Privacy Policy

Data Controller

Stefano D'Ambrosio — stedamb@gmail.com. This is a personal portfolio site. I act as the data controller for any personal data collected through this website.

Information You Submit Voluntarily

When you use the contact form, I collect your name, email address, subject, and message. This data is sent to my email inbox via Resend, a third-party email delivery service. The data is not stored in any database on this site.

Resend acts as a data processor. Your data is transmitted securely over HTTPS and retained in my email inbox until I delete it or you request deletion. I use this information solely to respond to your inquiry and never share it with other parties.

Information Collected Automatically

This site uses Google Tag Manager to deploy Google Analytics 4. These scripts only load after you explicitly accept cookies via the consent banner. When active, Google Analytics collects anonymized usage data such as:

• Pages visited and interaction events
• Browser type, device type, and operating system
• Approximate geographic location (city-level, anonymized)
• Session duration and referral source

IP addresses are anonymized and not linked to any personally identifiable information. No personal data is collected through analytics without your consent.

Legal Basis for Processing

• Contact form data — processed based on your consent (article 6(1)(a) GDPR) and the Legitimate Interest to respond to your inquiry.
• Analytics data — processed based on your consent (article 6(1)(a) GDPR), given through the cookie consent banner.

Data Retention

• Contact form submissions — retained in my email inbox until you request deletion. You can ask me to delete your data at any time.
• Analytics data — retained for 26 months per Google Analytics' default retention policy, then automatically deleted.
• Consent preference cookie — stored for 12 months.

Third-Party Processors

• Resend (resend.com) — email delivery for contact form submissions. Privacy Policy.
• Google (Tag Manager & Analytics 4) — analytics tracking, only activated after consent. Privacy Policy.
• Vercel (vercel.com) — hosting provider. Standard server logs may include IP addresses. Privacy Policy.

Your Rights (GDPR)

You have the right to:

• Request access to your personal data
• Request correction or deletion of your data
• Restrict or object to processing
• Withdraw consent at any time (without affecting the lawfulness of processing before withdrawal)
• Data portability
• File a complaint with your local data protection authority

Contact

For any requests regarding your personal data, reach out at stedamb@gmail.com .