Privacy Policy

Data controller

The data controller is Davide Cugliari.

For privacy-related requests or to exercise your data protection rights, you can write to cugliari770@gmail.com.

Data processed

The site processes technical browsing data required to render the pages, secure the service, and deliver the application correctly.

CookieYes stores and updates the user’s privacy choice so the selected consent preferences can be remembered and enforced.

If the user consents to the analytics category, the site enables Firebase Analytics / Google Analytics to collect statistical usage data about the portfolio.

If the user sends a request through the contact form, the site processes the information voluntarily entered in the form and a small set of technical details used to contextualize the request.

If the user decides to use the direct email link instead, any message content is handled within the user’s email client and related providers.

• technical connection and HTTP request data
• consent preferences managed through CookieYes
• analytics data collected through Firebase / Google Analytics only after consent
• name, email, optional phone number, project type, estimated budget, timeline, and message submitted through the form
• source page, language, submission date and time, and browser user agent when available
• optional data included in emails voluntarily sent by the user

Purposes and legal basis

Technical data is processed to run the site correctly, keep the service secure, and ensure content delivery.

Consent preferences are processed to respect the user’s privacy choice regarding cookies and tracking.

Data submitted through the contact form is processed to receive the request, assess it, and contact the user with an initial reply or follow-up proposal.

When enabled, analytics are used to understand which sections are viewed, which content generates interest, and how to improve UX, SEO, site structure, and future marketing activity.

• technical operation and security: legitimate interest and technical necessity
• cookie preference management: compliance with the choice expressed by the user
• contact request handling: pre-contractual steps or consent expressed through form submission
• analytics and measurement: user consent

Recipients and involved providers

The site is hosted on Firebase Hosting / Google Cloud.

The cookie banner and consent preferences are managed through CookieYes.

When consent is granted, analytics are handled through Firebase Analytics / Google Analytics.

Contact form delivery is handled through EmailJS, which forwards the message to the connected email service.

EmailJS privacy policy is available at https://www.emailjs.com/legal/privacy-policy/.

Replies to enquiries are managed through Gmail / Google Workspace or other email tools used by the data controller.

The site also loads external typography resources through Google Fonts.

Retention

Consent preferences remain stored according to the CookieYes configuration active on the domain and can be updated at any time from the footer link.

When analytics are enabled, data retention follows the configuration set within the connected Google services.

Requests submitted through the form or by email are retained for as long as needed to handle the request, reply, and document any professional relationship that may follow.

Extra-EEA transfers and user rights

The use of cloud infrastructure, email platforms, EmailJS, and analytics services may involve transfers outside the European Economic Area according to the safeguards declared by the relevant providers.

Users may request access, rectification, erasure, restriction, objection, and, where applicable, portability of their data, and may withdraw analytics consent at any time.

Users also retain the right to lodge a complaint with the competent supervisory authority.