Your enquiry, with no blind spots.

1. Data controller

The data controller is Ivan Albano, resident in Santo Stefano Ticino (MI), 20010, Italy.

E-mail: ivan.albano89@gmail.com

2. Data processed

The form processes name, e-mail address, optional telephone number, project type, selected language and message. The date and time of the enquiry and the technical result of both e-mail sending attempts are also recorded.

The system temporarily uses a non-readable identifier derived from the IP address to limit spam; the IP address is not stored in the enquiry archive and the identifier expires after 15 minutes. Please do not include health or criminal data, identity documents or any information that is not needed for the project.

3. Purposes and legal bases

Data is used to read the enquiry, contact the sender, assess feasibility and availability and, where requested, prepare a proposal. The legal basis is taking steps at the data subject’s request before entering into a contract (Article 6(1)(b) GDPR).

Abuse prevention and the handling of disputes rely on the legitimate interest in security and legal defence (Article 6(1)(f)). If a professional relationship begins, some data may be processed to meet legal obligations (Article 6(1)(c)). Data is not used for newsletters, profiling or automated decisions.

4. What happens after “Send”

The enquiry is saved in the restricted WordPress administration area. One shared template generates two e-mails: an operational copy for Ivan and a confirmation sent to the address provided by the user. The archive also records each delivery result, so the message remains available if one e-mail is not delivered.

The automatic confirmation does not mean that a project has been accepted or that a contract exists. Further communication may continue by e-mail or, if supplied, by telephone.

5. Required data and minors

Name, e-mail, project type, message, acknowledgement of this notice and age declaration are required to use the form; the telephone number is optional. The enquiry cannot be sent without the required data.

The form may be used only by people aged 16 or over. Age is self-declared through a required checkbox and is not automatically verified. Anyone under 16 must ask a parent or legal guardian for assistance. Data received from a younger person contrary to this rule may be deleted as soon as it is identified.

6. Recipients and technical services

Data can be accessed by Ivan and, only as needed for operation, by the technical providers actually configured for hosting, maintenance, e-mail delivery and mailbox services. Provider names depend on the services selected for the website and can be requested from the controller.

Data is not sold or made public. If a provider entails a transfer outside the European Economic Area, the controller must verify and apply one of the safeguards set out in Chapter V of the GDPR.

7. Retention

The form archive automatically deletes enquiries older than 24 months. Copies in e-mail accounts are managed separately and must be kept only as long as needed to reply and follow the project.

If an enquiry becomes an engagement, data required for the relationship, legal obligations or legal defence may be retained for the different periods set by law. An earlier erasure request will be assessed unless a legal obligation or overriding legitimate reason requires retention.

8. Security and website tools

Proportionate organisational and technical measures are applied, including access controls, form validation, anti-spam protection and rate limiting. No system can remove every risk; any incident will be managed in accordance with applicable duties.

This snippet does not install analytics or profiling cookies. WordPress, the theme, plugins and hosting may nevertheless use technical functions or cookies, so the controller must verify the live configuration. Before enabling analytics, embedded content or non-technical cookies, this notice must be updated and prior consent obtained where required.

9. External social and video links

The site contains links to social profiles and videos, such as Instagram and YouTube. They are external links: the portfolio does not send data to those services until a link is opened. After the click, the relevant provider may process the IP address, technical information, cookies and account data under its own privacy notice.

Any future video or social widget embedded directly in a page must be configured consistently with cookie rules and, where necessary, blocked until the user makes a choice.

10. Your rights

The data subject may request access, rectification, erasure, restriction, portability where applicable, and object to processing based on legitimate interests (Articles 15–21 GDPR). Any consent may be withdrawn without affecting processing already carried out.

To exercise these rights, write to ivan.albano89@gmail.com. A response will be provided within the GDPR time limits. You also have the right to lodge a complaint with the Italian Garante per la protezione dei dati personali.

11. Updates

This page is updated when the form, providers, external content or processing methods change. The version published here with the date shown above is the current version.