LegalLast updated: 15 October 2026
Privacy notice
This notice explains what personal data I collect through ivanmaggini.com, why I collect it, how long I keep it and what rights you have over it. It is provided under Articles 13 and 14 of Regulation (EU) 2016/679 (GDPR).
Did you get an email from me? The part that concerns you is section 2.4.
There is no form to fill in anywhere on this site: I collect no names, addresses, phone numbers or other details through these pages. The only way to get in touch is to send an email, and in that case the data is whatever you choose to write.
This is a translation of the Italian notice. If the two versions differ, the Italian one prevails.
1Data controller
The data controller is Ivan Maggini, an individual based in Lurano (BG), Italy, Italian VAT number 04924920160, reachable at general@ivanmaggini.com. Ivan Maggini Studio is the trade name under which the video production work described on this site is carried out, and it is not a legal entity separate from the controller.
2What data I collect and why
2.1Emails sent directly
If you write to general@ivanmaggini.com, I process your email address and the content of your message solely in order to reply (Article 6(1)(b) GDPR for requests relating to the service; in other cases Article 6(1)(f) GDPR: legitimate interest in handling correspondence).
2.2Technical browsing data
The site is hosted on Netlify, which automatically generates access logs containing IP address, date and time of the request, the page requested and the user agent. These are infrastructure logs, necessary to run and secure the service (Article 6(1)(f) GDPR). I do not use them to profile visitors.
2.3Cookies
This site uses no profiling, tracking or advertising cookies, and integrates no analytics tools. That is why you see no consent banner.
The typefaces are hosted on this site too: to display the pages, your browser does not contact any third-party server.
2.4Recipients of commercial communications
If you have received a commercial email from me, your personal data was not collected from you directly. This section is provided under Article 14 of Regulation (EU) 2016/679.
The data processed is: first and last name, email address, profession, place of business. It comes from publicly accessible sources, including the institutional websites of professional associations and trade bodies.
The legal basis for the processing is the controller's legitimate interest under Article 6(1)(f) GDPR. The interest pursued is promoting video content production services to professionals and companies who may be interested. The balancing test against the data subject's rights takes the following into account: the communications are individual, not bulk; the data processed is limited to professional information; the address used was published in a professional context; the communication concerns the recipient's professional activity and not their private life. You may object at any time under Article 21 GDPR.
The data is not disclosed to third parties for commercial purposes. It resides on the Google Workspace email infrastructure, provided by Google Ireland Limited as processor. Any transfers to the United States take place on the basis of the Standard Contractual Clauses set out in Commission Implementing Decision (EU) 2021/914.
The retention period is twenty-four months from the last meaningful contact, unless you exercise your right to object or to erasure before then. The addresses of those who have exercised the right to object are kept on a permanent suppression list, solely so that no further communications are sent.
3Recipients and processors
I rely on the following providers, appointed as processors under Article 28 GDPR:
- Netlify, Inc. (United States): hosting the site. Transfers outside the EU rely on the Standard Contractual Clauses (Commission Decision 2021/914).
- The email provider used for the general@ivanmaggini.com mailbox, for handling correspondence.
I do not sell or otherwise transfer your data to third parties for commercial purposes.
4Retention
- Email correspondence: kept for as long as needed to manage the relationship and, where an engagement follows, for the applicable statutory periods.
- Technical logs: kept by Netlify under its data processing terms, generally no longer than 30 days.
- Commercial contacts: kept for twenty-four months from the last meaningful contact, unless you object or ask for earlier erasure.
5Your rights
Under Articles 15, 16, 17, 18, 19 and 21 GDPR you have the right to access your data, request its rectification or erasure, obtain restriction of processing and object to processing based on legitimate interest. The right to data portability under Article 20 GDPR does not apply to processing based on legitimate interest. You can exercise these rights by writing to general@ivanmaggini.com: I reply within one month, as required by Article 12 GDPR.
You also have the right to lodge a complaint with the Italian supervisory authority, the Garante per la protezione dei dati personali (garante.it), or with the supervisory authority of the EU country where you live or work. If you are in the UK, you may also contact the Information Commissioner's Office (ico.org.uk).
6Minors
The site and the services described are aimed at professionals and are not directed at children under 14. I do not knowingly collect personal data from children under 14; if you believe this has happened, write to me and I will delete it.
7Changes
Any changes to this notice will be published on this page, with the date at the top updated accordingly.
Note: the Biglietto services are covered by a separate privacy notice, available on the product's own site.