Privacy notice
This site collects the bare minimum. No profiling cookies, no advertising, no banner. Below is what is processed, why, and by whom, under Article 13 of Regulation (EU) 2016/679 (GDPR).
Data controller
Stefano Serioli, owner of serioli_development, VAT no. IT13834290960, Italy. For any privacy request: privacy@serioli.dev.
What data, and why
Browsing. The site is hosted on Cloudflare. To display the pages and protect them from abuse, the infrastructure processes technical data such as IP address, browser type and requested page. Visit statistics come from Cloudflare Web Analytics: aggregated, cookieless, with no cross-site tracking. Legal basis: legitimate interest in the security and operation of my site (Art. 6(1)(f)).
Contact form. I need your name, email, reason and message to reply to you. Before sending, Cloudflare Turnstile checks that a person, not a bot, is on the other side, by analysing technical browser signals. The message reaches me by email through Brevo. Legal basis: pre-contractual steps taken at your request (Art. 6(1)(b)) and legitimate interest in replying and in keeping the form free of spam (Art. 6(1)(f)).
Email and WhatsApp. If you write to me directly, I process what you send in order to reply. Email runs on Google Workspace. The WhatsApp button opens the WhatsApp app for you: from there on, WhatsApp’s own privacy policy applies too.
Providing your data is optional, but without a name, email and message I obviously cannot reply. I make no automated decisions and do no profiling.
How long
Messages stay in my mailbox for as long as needed to handle the request and any work that follows; in any case no longer than 24 months after the last contact, unless the law requires otherwise (tax records, for instance) once a professional relationship begins. Technical infrastructure logs follow Cloudflare’s retention periods.
Who processes data on my behalf
- Cloudflare, Inc.: hosting, network, security, Turnstile, statistics.
- Brevo (France): delivery of the emails generated by the form.
- Google Ireland Limited: email (Google Workspace).
- WhatsApp Ireland Limited: only if you choose to message me on WhatsApp.
Some of these providers may process data outside the European Union, notably in the United States. Such transfers rely on the EU-U.S. Data Privacy Framework or on the Standard Contractual Clauses approved by the European Commission. Data is never sold or handed to anyone else.
Cookies
The site uses no profiling or analytics cookies. Cloudflare’s infrastructure and Turnstile may use technical means strictly necessary for security, which require no consent.
Your rights
You may at any time request access to, rectification, erasure, restriction or portability of your data, or object to its processing (Articles 15–22 GDPR), by writing to privacy@serioli.dev. If you believe the processing breaches the GDPR, you may lodge a complaint with the Italian supervisory authority, the Garante per la protezione dei dati personali, or with the authority where you live.
Changes
If anything changes, I update this page and the date at the top.