Privacy

Privacy Policy: last updated: 7 September 2026

1. Introduction

Welcome to the website www.lucatenneriello.com ("the Site"). This Privacy Policy aims to describe how the Site is managed with regard to the processing of personal data of users who consult it and interact with the web services accessible electronically.

2. Data Controller

The Data Controller of personal data is Luca Tenneriello, who can be contacted at the email address info@lucatenneriello.com.

3. Types of Data Collected

Navigation data: the computer systems and software procedures used to operate this website acquire, during their normal operation, some data whose transmission is implicit in the use of Internet communication protocols (IP address, requested page, browser). It stays in the server logs for the time technically necessary and is used only to check that the site works correctly.

Statistics: the Site uses Google Analytics 4 (Google Ireland Ltd.) to measure visits in aggregate form, only after consent given through the banner. Without consent no Google script is loaded and no measurement cookie is set. The choice can be changed at any time via the "Cookie settings" link in the footer.

Contact form: the optional, explicit and voluntary sending of a message through the form on the Site involves the collection of the data needed to reply. Specifically, we collect:

  • Name
  • Email address
  • Text of the message
  • IP address and date of sending, to prevent abuse

The form is protected by Cloudflare Turnstile, an anti-bot service by Cloudflare, Inc. that analyses some technical signals of the browser without showing a CAPTCHA; Cloudflare's Turnstile privacy policy applies.

Videos: the videos on the Site are hosted by YouTube (Google) and are loaded in privacy-enhanced mode (youtube-nocookie.com) only when the user starts playback.

4. Purpose of Processing

Personal data is processed for the following purposes:

  • To respond to requests for information or collaborations sent through the contact form.
  • Statistical analysis in aggregate and anonymous form, subject to consent.
  • To prevent abuse and automated submissions of the form.

5. Legal Basis for Processing

For the contact form the legal basis is the performance of pre-contractual measures requested by the user and their voluntary submission; for statistics it is consent, which can be withdrawn at any time; for abuse prevention it is the Data Controller's legitimate interest in protecting the Site.

6. Processing Methods and Storage

Personal data is processed using automated tools for the time strictly necessary to achieve the purposes for which it was collected. Messages sent through the form are delivered to the Data Controller by email through the Brevo service (Sendinblue SAS, France, EU) and stored in the Data Controller's mailbox until manually deleted or until the user requests their deletion. The Site does not keep a copy of the messages. Data used for the per-IP sending limit is deleted within one hour.

7. Data Sharing and Transfer

The collected data is neither sold nor transferred to third parties. It is processed on behalf of the Data Controller, each for its own function, by: Brevo (email delivery, servers in the European Union); Cloudflare (anti-bot verification of the form, with possible processing outside the European Union under the Standard Contractual Clauses); Google (statistics, only with consent; Google Ireland Ltd., with possible transfers to the United States under the EU-US Data Privacy Framework and the Standard Contractual Clauses). The server hosting the Site is located in Italy.

8. Cookies and Tracking Technologies

The Site sets a single technical cookie of its own: lt_lang, which remembers the last language visited (Italian or English) for one year, so as not to repeat the automatic language switch; it does not require consent. It also stores in the browser (localStorage) the choice made about consent, so as not to show the banner again. Google Analytics cookies are set only after consent. Cloudflare Turnstile may set a technical cookie needed for the anti-bot check while the form is being sent. No profiling cookies are used.

9. User Rights

Users can exercise at any time the rights provided by the GDPR, including:

  • Right of access to their personal data
  • Right to rectification or erasure
  • Right to restriction of processing
  • Right to object to processing
  • Right to data portability

To exercise these rights, users can contact the Data Controller at the email address info@lucatenneriello.com. Upon user request, all personal data will be deleted.

10. Data Security

We adopt appropriate security measures to protect personal data from unauthorised access, alteration, disclosure or destruction. The Site has no database: form data travels encrypted (HTTPS) to the email delivery service and lands in the Data Controller's mailbox.

11. Processing of Minors' Data

The Site is not directed at minors under 18 and does not intentionally collect personal data of minors. If a minor has provided personal data without parental or guardian consent, the latter can contact the Data Controller to request its deletion.

12. Changes to the Privacy Policy

We reserve the right to modify this privacy policy at any time. Changes will be published on this page with the indication of the last update date. The policy is updated whenever significant changes are introduced in data processing practices.

13. Contacts

For any questions regarding this Privacy Policy or the Site's practices, please contact Luca Tenneriello: info@lucatenneriello.com.