1. Data Controller
The data controller is Luigi Casagrande, reachable at luigi.casagrande@outlook.it
2. Scope of This Privacy Policy
This Privacy Policy describes how personal data are processed when users visit the website https://luigicasagrande.it (the “Website”).
The Website is a static, informational website and does not include forms, newsletters, comment sections, or user accounts.
3. Types of Data Processed
3.1 Browsing
During normal operation, the Website and its underlying infrastructure may process the following technical data:
- IP address
- browser and device information (User-Agent)
- date and time of access
- requested URL
These data are necessary for the delivery and security of the Website and are not used to identify users.
3.2 Voluntary Download
The Website provides access to downloadable documents (e.g. PDF files, CV).
Downloading such files is a voluntary action initiated by the user. No tracking or profiling related to downloads is performed by the Website.
4. Purpose of Processing
Personal data are processed exclusively for the following purposes:
- ensuring the correct technical functioning of the Website
- maintaining security and preventing abuse
- displaying requested content
No data are used for marketing, profiling, or behavioral analysis.
5. Legal Basis of Processing
The processing of personal data is based on the legitimate interest of the data controller pursuant to Article 6(1)(f) of Regulation (EU) 2016/679 (GDPR), namely the operation and security of a publicly accessible website.
6. Cookies and Tracking Technologies
The Website does not use cookies, including technical, analytical, or profiling cookies.
The data controller does not intentionally store information on the user’s device (e.g. via cookies, localStorage, or similar technologies).
7. Third-Party Services
7.1 Hosting
The Website is hosted on GitHub Pages.
GitHub may process technical browsing data as a data processor in order to provide the hosting service, in accordance with its own privacy policies.
7.2 DNS Services
Domain name resolution is provided by OVH, which may process technical request data in the context of DNS resolution.
7.3 Google Fonts
The Website uses Google Fonts, loaded from Google servers.
When a page is accessed, the user’s browser may contact Google servers to retrieve font files, which may result in the processing of technical data (such as IP address).
Google acts as an independent data controller for this processing.
7.4 Social Media Links and Widgets
The Website contains links or widgets related to social platforms (e.g. GitHub, LinkedIn).
When interacting with such elements or following external links, users are subject to the privacy policies of the respective third parties.
8. Analytics
The Website does not currently use analytics or traffic measurement tools.
If privacy-friendly, self-hosted analytics solutions (e.g. Umami) are introduced in the future, this Privacy Policy will be updated accordingly.
9. Data Retention
Technical data are retained only for the time strictly necessary to ensure the operation and security of the Website, in accordance with the policies of the involved service providers.
10. Data Transfers Outside the EU
Some third-party services used by the Website (e.g. GitHub, Google) may involve data transfers outside the European Union.
Such transfers are carried out in accordance with applicable data protection regulations and safeguards.
11. Security Measures
Appropriate technical and organizational measures are implemented to protect data against unauthorized access, alteration, or loss.
The Website is served exclusively via HTTPS with a valid TLS certificate.
12. Data Subject Rights
Users may exercise the rights provided by Articles 15–22 of the GDPR, including the right to:
- access personal data
- request rectification or erasure
- object to processing
- request restriction of processing
Requests may be addressed to the data controller using the contact details provided above.
13. Changes to This Privacy Policy
This Privacy Policy may be updated to reflect changes in the Website, applicable law, or processing activities.
The current version is always available on this page.