This privacy policy describes how personal data of users browsing adinpisica.it (the "Site") is processed, and in particular the data of those who use the contact form available on the Site. Processing is carried out in compliance with Regulation (EU) 2016/679 ("GDPR") and, for the Italian context, with Legislative Decree 196/2003 ("Privacy Code"), as amended by Legislative Decree 101/2018. Please read it carefully before sending us your data.
01 Data controller
The controller of your personal data is Adin Pisica (first name: Adin; last name: Pisica), who can be reached at the following contact details:
- Email: [email protected]
- Website: adinpisica.it
No Data Protection Officer (DPO) has been appointed, as this is not mandatory in this context.
02 Data we collect
We only process the data strictly necessary to respond to your requests and to protect the Site from abuse. Specifically:
a) Data you provide through the contact form
When you fill in the multi-step contact form on the Site, we collect the data you enter voluntarily:
- Your name (or the name you choose to provide);
- A contact detail: an email address or a phone number, at your choice;
- The project type you select (e.g. e-commerce, website, software/app, other);
- The content of your message describing your request;
- Your selected language (used to handle the reply).
Please do not include special category data in your message (e.g. data concerning health, political opinions or religious beliefs) or any information not relevant to your request.
b) Data collected automatically for security purposes
To protect the form from spam and misuse, the system automatically processes:
- Your IP address;
- Some technical information about the request (e.g. the Origin/Referer headers and the submission timestamp), used for anti-bot and anti-abuse checks.
The IP address is used in two ways: (i) in pseudonymised form (a hash) and stored temporarily to limit the number of submissions and prevent abuse (rate limiting); (ii) in plain form it is included in the notification we receive for each request, so that we can identify and handle any misuse of the form.
The Site does not use profiling cookies, third-party analytics/statistics tools or marketing tools.
03 Purposes & legal bases
We process your personal data for the following purposes, each based on a specific legal basis under Article 6 of the GDPR:
| Purpose | Data processed | Legal basis |
|---|---|---|
| Responding to your contact request and handling the preliminary contacts of a possible collaboration | Name, contact detail, project type, message, language | Performance of pre-contractual measures taken at the data subject's request (Art. 6(1)(b)); alternatively, your consent expressed by voluntarily submitting the form (Art. 6(1)(a)) |
| Ensuring the security of the Site: preventing spam, bots and misuse of the form (anti-abuse, rate limiting) | IP address (plain and pseudonymised), technical request data | The controller's legitimate interest in protecting its systems and preventing abuse (Art. 6(1)(f)) |
| Remembering your preferred language for browsing | Language preference stored in the browser | Legitimate interest in providing a functioning service (Art. 6(1)(f)); strictly functional technology |
| Complying with legal obligations and establishing, exercising or defending a legal claim | The data indicated above, where necessary | Legal obligation (Art. 6(1)(c)) and legitimate interest (Art. 6(1)(f)) |
Providing your data through the form is optional, but failing to provide it makes it impossible for us to receive and handle your request.
04 Recipients & transfers outside the EU
Your data is neither disclosed nor sold to third parties for marketing purposes. It may be processed by the following parties, acting as processors or service providers:
- The hosting provider of the Site, which hosts the pages and technically processes the requests sent to the server;
- Discord — requests submitted through the contact form are delivered, via a webhook, to a private channel managed on Discord. This means that the form content (name, contact detail, project type, message) and your IP address are transmitted to Discord's servers.
Transfer outside the EU. Discord is operated by Discord Inc., based in the United States. Sending requests to the Discord channel therefore involves a transfer of data to a third country. The transfer takes place on the basis of the safeguards provided for in Chapter V of the GDPR (e.g. Standard Contractual Clauses adopted by the provider and/or participation in the EU–U.S. Data Privacy Framework). For more information you can read Discord's privacy policy at discord.com/privacy.
Data may also be disclosed to public or judicial authorities where required by law.
05 Retention period
- Contact form data (name, contact detail, message): retained for as long as necessary to handle your request and the related correspondence and, if a relationship begins, for its duration. Where there is no follow-up, messages are deleted periodically and in any case within 24 months of the last contact.
- Pseudonymised IP address used for rate limiting: retained for a maximum of 24 hours, after which it is automatically deleted.
- Language preference stored in the browser: retained until you delete it yourself (see the Cookies & local storage section).
The periods indicated may vary where data needs to be kept longer to comply with legal obligations or to establish, exercise or defend a legal claim.
06 Cookies & local storage
The Site does not use profiling cookies or third-party cookies for tracking or advertising, which is why no cookie consent banner is displayed.
The Site only uses a local storage technology (localStorage) in your
browser to store the language you have chosen (the ap-lang
entry). This is a strictly necessary function to make the Site work correctly
according to your preferences; it does not require consent and does not track
your browsing.
You can delete this data at any time by clearing website data from your browser settings.
07 Your rights
As a data subject, in relation to the processing of your personal data you have the right, under Articles 15–22 of the GDPR, to:
Access
Obtain confirmation and a copy of the data concerning you (Art. 15).
Rectification
Correct inaccurate data or complete incomplete data (Art. 16).
Erasure
Obtain the erasure of your data (the "right to be forgotten", Art. 17).
Restriction
Request restriction of processing in the cases provided for (Art. 18).
Portability
Receive your data in a structured format and transmit it to another controller (Art. 20).
Objection
Object to processing based on legitimate interest (Art. 21).
Withdraw consent
Withdraw consent at any time, without affecting the lawfulness of prior processing (Art. 7).
Complaint
Lodge a complaint with the supervisory authority (see the next section).
To exercise your rights you can write at any time to [email protected]. We will reply without undue delay and in any case within the time limits set by law (usually one month).
08 Lodging a complaint with the supervisory authority
If you believe that the processing of your data infringes the applicable law, you have the right to lodge a complaint with the competent supervisory authority. In Italy this is the Garante per la protezione dei dati personali (Italian Data Protection Authority):
- Website: www.garanteprivacy.it
- Address: Piazza Venezia 11, 00187 Rome (RM), Italy
- Email: [email protected] — PEC: [email protected]
You may also lodge a complaint with the supervisory authority of the EU Member State where you habitually reside or work.
09 Data security
We adopt appropriate technical and organisational measures to protect data against unauthorised access, loss or misuse. In particular, the contact form provides: transmission of data over an encrypted connection (HTTPS), anti-bot and anti-spam checks, submission limits (rate limiting), validation and sanitisation of the data entered, and pseudonymisation of the IP address in the anti-abuse logs.
10 Minors
The Site and its services are not intended for children under the age of 14. We do not knowingly collect data from minors. If you believe that a minor has provided us with their data without appropriate authorisation, please contact us and we will delete it.
11 Changes to this policy
We reserve the right to amend or update this policy at any time, for example following changes in the law or in the services offered. The updated version will always be published on this page, showing the last-updated date indicated at the top. We encourage you to review it periodically.
Note. This document was prepared on the basis of the processing activities actually identified on the Site and is provided for information purposes; it does not constitute legal advice.