Privacy and cookie notice

In short

• The site has no forms and no accounts.
• Contact happens only on WhatsApp, when you tap a button and you decide to send the message.
• At the moment the site uses no statistics or marketing cookies.
• YouTube videos load only when you press play.

When you write on WhatsApp

Contact happens only when you tap a WhatsApp button. The button opens WhatsApp, a service of WhatsApp Ireland Limited (Meta group), with a pre-written message. You can edit it before you send it.

The message contains a short reference, for example "(rif: en/default/pacchetti/ads)". It tells Gerardo the language of the page, which section of the page and which source the message comes from.

The reference comes only from the page address: the version of the page you entered the site on and, if you came from an ad, the link's utm parameters. As you move from page to page, these parameters stay in the address of the site's links: the site uses no cookies and stores nothing in your browser for the reference.

When you write, Gerardo receives your phone number, your WhatsApp name and the message. He uses them only to reply to you and, if you ask, to provide you with the service.

The legal basis is taking the steps you ask for before a possible contract (pre-contractual steps) and then, if you become a client, performing the contract (Article 6(1)(b) of the GDPR).

Cookies and similar technologies

At the moment the site uses no statistics or marketing cookies, so it shows no cookie banner. If it uses them in future, a banner will ask for your consent before they are set.

To count visits, the site may use Plausible Analytics, which does not use cookies and does not collect personal data.

Videos

The videos are on YouTube, a service of Google Ireland Limited. Until you press play, the site shows only a preview image stored on the site itself, and YouTube receives nothing.

When you press play, the video loads from youtube-nocookie.com. From then on Google receives your IP address, browser and device data and the site's address, and the player may store identifiers in your browser. The legal basis is your request: by pressing play you consent to loading the video (Article 6(1)(a) of the GDPR). Google processes this data under its own privacy policy (policies.google.com/privacy).

Hosting, fonts and images

The site is served by Cloudflare, Inc., which acts on behalf of the data controller as a processor. To deliver the pages and protect the site from abuse and attacks, Cloudflare processes technical data such as your IP address. The legal basis is the data controller's legitimate interest in delivering the site and keeping it secure (Article 6(1)(f) of the GDPR). More details in Cloudflare's privacy policy (cloudflare.com/privacypolicy).

Fonts and images are served by the site itself. There are no requests to third-party font services.

How long data is kept

• WhatsApp conversations: for as long as needed to reply to you and to provide you with the service. For clients, also for the period required by law.

Transfers outside the European Union

Meta, Google and Cloudflare may transfer data outside the European Union. In that case, the safeguards provided for by the GDPR apply: adequacy decisions and standard contractual clauses.

Your rights

Articles 15 to 22 of the GDPR give you the rights listed below. To exercise them, write to the data controller's email address, which you will find at the top of this page.

• Access to your data.
• Rectification of inaccurate data.
• Erasure.
• Restriction of processing.
• Data portability.
• Objection to processing.
• Withdrawal of consent, at any time.

Complaints

You can lodge a complaint with a supervisory authority:

• IDPC, the Information and Data Protection Commissioner of Malta (idpc.org.mt)
• Garante per la protezione dei dati personali, the Italian data protection authority (garanteprivacy.it)

Automated decisions and minors

No decision about you is made by automated means.

The site is not aimed at minors.