Privacy Policy

This notice explains how the personal data of visitors towww.micheleditoro.art (the «Site») is processed, under Regulation (EU) 2016/679 («GDPR») and Italian Legislative Decree 196/2003 as amended by Decree 101/2018.

1. Data controller

The data controller is Michele Di Toro. Requests concerning personal data can be addressed to the contact shown at the bottom of this page.

2. The Site collects no data through forms

The Site is static and has no application server and no database. The form in the «Contact» section does not send data to the Site: on submission your browser assembles a message with the details you entered (name, phone, email, type of enquirer, message) and opensWhatsApp, where you are the one who actually sends it. Until then the data stays on your device.

Data sent this way is processed by the controller in order to answer your enquiry and manage any pre-contractual or contractual relationship (Art. 6(1)(b) GDPR), and is retained in the WhatsApp conversation for as long as that purpose requires. The messaging service is provided by WhatsApp Ireland Ltd. (Meta group) under its own terms and privacy notice. If you would rather not use WhatsApp, you can reach the contact by phone.

3. Browsing data

The Site is hosted on Vercel Inc. infrastructure, which for technical and security reasons records in its server logs the data your browser transmits: IP address, date and time of the request, requested URL, response code, user agent and referrer. Legal basis: the controller's legitimate interest in the security and correct operation of the Site (Art. 6(1)(f) GDPR). This data is not used to identify visitors, is not combined with other information, and is retained by Vercel for the period set out in its service policies.

The Site uses no statistics, analytics or audience measurement tools.

4. Third-party content

Some resources are loaded from external servers; in that case your device's IP address is necessarily disclosed to the resource provider:

• Video thumbnails (i.ytimg.com — Google Ireland Ltd.): the cover images in the Video section are requested when the page loads.
• YouTube player (youtube-nocookie.com — Google Ireland Ltd.): loadedonly after you press «play» on a video, in privacy-enhanced mode.
• External links to Spotify, YouTube, YouTube Music, Instagram and WhatsApp: these open only if you choose them and are governed by the respective providers' notices.

For details on cookies and similar technologies see theCookie Policy.

5. Transfers outside the EU

Vercel Inc., Google LLC and Meta Platforms Inc. are established in the United States. Those transfers rely on the safeguards of Chapter V GDPR: the «EU–US Data Privacy Framework» adequacy decision, where applicable, and/or standard contractual clauses adopted by the European Commission.

6. Obligation to provide data and automated processing

Providing browsing data is necessary for the Site to work. Providing data in the contact form is optional, but without it your enquiry cannot be answered. No profiling and no automated decision-making under Art. 22 GDPR take place.

7. Your rights

You may at any time exercise your rights of access, rectification, erasure, restriction, portability and objection (Arts. 15–22 GDPR), and withdraw any consent given, by contacting the person shown at the bottom of this page. You also have the right to lodge a complaint with the Italian supervisory authority, Garante per la protezione dei dati personali(garanteprivacy.it), or with the authority of your country of residence.

8. Children

The Site is not directed at children under 14 and does not knowingly collect their personal data.

9. Changes

This notice may be updated; the version in force is always the one published on this page, with the last-updated date shown above.