Privacy Policy
Last updated: 27 October 2026
This Privacy Policy explains how personal data of visitors to this website is collected and processed, in accordance with Regulation (EU) 2016/679 (General Data Protection Regulation, "GDPR") and Italian Legislative Decree 196/2003 as amended.
1. Data Controller
Federico Ronchetti
Email: me@federicoronchetti.it
For any question about this policy or to exercise your rights, you can write to the email address above.
2. Personal Data Collected
Browsing data
The servers hosting this website automatically record some technical data during normal operation, such as IP address, browser type and version, operating system, date and time of the request, requested page, referring URL and response status. This data is not used to identify you and is processed only to ensure the security and correct functioning of the website.
Data you provide voluntarily
When you use the contact form, the following data is collected: name, email address, company (optional) and the content of your message. The same applies if you write to the email address shown on this website.
Fields marked with an asterisk (*) are required to reply to your request: without them it is not possible to get back to you.
Please do not include special categories of data (e.g. health data, political opinions, religious beliefs) in your message.
3. Purposes, Legal Bases and Retention
| Purpose | Legal basis | Retention |
|---|---|---|
| Replying to requests sent via the contact form or by email, and providing information before a possible engagement | Pre-contractual measures taken at your request (Art. 6(1)(b) GDPR) | For the time needed to handle the request and in any case no longer than 24 months after the last contact, unless a professional relationship follows |
| Ensuring the security and technical operation of the website (server logs) | Legitimate interest (Art. 6(1)(f) GDPR) | For the limited period set by the hosting provider, unless needed to investigate security incidents |
| Complying with legal, tax and accounting obligations, if a professional relationship follows | Legal obligation (Art. 6(1)(c) GDPR) | For the period required by applicable law (10 years for accounting records under Italian law) |
| Establishing, exercising or defending legal claims | Legitimate interest (Art. 6(1)(f) GDPR) | For the duration of the dispute and the applicable limitation periods |
Personal data is not used for marketing purposes, is not sold and is not subject to automated decision-making or profiling.
4. Recipients of the Data
Data is processed by the Data Controller and may be accessed by the following categories of recipients, appointed as data processors where required (Art. 28 GDPR):
- Hosting provider: Hostinger International Ltd., which hosts the website and its server logs;
- Email and IT service providers used to receive and manage messages;
- Professionals (e.g. accountants, legal advisors) bound by confidentiality, where necessary;
- Public authorities, only when required by law.
Data is not disclosed to the public.
5. Third-Party Services
Google Fonts
This website uses Google Fonts, a service provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland), to display the typeface consistently across devices. When a page is loaded, your browser connects to Google servers to download the fonts, which means your IP address is transmitted to Google. Google Fonts does not set cookies.
The legal basis is the legitimate interest in a consistent and readable presentation of the website (Art. 6(1)(f) GDPR). For more information, see the Google Fonts privacy FAQ and the Google Privacy Policy.
6. Transfers Outside the EU
Data is mainly processed within the European Union. Some providers (such as Google) may process data in countries outside the European Economic Area, including the United States. In such cases, transfers take place on the basis of an adequacy decision of the European Commission (such as the EU-U.S. Data Privacy Framework, for certified companies) or of the Standard Contractual Clauses approved by the European Commission.
7. Security
Appropriate technical and organisational measures are adopted to protect personal data against loss, misuse and unauthorised access, including encrypted HTTPS connections for the whole website.
8. Your Rights
Under Articles 15–22 GDPR, you have the right to:
- access your personal data and obtain a copy of it;
- have inaccurate data corrected or incomplete data completed;
- have your data erased, where the conditions are met;
- restrict processing in the cases provided by law;
- receive your data in a structured, commonly used format (data portability);
- object to processing based on legitimate interest.
To exercise your rights, write to the email address indicated in section 1. You will receive a reply without undue delay and in any case within one month.
You also have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali) or with the supervisory authority of the EU country where you live or work.
9. Minors
This website is intended for businesses and professionals and is not directed at people under 18. Data relating to minors is not knowingly collected.
10. Cookies
This website does not use cookies. For details, please see the Cookie Policy.
11. Changes to This Policy
This Privacy Policy may be updated, for example following changes in the law or new services added to the website. The current version is always available on this page, with the date of the last update shown at the top.