Privacy notice
Who handles the data
The data controller is Raffaele Moscariello, who runs this site in a personal capacity and without profit. For any question about your data you can write to info@moscariello.me or use the Contact page.
This notice is written under Article 13 of Regulation (EU) 2016/679, the General Data Protection Regulation (GDPR).
What this site does not do
The site uses no cookies, no analytics or advertising tools, and does not track your browsing.
Fonts, images and code all come from the same address as the site. The only exceptions are the Contact and Confirm pages, which talk to the services of the contact form described below. The links to LinkedIn lead to an external site, which has its own privacy notice.
Where the site lives
The site is published with Cloudflare Pages, a Cloudflare service. To deliver the pages, the Cloudflare servers receive the technical data every browser sends, such as the IP address and the type of browser. I do not receive this data and do not use it: Cloudflare handles it to run and protect the service, under its own terms.
The contact form: which data and why
If you write to me from the form I collect your name, your email address, the reason, your company if you give it, the message, the language of the page, the date and the time. I use them only to read your request and answer you, and to stop anyone from using the form in someone else's name.
The legal basis is my legitimate interest in answering whoever writes to me and in protecting the form from abuse (Article 6(1)(f) GDPR). If you write to me about a job opportunity, the processing also serves to follow up on a request of yours before a possible contract (Article 6(1)(b)). I do not use your data for any other purpose, I do not sell it or pass it to anyone, and I make no automated decisions about you.
The message reaches me only after you confirm the request from the link you receive by email: this way nobody can send me a message using your address. Name, email and message are required: without them the request cannot be sent.
The services the form uses
Google Apps Script, a Google service, receives the request and records it in a Google sheet in my account.
Cloudflare Turnstile checks that the person writing is a person and not an automated program. To do so it looks at technical data from the browser and the device, such as the IP address and the type of browser, without identifying you. For this task Cloudflare acts on my behalf; it also uses the same data to improve the service, as an independent controller.
Resend sends from the address info@moscariello.me the confirmation emails and the notification I receive. It receives your email address and the text of these emails.
The info@moscariello.me mailbox is hosted by Apple iCloud: the notification with your message and the replies we exchange arrive there.
The sheet, the script and the mailbox are on my personal Google and Apple accounts, used under the terms these companies apply to private individuals.
For how long
Requests that are not confirmed, have expired or have been cancelled are deleted from the sheet 90 days after they arrive. Confirmed requests are deleted from the sheet 365 days after confirmation. Deletion is automatic and runs once a day.
The notification with your message and the correspondence that follows stay in the info@moscariello.me mailbox for as long as needed to handle it, and in any case no longer than 24 months after the last message. The sending and checking services keep their own technical data for the periods stated in their terms.
Data outside the European Union
Google, Cloudflare and Resend are US companies and their servers may be outside the European Union; Resend states that it stores data in the United States. For these three companies the transfers rely on the adequacy decision of the European Commission of 10 July 2023, because they are certified under the EU-U.S. Data Privacy Framework.
For iCloud, in the European Union the data is handled by Apple Distribution International, in Ireland; when Apple transfers it outside the European Union it uses the standard contractual clauses approved by the European Commission.
Preferences saved in the browser
The site saves only two pieces of information in the local storage of your browser: whether you turned the sound effects off or on, and whether you have already seen the animation of the Sounds button. They stay on your device, are never sent to anyone and you can delete them whenever you like from the settings of the browser.
During the visit the storage of the tab also remembers which page you come back to the home from and whether a transition between two pages is under way, to show you the right animation. This information disappears when you close the tab.
These are technical tools that only serve to give you what you chose, and for this reason they need no consent (Article 122 of the Italian Personal Data Protection Code, Legislative Decree 196/2003, and the guidelines of the Italian data protection authority of 10 June 2021).
Your rights
You can ask me at any time to see your data, correct it, delete it, restrict its use or receive it in a readable format, and you can object to its processing (Articles 15 to 22 GDPR). Write to info@moscariello.me: I answer within one month, as Article 12 requires.
If you think I handle your data incorrectly you can lodge a complaint with the Italian data protection authority, the Garante per la protezione dei dati personali (garanteprivacy.it), or with the authority of the country where you live or work (Article 77 GDPR).
If I change the way I handle data, I update this page and the date at the top. The versions in other languages are translations: if they differ, the Italian version prevails.