Privacy Policy

Data controller

The data controller is Mattia Carruggio, self-employed professional, Italian VAT number [INSERT VAT], based at Viale Milano 15, 20857 Camparada (MB), Italy.

For any request regarding your personal data, you can write to privacy@mattiacarruggio.it.

Data collected

The site only collects the data you voluntarily enter in the contact form: name, email address, company (optional) and the content of your message.

No special categories of data are collected, and the site uses no profiling or tracking cookies.

Purpose and legal basis

Your data is processed solely to respond to your enquiry and to manage any professional relationship that may follow.

The legal basis is the performance of pre-contractual measures taken at your request and the possible performance of a contract (Art. 6(1)(b) GDPR), together with your consent to send the message via the form (Art. 6(1)(a)).

Processing and external processors

Data is processed using electronic tools and appropriate security measures. To deliver the service I rely on third-party providers acting as data processors:

• Airtable (Formagrid, Inc., USA) — storage of messages received through the contact form (CRM).
• Resend (Resend, Inc., USA) — sending notification emails about received messages.
• Supabase (Supabase, Inc.) — optional backup copy of messages, if enabled.
• Vercel (Vercel, Inc., USA) — site hosting and aggregate, anonymous traffic statistics (Vercel Web Analytics, cookie-free).

Some of these providers are based in the United States: any transfer of data outside the EU takes place under the Standard Contractual Clauses approved by the European Commission and, where applicable, adherence to the EU-U.S. Data Privacy Framework.

Data retention

Data collected through the form is kept for as long as needed to handle your enquiry and any professional relationship, and in any case no longer than 24 months from the last contact, unless different legal obligations apply.

Your rights

At any time you can exercise the rights under Articles 15 to 22 GDPR: access, rectification, erasure, restriction, portability and objection to processing, as well as withdrawal of consent.

To exercise these rights, write to privacy@mattiacarruggio.it. You also have the right to lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it).