Privacy Policy

Introduction

This privacy policy describes how personal data of users visiting the paolo.design website are processed, in accordance with Art. 13 of Regulation (EU) 2016/679 (GDPR).

The site is a personal portfolio: it does not offer commercial services, it does not require registration and it does not use contact forms.

Data controller

The Data Controller is Paolo Frassato (private individual), based in Italy.

For any request relating to personal data you can write to: paolo.frassato@gmail.com

Types of data collected

The site collects only browsing data via Google Analytics 4, and only after your explicit consent. No data is collected if you refuse consent through the cookie banner.

The data collected include: • IP address (anonymized/truncated by Google Analytics) • Browser type, operating system and device • Pages visited, time on page and navigation path • Interaction events (button clicks, card swipes in the Match section) • Referrer source

The site does NOT collect name, surname, email or other directly identifying data. There are no contact forms, registration or login.

Purposes of processing

The collected data are used exclusively for aggregated statistical purposes, in order to understand how users interact with the site and improve the experience. They are not used for individual profiling, direct marketing or automated decision making.

Legal basis

The legal basis for processing is the free and informed consent given through the cookie banner on first visit (Art. 6(1)(a) GDPR).

Consent can be withdrawn at any time by clicking "Manage cookies" in the footer.

Data recipients

The data collected may be processed by the following third parties, as data processors or independent controllers: • Google LLC (Google Analytics 4). United States • Render Services Inc. (hosting). United States

These providers process the data only to ensure the operation of the service, in accordance with their own privacy policies.

Transfer of data outside the EU

Some of the providers listed above are based in the United States. The transfer of data outside the EU takes place on the basis of the Standard Contractual Clauses approved by the European Commission (Decision 2021/914) and, where applicable, the EU-US Data Privacy Framework.

Data retention

Data collected via Google Analytics are kept for a maximum of 14 months, after which they are automatically deleted. Your cookie consent (granted/denied) is stored in your browser until you withdraw it or clear it manually.

Your rights

As a data subject you have the right, at any time, to: • Access your personal data (Art. 15 GDPR) • Request their correction (Art. 16 GDPR) • Request their deletion (Art. 17 GDPR) • Restrict processing (Art. 18 GDPR) • Object to processing (Art. 21 GDPR) • Receive your data in a structured format (Art. 20 GDPR) • Withdraw consent at any time • Lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it)

You can exercise these rights by writing to paolo.frassato@gmail.com.

Contact

For any question or request regarding this notice or the processing of your personal data, you can write to: paolo.frassato@gmail.com

Changes to this notice

This notice may be updated over time. The last update date is shown at the top of the page. Please review it periodically.