Privacy and cookie policy

Last updated: 26 October 2026

This page explains which personal data the website damianotarda.it collects, why, for how long and what your rights are, under the EU General Data Protection Regulation 2016/679 (GDPR).

Data controller

Damiano Tarda, Catania (Italy). For any privacy request: [email protected].

Which data and why

  • Browsing the site. When you visit the site, the hosting provider (Cloudflare) records technical data such as IP address, browser type, requested pages, date and time. This is needed to run the site and protect it from abuse. Legal basis: legitimate interest (Art. 6(1)(f) GDPR).
  • Contact form and email. If you write to me, I process your name, email address and message only to reply to you. The form uses the Web3Forms service, which forwards the message to my mailbox. Legal basis: your request (Art. 6(1)(b)) and legitimate interest in replying (Art. 6(1)(f)). I keep messages for as long as needed to handle the request and any relationship that follows.
  • Buying a print. I process your name, email, shipping and billing addresses, phone number if you provide it and the order details, to handle the order, the shipping and legal obligations. Payment takes place on Stripe's secure pages (also when you choose PayPal): I never receive or store your card details. Legal basis: contract (Art. 6(1)(b)) and legal obligations (Art. 6(1)(c)). I keep order data for the period required by law for tax and accounting purposes, up to 10 years.
  • Statistics, only with your consent. If you accept statistics cookies in the banner, the site uses Google Analytics (Google Ireland Limited) to learn, in aggregate form, how many people visit it and which pages they view, with a shortened IP address. Legal basis: consent (Art. 6(1)(a)), which you can withdraw at any time. If you decline, Google Analytics is not loaded.
  • Cookie-free statistics. The site may also use Cloudflare Web Analytics, which counts visits without cookies and without identifying visitors.

Cookies and similar technologies

  • Technical: the site remembers in your browser the choice you made on the cookie banner (local storage «consenso-cookie»), until you delete it. No consent is needed.
  • Statistics: Google Analytics cookies (_ga and _ga_*), lasting up to 2 years, only after your consent.
  • Restricted area: the technical cookie «dt_sessione» concerns only the site administrator, for access to the management panel.
  • The site uses no profiling or advertising cookies. Fonts are hosted on the site itself and there are no social buttons that track you.

You can change your cookie choice at any time: Cookie preferences. You can also delete cookies from your browser settings.

Who receives the data

Data is processed by providers working on my behalf (processors) or as independent controllers for their own services: Cloudflare, Inc. (hosting and site security), Web3Forms (forwarding of form messages), Aruba S.p.A. (mailbox), Google Ireland Limited (Google Analytics, only with consent), Stripe Payments Europe Ltd. and PayPal (Europe) S.à r.l. et Cie, S.C.A. (payments), as well as the courier chosen for shipping. I do not sell or pass on your data to anyone.

Transfers outside the European Union

Some providers (for example Cloudflare and Google) may process data in the United States. In these cases the transfer is protected by the EU-U.S. Data Privacy Framework or by the standard contractual clauses approved by the European Commission.

Your rights

You can ask at any time to access your data, correct it, delete it, restrict its processing, receive it in a readable format (portability), object to processing based on legitimate interest and withdraw any consent given, by writing to [email protected]. You also have the right to lodge a complaint with the Italian Data Protection Authority, the Garante per la protezione dei dati personali (www.garanteprivacy.it), or with the authority of your country.

Changes

If this policy changes, the date at the top is updated.