Privacy policy

Who is responsible

The controller of any personal data processed through this website is William Mazza, reachable at w.mazza@nrc.company. A postal address is provided on request.

This site is a personal portfolio. It sells nothing, it has no accounts and it has no login.

What this site collects

The site has no contact form, no newsletter, no comments and no user accounts. It does not ask you for anything and it does not profile you.

Two things are stored locally in your own browser, never sent anywhere: your cookie choice and your language preference. You can clear both at any time from your browser settings.

The hosting provider records standard server logs, which include the IP address of the request, the time, the page requested and the browser identifier. These logs exist for security and for keeping the server running, not for analysing visitors.

Why, and on what legal basis

Server logs are processed on the basis of legitimate interest under article 6.1.f of the General Data Protection Regulation, specifically the interest in keeping the service available and protected from abuse.

The choices stored in your browser are strictly necessary to respect a decision you made, so they need no consent under the same regulation.

If you write to the email address published on this site, your message and your address are processed on the basis of article 6.1.b and 6.1.f, in order to answer you.

Who else sees the data

The hosting provider acts as a processor and sees only what the server logs contain. Fonts are served from this same domain, so no request leaves it to load them.

No data is sold, rented or handed to advertising networks. There is no advertising on this site.

• Hosting provider, as data processor, for server operation and logs
• Email provider, as data processor, when you write to the published address

How long it is kept

Server logs are kept for the period set by the hosting provider, normally no longer than twelve months, and then overwritten.

Email correspondence is kept for as long as the exchange remains useful, and deleted on request.

Browser storage lasts until you clear it, and the cookie choice expires after twelve months so you are asked again.

Transfers outside the European Union

The site is hosted inside the European Union. If a processor ever operates outside it, the transfer is covered by the standard contractual clauses adopted by the European Commission.

Your rights

Under articles 15 to 22 of the General Data Protection Regulation you can ask for access to your data, correction, deletion, restriction of processing, portability, and you can object to processing based on legitimate interest.

Write to w.mazza@nrc.company. Requests are answered within one month.

Complaints

If you believe your data has been handled improperly you can lodge a complaint with the Italian data protection authority, Garante per la protezione dei dati personali, or with the authority of the country where you live.

Changes

If this policy changes, the date at the top of the page changes with it. Material changes are announced on the home page.