Privacy Policy
This notice explains how Elia Zanetta processes the personal data of visitors to this website. The site sets no cookies, runs no analytics and processes no data for advertising purposes.
- Elia Zanetta
- None
Notice given under article 13 of Regulation (EU) 2016/679 (GDPR).
Data controller
The controller of the personal data collected through this website is Elia Zanetta, drone pilot and videomaker.
For any request about your personal data, write to the controller at the address below. The controller has not appointed a Data Protection Officer, because the conditions in art. 37 GDPR do not apply.
- Elia Zanetta
- 02777030038
Personal data processed
Personal data means any information that relates to you and can be traced back to you. This website processes two categories of personal data.
Browsing data
The systems and software that run this website acquire, during normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols. This information is not collected to be associated with identified users, but by its nature it could allow users to be identified through processing and matching with data held by third parties.
- The IP address or domain name of the device used for the connection
- The URI notation of the resources requested
- The date and time of the request
- The method used to send the request to the server
- The size of the file returned in response
- The numeric code that indicates the status of the server response
- Other parameters about your operating system and browser
This data serves only to keep the website working, secure and technically maintained. It is not used to profile or track users. The legal basis is the controller’s legitimate interest in keeping the site secure and operational (art. 6(1)(f) GDPR).
Data you send through the contact form
The contact form collects your name, your email address and the text of your message, together with any further personal data you choose to write in the message. The purpose is to read your request and reply to you.
The message is delivered by email to the controller’s mailbox. The website does not store a copy of the data in a database and does not use it for any other purpose.
The legal basis is the controller’s legitimate interest in handling and answering the requests received (art. 6(1)(f) GDPR). Providing the data is optional, but without your name and email address the controller cannot reply.
This website has no newsletter, creates no user accounts and sends no marketing communications.
Who receives the data
Personal data is processed by the controller and by the providers that supply the technical services needed to run the website. These providers act as processors under art. 28 GDPR and process the data only on the controller’s instructions.
- Vercel Inc. — website hosting and technical server logs
- Brevo SAS — delivery of the emails generated by the contact form
- Vimeo.com, Inc. — playback of the videos embedded in the project pages
Brevo SAS is based in France, inside the European Union, so the contact form involves no transfer outside the European Economic Area. Vercel and Vimeo are based in the United States. Data transferred outside the European Economic Area is covered by the Standard Contractual Clauses adopted by the European Commission (art. 46 GDPR) and, for providers that have joined it, by the adequacy decision on the EU-U.S. Data Privacy Framework (art. 45 GDPR).
Personal data is not published, not sold and not disclosed to third parties for purposes other than those stated in this notice.
How long the data is kept
Processing is carried out by automated and manual means, with methods and tools that protect the security and confidentiality of the data, by authorised persons only.
Under art. 5(1)(e) GDPR, personal data is kept in a form that permits identification of the data subject for no longer than is necessary for the purposes of the processing.
- Browsing data: kept by the hosting provider for the technical period needed for service security and diagnostics.
- Contact form data: kept in the controller’s mailbox for as long as needed to handle the request and, after the reply, for the period useful to follow up on the relationship started.
Once these periods end the data is deleted, unless the law requires it to be kept or it is needed to defend a legal claim.
Your rights
You can exercise the rights the GDPR gives you at any time. To do so, write to the controller at the email address given in this notice.
- Access to your personal data (art. 15 GDPR)
- Rectification of inaccurate data (art. 16 GDPR)
- Erasure of your data (art. 17 GDPR)
- Restriction of processing (art. 18 GDPR)
- Data portability (art. 20 GDPR)
- Objection to processing based on legitimate interest (art. 21 GDPR)
The controller answers your request without delay, and in any case within one month of receiving it. The request is free of charge.
Complaint to the supervisory authority
If you believe that the processing of your personal data breaches the GDPR, you can lodge a complaint with the Italian data protection authority, or bring the matter before a court.
Garante per la protezione dei dati personaliChanges to this notice
The controller may update this notice when the services offered by the website, the providers used or the obligations set by law change. The date of the current version is shown at the top of the page.
Please check this page from time to time to read the version in force.
A question about your data?
Write to the data controller. You get an answer without delay, and in any case within one month of your request.
elia.zanetta14@hotmail.com