Privacy Policy

This notice explains how personal data of visitors to this website is handled, under Article 13 of Regulation (EU) 2016/679 (GDPR) and Italian Legislative Decree 196/2003 as amended by Legislative Decree 101/2018.

Data controller

Tommaso Cherubini

VAT number: 02026280434

Address: Contrada Botonto 7, 62100 Macerata, Italy

Email: cherubini.tommaso@gmail.com

Write to that address with any question about your personal data.

No Data Protection Officer has been appointed: this processing does not fall within the cases where Article 37 GDPR requires one.

What data is processed

Browsing data

The systems and software that run this site acquire, in the course of normal operation, certain data whose transmission is implicit in the use of internet communication protocols. This information is not collected in order to be linked to identified users, but by its nature could make users identifiable through processing and association with data held by third parties.

It includes IP addresses, request times, the method used to submit the request to the server, the size of the file received in response, the numeric status code of the response, and other parameters relating to the visitor's operating system and computing environment.

This data is recorded in server logs by the hosting provider and is used solely to derive anonymous statistics about use of the site and to check that it is working correctly and securely.

Data you send voluntarily

Sending a message to the contact addresses published on this site, or calling the published number, means acquiring the sender's contact details, which are needed in order to reply, along with any personal data contained in the message itself.

This site has no contact form: no data is collected through the site itself.

Purposes and legal bases

• Browsing data — site security, fault diagnosis and correct technical operation. Legal basis: the controller's legitimate interest in keeping the service secure and available (Art. 6(1)(f) GDPR).
• Data you send voluntarily — replying to enquiries and, where the enquiry involves one, taking pre-contractual steps. Legal basis: pre-contractual measures taken at the request of the data subject (Art. 6(1)(b) GDPR), or legitimate interest in replying to those who make contact (Art. 6(1)(f) GDPR).

Who receives the data

Hosting provider

The site is hosted by Aruba S.p.A., via San Clemente 53, 24036 Ponte San Pietro (BG), Italy, acting as data processor under Article 28 GDPR. The servers used are located in Italy, and therefore within the European Economic Area.

Third-party video players

Project videos are hosted on this site and contact no outside service. Some pages may also contain videos hosted on YouTube. These videos do not load automatically. A static preview with a button is shown instead: no data reaches Google until you press that button.

If you choose to load a video, from the moment you click the player is requested directly from the provider's servers, which receive your IP address and set their own cookies. From that point the provider processes your data as an independent controller, under its own terms:

• YouTube / Google — privacy policy

The provider is based in the United States and may transfer data outside the European Union. Such transfers rely on the EU-US Data Privacy Framework, to which the company is certified, and in the alternative on the standard contractual clauses adopted by the European Commission.

If you never load a video, no data reaches this provider.

What this site does not do

• It uses no analytics or traffic measurement tools.
• It carries out no profiling and no automated decision-making.
• It sends no marketing communications and runs no newsletter.
• It does not sell, transfer or share personal data for advertising.
• It sets no profiling cookies, first- or third-party, before an explicit action by you.

Retention periods

• Server logs: kept by the hosting provider for as long as technically necessary for security and diagnostics, normally no longer than 12 months, unless a legal obligation or the investigation of an offence requires otherwise.
• Emails and messages received: kept for as long as needed to handle the enquiry and, where a professional relationship follows, for the duration of that relationship and the 10 years afterwards required by Italian tax and civil law.
• Preferences stored in your browser: these stay on your device until you clear them. See the Cookie Policy.

Your rights

You may exercise the rights set out in Articles 15 to 22 GDPR at any time:

• Access (Art. 15) — find out what data about you is processed and obtain a copy.
• Rectification (Art. 16) — correct inaccurate data or complete incomplete data.
• Erasure (Art. 17) — have data deleted, in the cases provided for.
• Restriction (Art. 18) — ask for processing to be suspended pending checks.
• Portability (Art. 20) — receive your data in a structured, commonly used format.
• Objection (Art. 21) — object to processing based on legitimate interest.
• Not to be subject to automated decision-making (Art. 22) — not applicable here, as none takes place.

To exercise any of these rights, write to cherubini.tommaso@gmail.com. You will receive a reply without undue delay and in any case within one month.

If you believe your data is being handled unlawfully, you have the right to lodge a complaint with the Italian supervisory authority, the Garante per la protezione dei dati personali (Piazza Venezia 11, 00187 Rome — www.garanteprivacy.it), or to bring the matter before a court.

Changes

This notice may be updated. The version published on this page is the one in force.

Last updated: 11/09/2026