Privacy Policy

Notice under Articles 13–14 of Regulation (EU) 2016/679 (GDPR). Last updated: July 7, 2026.

1. Data controller

Damiano Taverni — Pisa, Italia
VAT no.: 02504100500
Email: dmn.taverni@gmail.com · Certified email (PEC): damiano.taverni@timpec.it

2. What data I process and why

a) Contact form

By filling in the form on the Contact page you provide: name, email address, service of interest and the content of your message. I use this data exclusively to reply to your request and prepare a quote if applicable.

• Legal basis: Art. 6(1)(b) GDPR — pre-contractual measures taken at the request of the data subject.
• Retention: as long as needed to handle the request and in any case no longer than 24 months from the last contact, unless a contract is entered into (in which case statutory terms apply).
• Provision: optional, but necessary to receive a reply.

b) Diagnostic tool reports

The tools in the Tools section (NIS2 check, GDPR check, cyber security check) work without collecting any data: your answers stay in your browser and the result is shown immediately. Only if you request the full report by email do you provide: name, email address and your test answers, which I use exclusively to send you the requested report and, if you contact me afterwards, to handle your request.

• Legal basis: Art. 6(1)(b) GDPR — pre-contractual measures taken at the request of the data subject (sending the report you requested).
• Retention: same terms as the contact form (no longer than 24 months from the last contact).
• Provision: optional: the test result is always visible without providing an email address.
• No automatic newsletter sign-up: the email address is used only to deliver the report.

c) Direct contact (email, PEC, WhatsApp)

If you write to me directly, I process the data you choose to share with the same purposes and legal bases as above. WhatsApp is a Meta Platforms service: using that channel is also governed by its own privacy notice.

d) Traffic statistics

This site uses Cloudflare Web Analytics, a measurement tool that does not use cookies, does not track users across sites and does not collect personal identifiers. Data is aggregated and anonymous.

e) Technical logs

The site is served through Cloudflare's infrastructure, which may process technical data (e.g. IP address) for security and service delivery purposes (Art. 6(1)(f) GDPR — legitimate interest).

3. Recipients

• Cloudflare, Inc. — hosting, CDN, security and analytics (DPA available; possible non-EU transfers with adequate safeguards).
• Resend — delivery of emails generated by the contact form and the diagnostic tools.
• Google (Gmail) — the controller's mailbox where requests are received.

Data is never sold or shared with third parties for marketing purposes.

4. Non-EU transfers

Some providers are based in the United States. Transfers rely on adequacy decisions (EU-U.S. Data Privacy Framework) or standard contractual clauses (SCCs) under Articles 45–46 GDPR.

5. Your rights

Under Articles 15–22 GDPR you may at any time request access, rectification, erasure, restriction, objection and data portability by writing to dmn.taverni@gmail.com. You also have the right to lodge a complaint with the Italian supervisory authority (Garante per la protezione dei dati personali).

6. Automated decision-making

No automated decision-making producing legal effects, and no profiling, takes place. The diagnostic tools compute their result automatically from your answers, but it is purely informational and indicative.

7. Changes

This notice may be updated: the date at the top indicates the latest revision. Substantial changes will be highlighted on this page.