Privacy

Who is responsible

Daniele Barbaro, Turin, Italy. To reach me about your data, write to me.

Visit statistics

I count visits in aggregate with Umami Cloud, a service of Umami Software, Inc. It records which pages are read, where a visit comes from, the browser, operating system, device type, screen size, language and an approximate location (country, region and city). It also counts a few clicks: the email link, the CV download, links to other websites, the theme switch and the “show more” buttons.

Umami sets no cookie and stores nothing on your device. Your IP address is not saved in the statistics. Umami uses it only for a moment, to work out the location and an anonymous visitor identifier: a hash of the website, your IP address, your browser and a salt that changes every month, so visits are not linked from one month to the next. Umami and its providers may keep IP addresses in technical security logs, kept apart from the statistics. See the Umami privacy policy.

The legal basis is my legitimate interest (article 6(1)(f) of the GDPR) in knowing which pages are read, so I can keep them useful.

Hosting

The site is hosted by Vercel Inc. When your browser asks for a page, Vercel processes technical data such as your IP address and user agent in its server logs, to deliver the site and keep it secure. The legal basis is again legitimate interest (article 6(1)(f)).

Vercel is based in the United States. The transfer is covered by the EU-US Data Privacy Framework, to which Vercel adheres. Vercel keeps its logs as described in its privacy policy.

Where the statistics are kept

Umami Cloud keeps the statistics in its EU data region (Frankfurt, Germany), on the free Hobby plan, which keeps analytics data for 6 months. The region applies to the statistics: some other processing, such as CDN routing, security, support and technical logs, may happen outside it.

If you write to me

You send me your email address and your message, and I use them only to reply to you. Writing is the only way to give me personal data on this site: there are no forms.

What the site does not do

No cookies, no forms, no profiling and no advertising services. The fonts are served by this site itself, not by Google. The only thing the site keeps in your browser is your light or dark choice, if you use the theme switch. It stays on your device and is never sent to me.

Links to other websites lead to places with their own privacy policies.

Your rights

You can ask for access to your data, for its correction or deletion, for the processing to be restricted, and you can object to processing based on legitimate interest (articles 15 to 21 of the GDPR). Write to me and I will answer. The statistics carry no name and no email address, so I may not be able to find a given visit in them.

You can also lodge a complaint with the Italian data protection authority, the Garante per la protezione dei dati personali.