Privacy Policy

Last updated: June 22, 2026 — version 4.0

Data Controller:

Andrea Piani
Email: andreapiani.dev@gmail.com
Phone: +39 351 624 8936

This Privacy Policy describes how the website www.andreapiani.com (hereinafter "Website") collects, uses, and protects users' personal data, in compliance with the General Data Protection Regulation (GDPR - EU Regulation 2016/679).

The Website is a purely static site hosted on Vercel. It has no backend, no database, and no server-side application. It does not perform any analytics or tracking, sets no profiling cookies, and runs no chatbot or artificial-intelligence assistant. The amount of personal data processed is therefore minimal, as described below.

1. Types of Data Collected

The Controller collects the following types of personal data:

1.1 Data Provided Voluntarily by the User (contact forms via WhatsApp)

The Website's contact and quote-request forms collect the data you type — typically:

Because the Website has no backend, this information is handled only locally in your browser. When you submit a form, the data is used solely to pre-fill a WhatsApp message; it is transmitted only if you actively send that message from your own WhatsApp app. In that case the recipient is Andrea Piani and the message is delivered through Meta Platforms Ireland Ltd. (WhatsApp), acting as data processor. No form data is received or stored on the Website's servers, which do not exist for this purpose.

1.2 Navigation Data

The Website performs no analytics and no tracking. It does not collect, log, or store visitors' IP addresses, user agents, page-view events, or any behavioural data of its own. No first-party statistics endpoint exists.

The only third party that may receive a technical connection log is the hosting provider, Vercel Inc., which — like any web host — may process the connection IP address and basic request metadata to deliver the pages and ensure security and availability of the service (see §4).

1.3 Cookies and Local Storage

The Website uses:

For more details, see our Cookie Policy.

2. Purpose of Processing and Legal Basis

Purpose Legal Basis (GDPR) Retention Period
Respond to quote/contact requests Performance of pre-contractual measures (Art. 6.1.b GDPR) 12 months from request
Send commercial communications/newsletter Explicit consent (Art. 6.1.a GDPR) Until consent withdrawal
Tax and accounting compliance Legal obligation (Art. 6.1.c GDPR) 10 years (tax obligation)
Hosting and delivery of the static site (technical connection logs at the hosting provider Vercel) Legitimate interest (Art. 6.1.f GDPR) — security and availability of the service According to the hosting provider's retention policy

3. Processing Methods

Personal data is processed using IT and telematic tools, in compliance with GDPR security measures. Processing is carried out:

4. Data Communication and Disclosure

4.1 Data Recipients

Your personal data may be communicated to:

Transfers outside the EU: Some providers (Vercel, Google Fonts/Gmail and, where applicable, Meta/WhatsApp) may process data in the USA. There are no transfers to China or to any other non-EU country. Such transfers occur through:

4.2 No Public Disclosure

Your personal data will never be publicly disclosed or sold to third parties for commercial purposes.

5. Your Rights (Art. 15-22 GDPR)

As a data subject, you have the right to:

📄 Right of Access (Art. 15)

Obtain confirmation of the existence of your personal data and receive a copy.

✏️ Right of Rectification (Art. 16)

Correct inaccurate or incomplete data.

🗑️ Right to Erasure (Art. 17)

Obtain deletion of your data (right to be forgotten), subject to legal obligations.

⏸️ Right to Restriction (Art. 18)

Restrict processing in specific cases provided by GDPR.

📦 Right to Data Portability (Art. 20)

Receive your data in a structured, commonly used, machine-readable format.

🚫 Right to Object (Art. 21)

Object to processing based on legitimate interest or for marketing purposes.

🔄 Withdrawal of Consent (Art. 7.3)

Withdraw consent at any time (without prejudice to the lawfulness of processing based on consent before its withdrawal).

⚖️ Right to Lodge a Complaint (Art. 77)

Lodge a complaint with the Data Protection Authority.

How to Exercise Your Rights:

You can send a request via email to: andreapiani.dev@gmail.com

We will respond within 30 days of receipt of the request, as provided by Art. 12.3 GDPR.

6. Data Security

The Controller adopts adequate technical and organizational security measures to protect personal data from unauthorized access, loss, destruction, or disclosure, including:

7. Cookies and Similar Technologies

The Website uses only the necessary technical cookie cookie_consent. It sets no analytical or profiling cookies. For detailed information on:

See our Cookie Policy.

8. Minors

The Website's services are not directed at minors under 16 years of age. We do not knowingly collect personal data from minors. If you believe a minor has provided personal data, contact us for immediate deletion.

9. Changes to the Privacy Policy

This Privacy Policy may be updated periodically for regulatory compliance or service changes. Changes will be published on this page with an update of the date at the top. We invite you to regularly consult this page.

10. Contact and Complaints

For any questions about the Privacy Policy or to exercise your rights:

Andrea Piani
Email: andreapiani.dev@gmail.com
Phone: +39 351 624 8936
Address: Piazza della Repubblica, 19 20124 Milano (MI), Italy

Supervisory Authority (Italian Data Protection Authority - Garante Privacy):

Garante per la Protezione dei Dati Personali
Piazza Venezia 11, 00187 Rome, Italy
Website: www.garanteprivacy.it
Email: garante@gpdp.it

← Back to Homepage

© 2026 Andrea Piani · NIE 02915190306-Z · El Paso, Santa Cruz de Tenerife · Islas Canarias 🌴