Skip to content

Privacy

Privacy notice

What I collect on this site, why, and how to exercise your rights. In plain words, without losing the precision the GDPR requires.

Last updated: August 23, 2026.

Data controller

The controller for data collected through this site is Valerio Marzulli, reachable at marzullivalerio@gmail.com.

What data I collect, and why

This site is static on almost every page. Personal data is only collected where you voluntarily fill in a form.

  • Contact form. Name, email address and message, so I can reply. Processing is based on the consent implicit in submitting the form and on the legitimate interest in handling the request.
  • Guestbook. The name and message you choose to publish publicly on the /guestbook page. Here the legal basis is your explicit consent to publication: any visitor to the site will be able to read what you write.
  • Abuse prevention. To limit repeated, automated submissions, the IP address of whoever sends a form is hashed (non-reversible) before being temporarily associated with the submission. I do not store the IP address in clear text. Legal basis: legitimate interest in the security of the service.
  • Read counter. The number of reads of an article is an aggregate, anonymous figure: it isn't linked to anything that could identify you.

I don't use profiling cookies, tracking pixels, or third-party analytics tools. The technical detail is in the cookie policy.

Data retention

I keep messages received through the contact form for as long as needed to handle your request. Guestbook entries stay visible until you ask for their removal. You can request deletion of any data at any time, at the address above.

Where the data is hosted

The site is hosted on Vercel's infrastructure; the database is provided by Neon (Postgres). Both act as processors on behalf of the controller, limited to providing hosting and storage. I don't sell or share your data with third parties for marketing purposes.

Your rights

As a data subject, you have the right to request at any time: access to your data, rectification, erasure, restriction of processing, portability, and to object to processing. To exercise any of these rights, write to me at marzullivalerio@gmail.com. You also have the right to lodge a complaint with the Garante per la protezione dei dati personali, the Italian supervisory authority.

Security

Connections to the site are encrypted (HTTPS/TLS). Access to the database is limited to the site's infrastructure and protected by non-public credentials.

Minors

This site is not directed at anyone under 16 and does not knowingly collect data about them.

Changes to this notice

If I change how I handle data, I update this page and the date at the top. Substantial changes will be flagged visibly on the site.