Privacy
This is my personal website. I, Eric A. Zizzi, decide how the personal data described here is used (I am the data controller), and you can reach me at the address on the contact page. The site sets no cookies of its own, shows no ads, builds no profiles, and has no forms, comments or accounts. You do not have to give me any personal data to read it.
Hosting and security
The site is delivered by Cloudflare, Inc., which processes data on my behalf (as my data processor). To deliver the pages and protect the site from abuse, Cloudflare processes the technical data that comes with every web request: your IP address, the page requested, the time, the page you came from, and what your browser sends (for example its type and language). I do not keep logs of these requests. Cloudflare keeps such data only for a limited time, under its own policies. The legal basis is my legitimate interest in running a website that works and is secure (Art. 6(1)(f) GDPR).
If Cloudflare needs to check that a visitor is not an automated attack, it may set a strictly necessary security cookie. It is not used for statistics or tracking.
Visitor statistics
I use Cloudflare Web Analytics to see, in total, how many visits the site receives, which pages are read, which sites link here, roughly which countries and types of device visits come from, and how quickly pages load. When a page loads, a small script from Cloudflare sends these measurements. It stores nothing on your device (no cookies, no local storage), does not use your IP address or browser details to recognise you, and does not follow you across other websites. I see only totals, which do not identify anyone. Cloudflare keeps the detailed measurements for 7 days and after that only a reduced sample; I can see statistics for the last six months. The legal basis is my legitimate interest in knowing, in aggregate, how the site is used (Art. 6(1)(f) GDPR). If you prefer, you can block the script with a content blocker: the site works the same.
If you write to me, your message reaches me through my email provider, Aruba S.p.A. (Italy), which processes it on my behalf. I use your address and message only to reply, I keep them only as long as our correspondence needs, and I do not share them. The legal basis is my legitimate interest in answering you (Art. 6(1)(f) GDPR).
Transfers outside the European Union
Cloudflare is a US company and may process data outside the European Union. These transfers rely on the EU–US Data Privacy Framework, under which Cloudflare is certified, and on the European Commission’s standard contractual clauses. See Cloudflare’s privacy policy.
Links to other websites
Links on this site (to publishers, databases and profiles, for example) lead to websites that have their own privacy policies.
Your rights
You can ask me for access to your personal data, its correction or deletion, the restriction of its processing, or a copy in a portable format, and you can object at any time to processing based on my legitimate interest. Write to me at the address on the contact page. Because the visitor statistics do not identify anyone, I may be unable to link them to you (Art. 11 GDPR). You can also lodge a complaint with the Italian data protection authority, the Garante per la protezione dei dati personali, or with the authority of the country where you live or work. No decisions about you are made by automated means.