This Privacy Policy applies to https://luigicasagrande.it (the “Website”). It describes the Website as it operates on the date shown above: a primarily static personal website with no user accounts, comments, newsletter, first-party analytics, advertising, or direct checkout.
1. Data controller
The data controller is Luigi Casagrande.
- Email: luigi.casagrande@outlook.it
- Website: https://luigicasagrande.it
No data protection officer has been appointed because the current processing activities do not require one.
2. Data processed
2.1 Technical and browsing data
When a page or file is requested, hosting and network providers may automatically receive technical information needed to deliver and protect the service, such as:
- IP address and approximate location derived from it;
- requested URL, date, time, response status, and referring page;
- browser, operating system, device, and User-Agent information;
- diagnostic, security, and abuse-prevention events.
I do not use these data to identify visitors or build profiles. Access to provider logs is limited to what the provider makes available and what is reasonably needed for security or troubleshooting.
2.2 Local appearance preference
The light/dark theme control stores a functional value named pref-theme in the browser’s local storage. It remains on the visitor’s device until changed or cleared and is not used for analytics, advertising, or cross-site tracking.
2.3 Direct communications
If you contact me by email, I process the information you choose to provide, such as your name, email address, message, attachments, and subsequent correspondence. Please do not send sensitive personal information unless it is genuinely necessary.
2.4 Downloads
PDFs, images, software, and other files can be downloaded voluntarily. The Website does not run first-party download analytics. A download still creates an ordinary technical request that may appear in hosting logs as described above.
3. Purposes and legal bases
| Processing | Purpose | Legal basis under the GDPR |
|---|---|---|
| Technical requests and security logs | Deliver pages and files, maintain availability, diagnose faults, and prevent abuse | Legitimate interests, Article 6(1)(f) |
| Theme preference on your device | Remember the appearance you selected | Necessary user-requested functionality; no value is transmitted to me |
| General email | Read and respond to your message | Legitimate interests, Article 6(1)(f) |
| Project or collaboration enquiries | Respond to your request and, where relevant, take steps before an agreement | Articles 6(1)(f) or 6(1)(b), as applicable |
Where processing relies on legitimate interests, the interests are operating a secure, usable website, responding to people who contact me, and establishing or protecting legal rights. These interests are balanced against the limited nature of the data and the rights of the individual.
If consent becomes the appropriate legal basis for a future activity, it will be requested separately and can be withdrawn without affecting processing already carried out lawfully.
4. Cookies and similar technologies
The Website does not currently use first-party analytics, advertising, or profiling cookies. The theme preference described above uses local storage solely for the requested interface setting.
If non-essential analytics, advertising, embedded media tracking, or comparable technologies are added to this Website, they will not be activated before any consent required by Italian and EU law has been collected. This Policy and any consent controls will be updated at that time.
5. Recipients and service providers
Personal data may be processed by the following categories of recipient only as necessary:
- GitHub Pages, which hosts and delivers the Website (GitHub Privacy Statement);
- OVHcloud, which provides domain-name and DNS-related services (OVHcloud Privacy Policy);
- Google Fonts, which supplies font files requested by the browser (Google Privacy Policy);
- professional advisers, public authorities, courts, or counterparties where disclosure is legally required or reasonably necessary to establish, exercise, or defend legal claims.
Depending on the activity and the provider’s terms, a provider may act as a processor, subprocessor, or independent controller. This Policy does not claim that every listed provider acts only on my instructions.
Personal data are not sold. They are not disclosed for third-party behavioural advertising by this Website.
6. International transfers
Some providers or their subprocessors operate outside the European Economic Area. Where EU data-protection law requires transfer safeguards, transfers must rely on an applicable adequacy decision, approved contractual safeguards such as Standard Contractual Clauses, or another lawful mechanism. The provider notices linked above describe their current arrangements and locations.
7. Retention
Data are kept only for as long as reasonably necessary for the stated purpose:
- hosting and security logs are retained according to the relevant provider’s documented settings and policies;
- ordinary email correspondence is normally reviewed for deletion after 24 months from the last meaningful exchange, unless it remains relevant to an active matter;
- unsuccessful or abandoned project or collaboration enquiries are normally deleted within 12 months;
- local theme preferences remain on the visitor’s device until the visitor changes or clears them;
Data may be retained longer where reasonably necessary for a legal obligation, active dispute, security investigation, or the establishment, exercise, or defence of legal claims.
8. Your rights
Subject to the conditions and exceptions in applicable law, you may request:
- access to your personal data and information about its processing;
- correction of inaccurate or incomplete data;
- erasure of personal data;
- restriction of processing;
- data portability where the right applies;
- objection to processing based on legitimate interests;
- withdrawal of consent where processing relies on consent;
- information about safeguards used for relevant international transfers.
No decision producing legal or similarly significant effects is made about Website visitors solely by automated means.
Send requests to luigi.casagrande@outlook.it. Information may be requested where reasonably necessary to verify identity and avoid disclosing data to the wrong person. Requests are normally answered within one month, subject to extensions permitted by law.
You also have the right to complain to the Garante per la protezione dei dati personali at garanteprivacy.it or to another competent supervisory authority, particularly in the EU/EEA country where you live or work or where an alleged infringement occurred.
9. Security
The Website is served over HTTPS. Reasonable technical and organisational measures are used to reduce the risk of unauthorised access, alteration, loss, or disclosure. No internet service can guarantee absolute security, so please avoid sending unnecessary sensitive data by email or through third-party services.
10. Children
The Website is intended for a general audience and is not directed at children. I do not knowingly request personal data from children through the Website. If you believe a child has provided personal data inappropriately, contact me so the matter can be reviewed.
11. External links
The Website links to services not controlled by me. Their privacy notices apply when you visit them. Opening an external link may allow that service to receive technical request information in the ordinary way.
12. Changes to this Policy
This Policy may be updated when the Website, providers, processing activities, or applicable rules change. The “Last updated” date identifies the current version. Material new processing will not be described only after it has begun where prior information or consent is required.
13. Contact
For privacy questions or to exercise a right, email luigi.casagrande@outlook.it.