Privacy Policy
Last updated: 23 August 2026
This notice explains what personal data I collect through ivanmaggini.com, why I collect it, how long I keep it and what rights you have over it. It is provided under Articles 13 and 14 of Regulation (EU) 2016/679 (GDPR).
This notice governs the English pages of ivanmaggini.com and stands on its own. The Italian pages, which include the contact form, are covered by a separate Italian notice.
1. Data controller
The data controller is Ivan Maggini, an individual based in Lurano, Italy, Italian VAT number 04924920160, reachable at general@ivanmaggini.com.
2. What data I collect and why
2.1 Emails sent directly
If you write to general@ivanmaggini.com, I process your email address and the content of your message solely in order to reply (Article 6(1)(b) GDPR where your message is a request that precedes a possible agreement; otherwise Article 6(1)(f) GDPR: legitimate interest in handling correspondence).
2.2 Technical browsing data
The site is hosted on Netlify, which automatically generates access logs containing IP address, date and time of the request, the page requested and the user agent. These are infrastructure logs, necessary to run and secure the service (Article 6(1)(f) GDPR). I do not use them to profile visitors.
2.3 Cookies
This site uses no profiling, tracking or advertising cookies, and integrates no analytics tools. That is why you see no consent banner.
Typefaces are loaded from Google Fonts (Google Ireland Limited): to serve them, your browser makes a request to Google's servers, which at that moment processes your IP address and the technical data of the request. If you'd rather avoid this, you can block requests to fonts.googleapis.com and fonts.gstatic.com in your browser: the site remains fully readable with system fonts.
3. Recipients and processors
I rely on the following providers, appointed as processors under Article 28 GDPR:
- Netlify, Inc. (United States): hosting the site. Transfers outside the EU rely on the Standard Contractual Clauses (Commission Decision 2021/914).
- Google Ireland Limited: serving typefaces via Google Fonts.
- The email provider used for the general@ivanmaggini.com mailbox, for handling correspondence.
I do not sell or otherwise transfer your data to third parties for commercial purposes.
4. Retention
- Email correspondence: kept for as long as needed to manage the relationship and, where an engagement follows, for the applicable statutory periods.
- Technical logs: kept by Netlify under its data processing terms, generally no longer than 30 days.
5. Your rights
Under Articles 15–22 GDPR you have the right to access your data, request its rectification or erasure, obtain restriction or portability, and object to processing based on legitimate interest. You can exercise these rights by writing to general@ivanmaggini.com: I reply within one month, as required by Article 12 GDPR.
You also have the right to lodge a complaint with the Italian supervisory authority, the Garante per la protezione dei dati personali (garante.it). If you are in the UK, you may also contact the Information Commissioner's Office (ico.org.uk).
6. Minors
This site is not directed at children under 14. I do not knowingly collect personal data from children under 14; if you believe this has happened, write to me and I will delete it.
7. Changes
Any changes to this notice will be published on this page, with the date at the top updated accordingly.
Note: the Biglietto services are covered by a separate privacy notice, available on the product's own site.