Privacy notice

This site collects little data, and only to reply to those who write. Here you find what it is, where it goes, how long it stays and what you can ask. This is the notice required by articles 13 and 14 of Regulation (EU) 2016/679.

Who processes the data

The data controller is Marco Palombini, Piazzale Sant'Antonio 8, 67100 L'Aquila. For any question about this page or your data, write to marco@convivostudio.it.

What data and why

The contact form. If you write to me through the form, I receive your name, company, role, e-mail address, the text of the message and the language you used on the site. I use them for one thing: reading your request and replying. They go into no list, feed no newsletter and are passed to no one. The server also records the IP address the message comes from, to stop automated submissions, and keeps it in memory only for the minutes that check takes.

Browsing. The company hosting the site records in its technical logs the IP address, browser type, requested page and time. This keeps the service running and protects it from abuse. I do not use these records to identify you and I do not combine them with anything else.

Cookies. The site uses two technical cookies only. The Cookies page explains them.

LinkedIn. If you write to me on LinkedIn, LinkedIn's rules apply: nothing reaches this site.

I do not collect special categories of data, such as health, opinions or beliefs, and I do not ask you to enter them. If you write them in the message, I read them only to reply.

On what basis

For the contact form the basis is your consent: the box you tick before sending (article 6, paragraph 1, letter a of the Regulation). You can withdraw it at any time with an e-mail: from that moment I stop using the data, and the withdrawal does not affect what was done before. For the technical logs and the submission limit, the basis is my legitimate interest in keeping the site secure and working (letter f).

Giving your data is not an obligation. Without it, though, I cannot reply.

Where it goes

Form data passes through two providers, acting on my behalf as data processors:

• Vercel Inc., United States, which hosts the site and runs the form.
• Resend Inc., United States, which delivers the message to my mailbox.

Both may process data outside the European Union. The transfer relies on the safeguards provided by the Regulation: certification under the EU-US Data Privacy Framework or the standard contractual clauses approved by the European Commission. No one else receives your data, unless the law requires it.

For how long

Messages stay in my mailbox for as long as it takes to reply and, if the conversation continues, for as long as it continues. Twenty-four months after the last exchange I delete them. The IP address recorded to limit submissions stays in memory for a few minutes. The hosting provider's technical logs follow its own retention, in the order of days.

What you can ask

At any time you can ask me what data I hold about you, to correct it, to delete it, to restrict its use, to receive it in a machine-readable format, to object to the processing or to withdraw your consent. An e-mail to marco@convivostudio.it is enough: I reply within a month. If you believe the processing breaches the Regulation, you can lodge a complaint with the Italian data protection authority, the Garante, at garanteprivacy.it.

What I do not do

No profiling, no automated decisions, no targeted advertising, no sale or transfer to third parties. The site is not aimed at children under 14 and does not knowingly collect their data.

If something changes

If I change providers or the way I process data, I update this page and the date below.

Last updated: 10 October 2026.