Privacy Policy & Personal Data Processing Notice
Document version: 1.0 | Legal framework: Regulation (EU) 2016/679 (GDPR)
Courtesy translation of the Italian Privacy Policy. The Italian text is the primary legal reference. This version was made available following a review declaration by the site administrator.
1. Data Controller
| Data Controller | Alessandro Sannini |
|---|---|
| Website | https://alessandrosannini.net/ |
| Contact | Use the contact form provided on the website |
| Applicable legislation | Regulation (EU) 2016/679 · Italian Legislative Decree 196/2003, as amended by 101/2018 |
2. Categories of Personal Data Collected
2.1 Data voluntarily provided
When using the contact form, you may voluntarily provide:
- First and last name
- Email address
- Subject of the request
- Message content
Providing these data is voluntary but necessary to reply to your enquiry. Without them, the request cannot be processed.
2.2 Browsing and technical data
During normal operation, the IT systems and software procedures used to run this site receive certain personal data whose transmission is inherent to internet communication protocols. These may include IP addresses or domain names of connected devices, requested URI addresses, request time and method, response size and status code, and technical parameters of the operating system and environment. Such data are not collected for the purpose of associating them with identified individuals, but in certain circumstances could permit identification when combined with other information.
2.3 Cookies and similar technologies
The site uses essential technical cookies and, where enabled with your consent, analytics cookies. See section 6 below for details.
3. Purposes and Legal Bases
| Purpose | Legal basis (GDPR) | Retention period |
|---|---|---|
| Replying to enquiries submitted through the contact form | Art. 6(1)(b), pre-contractual steps, or Art. 6(1)(f), legitimate interests | 24 months after receipt of the request |
| Sending email confirmations | Art. 6(1)(b), pre-contractual steps | 24 months |
| Website visitor statistics (Google Analytics, where enabled) | Art. 6(1)(a), consent | 26 months as stated in the Italian notice; actual GA4 settings must be checked by the Controller |
| Compliance with legal obligations | Art. 6(1)(c), legal obligation | Applicable statutory periods |
| Website security and misuse prevention | Art. 6(1)(f), legitimate interests | 30 days for system logs as stated in the Italian notice |
4. Processing, Recipients and Transfers
Personal data are processed by electronic means for the stated purposes, with appropriate organisational and technical safeguards. The Controller and authorised parties may access the data where necessary, including IT service providers, hosting companies and other processors appointed when required.
Data are not disclosed for marketing or commercial profiling. Third-country transfers, where applicable to services such as Google Analytics, must comply with GDPR transfer mechanisms, including adequacy decisions or appropriate safeguards.
5. Your Rights
Under Articles 15–22 GDPR, data subjects may exercise the following rights, within the limits provided by law:
- Access (Article 15): Request confirmation and a copy of personal data undergoing processing.
- Rectification (Article 16): Request correction of inaccurate or incomplete data.
- Erasure (Article 17): Request erasure in the circumstances provided by law.
- Restriction (Article 18): Request restriction of processing where applicable.
- Data portability (Article 20): Receive relevant data in a structured, commonly used machine-readable format.
- Objection (Article 21): Object to processing where the legal requirements are met.
- Withdrawal of consent (Article 7): Withdraw consent at any time without affecting prior lawful processing.
- Complaint (Article 77): Lodge a complaint with the Italian Data Protection Authority or the competent supervisory authority.
To exercise your rights, use the contact form and indicate “Exercise of GDPR rights” in the subject. The Controller will respond within the applicable legal time limits.
6. Cookie Policy
alessandrosannini.net uses technical cookies that are necessary for the site to function and, only where consent is given, analytics cookies or similar tools.
6.1 Essential technical cookies
Essential cookies do not require consent under Article 122 of the Italian Data Protection Code. They may include:
| Cookie | Purpose | Duration | Type |
|---|---|---|---|
as_gdpr_consent | Stores user cookie preferences | 12 months / 12 mois | First-party |
wordpress_* | WordPress authenticated sessions | Session | First-party |
wp-settings-* | WordPress dashboard preferences | 1 year / 1 an | First-party |
6.2 Analytics cookies (subject to consent)
If the user explicitly consents and analytics tools have actually been enabled by the site operator, Google Analytics may use cookies to produce usage statistics. The following names and durations reproduce the Italian notice and must be checked against the deployed configuration:
| Cookie | Provider | Purpose | Duration |
|---|---|---|---|
_ga | Google LLC | Distinguishes users where Google Analytics is enabled | 2 years / 2 ans |
_ga_* | Google LLC | Maintains session information where enabled | 2 years / 2 ans |
_gid | Google LLC | Short-term visitor differentiation | 24 hours / 24 heures |
More information: Google Privacy Policy · Google Analytics opt-out
6.3 Managing consent and cookies
Preferences can be managed through the site cookie banner where available and via browser settings. Rejecting non-essential analytics should not prevent use of the site.
7. Data Security
The Controller uses technical and organisational measures appropriate to the risk under Article 32 GDPR, including HTTPS/TLS, access restrictions and secure storage of correspondence received through the contact form.
8. Changes to this Notice
This policy may be amended. The most recent version is made available on this page. Material changes may be communicated through a notice on the website.
9. Legal References
- Regulation (EU) 2016/679 (GDPR)
- Italian Legislative Decree No. 196/2003
- Italian Legislative Decree No. 101/2018
- Italian Data Protection Authority decision No. 229/2014 (cookies)
- Italian Data Protection Authority cookie guidelines, 10 June 2021
Technical supplement dated 22 October 2026
Privacy supplement: website statistics and analytics
This website may use the first-party AS Gestione statistics module. It is optional and may be disabled by the administrator. The description below explains the plugin’s capabilities; it does not assert that every feature is currently active.
Aggregated page views
When enabled, page views are counted by day, language, section, broad device category and aggregated referral channel. The statistics database does not store raw IP addresses, complete referral URLs, email addresses or raw user-agent strings. Aggregates are intended to be retained for at most 90 days, subject to scheduled cleanup. Fully cached visits may not be counted.
Unique visitors (consent required)
The separate unique-visitor feature requires both activation and express analytics consent. Only after consent is given does it set a first-party, HttpOnly statistical cookie (asint36_vid), valid for 30 days. Its identifier is stored in the database only as an HMAC digest. Records are scheduled for deletion after 30 days of inactivity. Raw IP addresses, email addresses and referral URLs are not stored.
External analytics
AS Gestione does not install Google Analytics 4 or other third-party tags automatically. If the Controller enables such services separately, the actual providers, cookies, retention settings and any international transfers must be documented; prior consent must be obtained where required.
Choices, withdrawal and rights
Refusing analytics consent does not prevent browsing. Consent can be changed or withdrawn using the site’s cookie controls. The unique-visitor module also provides an opt-out request that deletes the associated pseudonymous identifier. GDPR rights may be exercised using the contact form. Retention intervals depend on the WordPress scheduled-cleanup processes running successfully.