Privacy and cookies.

Data controller and contact details

The data controller is D'Affuso Rocco, VAT no. 13507450016, based at Via Taccagno 9, 10060 Prarostino (TO). For information or to exercise your rights, you can write to roccodaffuso@gmail.com.

Browsing and security

Browsing the site involves the processing of technical data, including IP address, date and time, the resource requested, browser information and the outcome of the request. These data are necessary to make the pages available and may be logged by the infrastructure for security and diagnostic purposes. The purpose is the operation and protection of the site, on the basis of the controller’s legitimate interest in providing a secure service (Art. 6(1)(f) GDPR).

Hosting is provided by Hostinger. The plan specifies servers in Frankfurt and backups in France; the service also uses a content delivery network (CDN). The site contains no forms, user accounts or AI tools that receive data from visitors.

Cookies and optional statistics

Fonts, images and animations are loaded from the site’s own domain. No third-party social networks, videos or maps are embedded, and no advertising tools are used.

Google Analytics 4 is loaded only after you give your consent, to understand page use, clicks on the email and telephone contact links and use of the interactive demo. Consent is optional (Art. 6(1)(a) GDPR): refusing it does not restrict access to the site. Before you make a choice, or after you refuse, the site does not load the Google tag and does not send any measurement requests, not even cookieless ones.

Analytics processes pseudonymous browser identifiers, pages visited, interactions, times, approximate geographic area and technical information about the device and browsing. Connecting to the service involves the disclosure of the IP address to Google. The site’s code sends the page path without query parameters or fragments and, as the referrer, only the domain. For clicks on contact details, the type of contact channel is recorded, without sending the email address, the telephone number or the content of communications. A click does not prove that an email was sent or a call was made. In the interactive demo, the start and the approval of the simulation are recorded, with the type of sample document and the number of fields changed; the values typed into the fields are not sent.

Google Signals and ad personalisation are not activated by the site. The statistics remain pseudonymous data: they are not presented as anonymous.

• rd_cookie_consent — necessary: stores acceptance or refusal, the version of the notice and the dates of the choice and of its expiry, for six months. It is not sent to Google.
• _ga and _ga_* — optional statistics: identify browsers and sessions for Google Analytics. The tag is configured with a duration of 60 days and without automatic renewal of the expiry at each visit. They are removed by the site when you withdraw your consent.

You can choose “Reject”, “Accept” or select the statistics category under “Preferences”. Closing the banner on your first visit is equivalent to refusing. Merely scrolling or continuing to browse does not constitute consent. To change or withdraw your choice, use “Cookie settings” at the bottom of every page: turn off statistics and save. Withdrawal stops any subsequent measurement and does not affect the lawfulness of processing carried out before it; it does not automatically delete data already collected by Google.

Any strictly technical cookies set by the infrastructure serve security purposes or the provision of the service. Links to LinkedIn and rodabuilds.com open separate sites with their own privacy notices.

Voluntary contact

If you send an email or make a phone call, the contact details and information you choose to provide are processed in order to reply and handle the request. Providing them is optional, but without contact details and the necessary information it may not be possible to reply. Do not send special categories of personal data or confidential documents for a first conversation.

For requests relating to a possible engagement, the legal basis is the taking of pre-contractual steps at the request of the data subject (Art. 6(1)(b) GDPR). For other enquiries, it is the legitimate interest in handling correspondence. Contact details are not used for automatic subscription to newsletters or advertising campaigns. Email is managed through Gmail.

Recipients and transfers

Data may be processed by the providers required for hosting, content delivery, security, email and, with your consent, statistics, in their respective roles, and disclosed to authorities where required by law. They are not published or sold by the controller.

The location of the server in Europe does not rule out processing outside the European Economic Area by the providers. Hostinger’s Data Processing Addendum describes the conditions of processing, the sub-processors in Appendix 3 and, where provided for, the standard contractual clauses for transfers. For Gmail, Google’s privacy information is available. Google Analytics is a Google service, which processes data in accordance with its data processing terms, including the mechanisms applicable to international transfers. Its use may involve processing outside the European Economic Area. Google’s information on data collected through partner sites is also available. You may ask the controller for clarification on the recipients and the applicable safeguards.

Retention

The Google Analytics property is set to 2 months for the retention of user-level and event-level data. This setting does not apply to standard aggregated reports. The duration of cookies on the device, indicated above, is distinct from the retention of data within the service.

Data from contact requests are processed for as long as necessary to handle the request and any follow-up; any further contractual needs, legal obligations or the protection of rights require retention proportionate to the relevant purpose.

The retention of infrastructure logs is managed by the provider. As at the date of this update, Hostinger has not yet informed the controller of the specific retention period, nor of the detailed deletion criteria, for hosting and CDN logs: a written request for clarification has been sent. This notice will be supplemented with the reply. The time filters available in the statistics panel are not presented as deletion periods.

Your rights

In the cases provided for by the GDPR, you may request access to your data, its rectification, erasure, restriction of processing and portability, and object to processing based on legitimate interest. Write to roccodaffuso@gmail.com. You may also lodge a complaint with the Garante per la protezione dei dati personali (Italian Data Protection Authority).

The site does not carry out profiling or automated decision-making with legal or similarly significant effects on individuals.