How I handle your data.

The data controller is Briguglio Francesco, Via Marcello Malpighi 26/B, 98122 Messina (ME), Italy — P.IVA 03883270831, C.F. BRGFNC92H17F158Q.

For any matter concerning your data you can write to hello@francescobriguglio.com. No Data Protection Officer (DPO) has been appointed, because none of the cases provided for by Article 37 of the GDPR apply.

Only what you write yourself in the contact form: name, email address, company (optional), plan of interest and the text of the message.

The site does not use profiling cookies and has no analytics tools. When you submit the form, the server temporarily records your IP address for the sole purpose of limiting repeated submissions and blocking automated ones: the data stays in memory for ten minutes and is neither saved to disk nor associated with the message.

A support widget provided by Multibot (multibot.it) is present on the pages. If you open it and write in it, the contents of the conversation are processed by that service according to its own privacy notice; if you do not open it, you disclose no personal data to it.

The form data serves one purpose only: replying to you and, if the project goes ahead, carrying on the conversation. The legal basis is your consent (Art. 6(1)(a) GDPR), which you give by ticking the box before sending, and the performance of pre-contractual measures taken at your request (Art. 6(1)(b) GDPR).

I do not sign you up to any newsletter, I do not send you promotional material and I neither transfer nor sell your data to third parties.

The message is delivered by email through Resend (Resend Inc., United States), which acts as data processor and which sends two messages: the notification to me and the acknowledgement of receipt to you. The transfer to the United States takes place on the basis of the Standard Contractual Clauses approved by the European Commission.

The emails then remain in the data controller's mailbox, hosted by the relevant email service provider. No other party receives your data.

I keep messages for as long as is necessary to handle the request and, if a working relationship arises from it, for the duration of that relationship and for the following ten years required by civil law and tax obligations. If the request goes no further, I delete the message within 24 months.

You can ask me to delete it sooner at any time: I do so without asking you for an explanation.

You can ask me at any time to access your data, to rectify it, erase it, to obtain the restriction of its processing, to object and to receive it in a machine-readable format (data portability). You can also withdraw consent at any time, without this affecting the lawfulness of the processing carried out before the withdrawal.

An email to hello@francescobriguglio.com is enough. I reply within thirty days.

If you believe that the processing infringes the Regulation, you have the right to lodge a complaint with the Garante per la protezione dei dati personali, the Italian Data Protection Authority.

Nobody obliges you to fill in the form. But without a name, email address, plan of interest and message I am simply not able to reply to you: that is why those fields are required. The company field is optional and only serves to frame the request better.