This page explains which personal data goes through lorismaroli.it, why, and what you can do about it. It is the notice required by Articles 13 and 14 of EU Regulation 2016/679 (GDPR) and by the Italian Privacy Code (Legislative Decree 196/2003).
Who handles your data
The data controller is Loris Maroli, web developer, Italian VAT no. 02819990066.
For any question about your data you can email me at maroli.loris@gmail.com or call me on +39 345 288 3633.
What data the website collects
Browsing data
When you open the website, the service that hosts it (Vercel) automatically logs some technical information: IP address, date and time of the visit, requested page, browser and device type, and the referring page if any. It is used only to run the website and protect it from abuse and attacks. I don’t use it to find out who you are.
Data you send me
If you email me, call me or message me on WhatsApp, I receive the data you choose to share: usually your name, phone number or email and what you tell me about your project.
If you book a consultation from the “Book a consultation” page, the Cal.com calendar passes me what you enter while booking: name, email, the day and time you picked and your answers to the questions about your business.
What the website doesn’t do
No visitor statistics, no advertising, no social media pixels, no cookies from the website itself. The only third-party service is the booking calendar, which loads only if you open it. Details are in the Cookie Policy.
Why I use it and on what legal basis
- Running the website and keeping it secure (browsing data): legitimate interest, Art. 6(1)(f) GDPR.
- Replying to you, arranging the consultation you booked and preparing a quote: pre-contractual steps you asked for, Art. 6(1)(b) GDPR.
- Working together, if you become a client: performance of the contract (Art. 6(1)(b)) and tax and accounting obligations (Art. 6(1)(c)).
I don’t use your data for newsletters or advertising.
How long I keep it
- Browsing data: for the short period Vercel keeps its technical logs, then it is deleted automatically.
- Messages, requests and bookings: as long as needed to reply. If we don’t end up working together, I delete them within 12 months.
- Client data tied to contracts and invoices: 10 years, as required by Italian law (Art. 2220 of the Civil Code).
Who else sees it
I don’t sell or hand over your data to anyone. Only these providers process it, and only as far as needed:
- Vercel Inc. (United States): hosts the website and logs browsing data, as data processor. Vercel’s privacy policy.
- Aruba S.p.A. (Italy): manages the lorismaroli.it domain.
- Cal.com, Inc. (United States): runs the booking calendar and sends the confirmation emails. Cal.com’s privacy policy.
- Google (Gmail and Calendar): if you email me or book a consultation, which lands in my calendar. Google’s privacy policy.
- WhatsApp Ireland Ltd: if you message me on WhatsApp. WhatsApp processes the data as an independent controller, under its own privacy policy.
- My accountant, if you become a client, for invoices and tax obligations.
Data outside the European Union
Vercel, Google and Cal.com are based in the United States. Transfers rely on the safeguards in Articles 45 and 46 GDPR: the adequacy decision on the EU-U.S. Data Privacy Framework, for the providers that have joined it, and the standard contractual clauses approved by the European Commission.
Your rights
At any time you can ask me to see your data, correct it, delete it, restrict its use, receive it in a readable format or object to its processing (Articles 15-22 GDPR). Just email maroli.loris@gmail.com: I reply within one month.
If you think your data is being handled improperly, you can complain to the Italian Data Protection Authority (Garante) or to the authority of the EU country where you live.
Do you have to give me your data?
No. Contacting me is your choice; without a way to reach you, though, I can’t reply. I make no automated decisions about you and build no profiles.
Changes to this page
If the website changes, for example with visitor statistics or a new third-party service, I update this page and the date at the top.
If anything is unclear, just write to me. I reply myself.