Privacy Policy
Last updated: August 22, 2026
This notice explains how personal data is processed on gabrieledifazio.com, in accordance with Regulation (EU) 2016/679 (GDPR) and Italian Legislative Decree 196/2003 as amended.
Data controller
Gabriele Di Fazio
Email: info@gabrieledifazio.com
Phone: +39 334 292 3916
VAT no.: 03282200595
No Data Protection Officer has been appointed, as the conditions of Article 37 GDPR do not apply.
What data is processed, and why
Contact form
When you write through the form you provide your name, email address, subject and message. They are used solely to reply to you and, if a working relationship follows, to manage it.
- Legal basis: Art. 6(1)(b) GDPR — steps taken at your request prior to entering into a contract.
- Retention: 24 months from the last exchange, then deletion; longer if a contract is signed, for the statutory accounting and limitation periods.
- How it works: the message is sent by email to info@gabrieledifazio.com through the hosting provider's mail server. It is not stored in a database on the site.
Newsletter
Subscription requires your email address and, optionally, your name. Subscription uses double opt-in: the address is only activated after you click the confirmation link, and the date of confirmation is recorded as proof of consent.
- Legal basis: Art. 6(1)(a) GDPR — consent, freely given and revocable at any time.
- Retention: until you unsubscribe, plus 12 months for the record of consent.
- How to withdraw: the unsubscribe link at the bottom of every email, or an email to info@gabrieledifazio.com.
Audience measurement
The site counts page views, article reads, clicks and shares using a first-party system with no cookies and no advertising profiling. Your IP address is never stored: it is combined with the browser user agent, a secret key and the current date and reduced to an irreversible hash, used only to count daily unique visitors.
- Legal basis: Art. 6(1)(f) GDPR — legitimate interest in understanding, in aggregate, which content works.
- Retention: 26 months, then deletion of raw events.
If — and only if — you consent to statistics cookies, Google Analytics 4 is also loaded. See the Cookie Policy for details.
Cookie consent record
Your choice in the cookie panel is recorded together with date, categories accepted and policy version, in order to demonstrate compliance as required by Art. 7(1) GDPR. Retention: 12 months.
Who the data is shared with
| Recipient | Role | Where |
|---|---|---|
| Aruba S.p.A. | Hosting and email provider (processor) | Italy / EU |
| Google Ireland Ltd | Google Analytics 4, only with consent (processor) | EU, with transfers to the USA under the EU–US Data Privacy Framework |
Data is never sold, rented or shared for third-party marketing purposes.
Your rights
You may at any time request access, rectification, erasure, restriction, portability, and object to processing based on legitimate interest. Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.
Write to info@gabrieledifazio.com. You also have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali).
Security
The site is served over HTTPS. Access to the back office is protected by a password stored as a hash, and administrative pages are excluded from indexing. Data files are stored outside the publicly accessible area of the web server.
Changes
Any changes to this notice are published on this page with an updated date. Substantial changes to the use of cookies trigger a fresh consent request.