Privacy

This policy explains how the personal data of users who visit and interact with the antonionarra.io website (the "Site") is processed, in accordance with Regulation (EU) 2016/679 ("GDPR") and applicable Italian data protection law.

Data Controller

The Data Controller is Antonio Narra, Via Pallanza 17 10153 Torino, Tax code / VAT no. NRRNTN76E06L219O. For any data protection request you can write to antonio@antonionarra.io.

What data we collect

Data you provide voluntarily

• Newsletter subscription: email address, preferred language, date and time of consent.
• Contact form: name, email address, reason for contact and message text.
• Blog comments: name or nickname, email address (not published), comment text and IP address at the time of submission.

Data collected automatically

• Server technical logs: IP address, browser type (user agent), date/time and requested resources, for security and diagnostic purposes.
• Aggregated, anonymous usage statistics, collected via Umami (a self-hosted solution with no cookies and no persistent personal identifiers; the IP address is not stored in clear form).

Purposes and legal bases

Purpose	Data processed	Legal basis
Sending the newsletter	email, language	Consent (Art. 6.1.a GDPR)
Replying to messages sent via the form	name, email, message	Consent / response to the data subject's request (Art. 6.1.a–b)
Publishing and moderating blog comments	name, email, text, IP	Consent (Art. 6.1.a)
Security, abuse and spam prevention (anti-bot, logs)	IP, user agent	Legitimate interest (Art. 6.1.f)
Aggregated usage statistics	anonymous browsing data	Legitimate interest (Art. 6.1.f)

Tools and third parties

• Cloudflare Turnstile — anti-bot protection for the forms. To verify that an interaction does not come from a bot, Cloudflare may process the IP address and some technical device data. Policy: https://www.cloudflare.com/privacypolicy/.
• Umami Analytics — self-hosted statistics, with no cookies and no identifying personal data.
• OVH — provider used for email delivery (newsletter and notifications).
• Hosting provider — hosting of the Site and backend.

Data is not shared with third parties for marketing purposes.

Data retention

• Newsletter: until consent is withdrawn (unsubscribe).
• Contact form messages: 24 months after the request is handled.
• Blog comments: until removed by the user or the Controller.
• Technical logs: 12 months.

Your rights

You may exercise at any time the rights under Art. 15–22 GDPR: access, rectification, erasure, restriction, portability, objection and withdrawal of consent (without affecting the lawfulness of prior processing). Requests can be sent to antonio@antonionarra.io.

You also have the right to lodge a complaint with a supervisory authority (in Italy, the Garante per la protezione dei dati personali — garanteprivacy.it).

Transfers outside the EU

Some providers (e.g. Cloudflare) may process data outside the European Economic Area. In such cases the transfer is based on the Standard Contractual Clauses adopted by the European Commission, which ensure an adequate level of protection.

Minors

The Site is not intended for children under 14 and does not knowingly collect their data.

Cookies

For the use of cookies and local storage technologies, please refer to the Cookie Policy.

Changes

This policy may be updated over time. The date at the top indicates the latest revision.