including your IP address) to third parties.

Managing cookies from your browser

You can delete cookies already stored and disable their future installation at any time through your browser settings:

• Google Chrome
• Mozilla Firefox
• Safari
• Microsoft Edge

Disabling technical cookies may affect the correct functioning of some parts of the site.

Review your cookie preferences

8. Changes to this notice

This notice may be updated from time to time, including in connection with regulatory developments. Please check this page periodically. The date of the last update is shown at the top of the page.

This notice was drafted pursuant to Regulation (EU) 2016/679 (GDPR) and Legislative Decree 196/2003, as amended.