Privacy and cookies

This page explains which personal data the pierfrancescoronchi.it website processes, why, with which providers and for how long, as required by Article 13 of Regulation (EU) 2016/679 (GDPR). The cookie policy and the legal notice are at the end.

1. Data controller

Ing. Pierfrancesco Ronchi, self-employed engineer
Via Germania 34, 06024 Gubbio (PG), Italy · VAT no. IT03012450544
Email pierfrancesco.ronchi@gmail.com · Certified email (PEC) pierfrancesco.ronchi@ingpec.eu · Phone +39 347 55 32 142

No data protection officer (DPO) has been appointed: the law does not require one for this activity.

2. What data

• Browsing data. When you open a page, the server hosting the site automatically records some technical data: IP address, date and time, page requested, browser and device type, referring page. It is used to show you the site and keep it secure; the controller does not use it to identify you.
• Contact form data. Name and company, email, phone number if you give one, the text of your request and the language you are reading the site in, plus the time taken to fill in the form, used only to spot automated submissions (spam). When you send the form, the site’s server also records your device’s IP address, as it does for every page.
• Data you provide directly if you write by email or certified email, or if you call.

Please do not include sensitive data in your message, for example about health: a technical request does not need it.

3. Why, and on what legal basis

• To answer your request and, if you ask, to prepare a quote. Legal basis: steps taken at your request before entering into a contract (Art. 6(1)(b) GDPR). If you write on behalf of a company, the basis is the controller's legitimate interest in answering that company's request (Art. 6(1)(f)).
• To run the site and protect it from abuse and attacks (browsing data). Legal basis: the controller's legitimate interest (Art. 6(1)(f)).
• If your request leads to an assignment, the data is used for the contract and for the related legal obligations, such as tax rules (Art. 6(1)(b) and (c)).

Your data is not used for advertising, newsletters or profiling, and it is not sold or passed on. No decisions are made by purely automated means (Art. 22 GDPR).

4. Do you have to provide it?

Name, email and the text of your request are needed: without them the controller cannot reply. The phone number is optional. The box “I have read the privacy notice” only confirms that you have received this information: it is not consent, because no consent is needed to answer a request. If you prefer not to use the form, you can always write or call.

5. Who receives the data

The data is processed by the controller. For the website, the form and email, the controller relies on these providers:

• Vercel Inc. (United States), which hosts the site and records browsing data. The site’s function that receives the form and passes it to the email service also runs on Vercel’s servers in Frankfurt (Germany); the function does not keep your request.
• Resend (Plus Five Five, Inc., San Francisco, United States), which sends your request by email to the controller from the address sito@pierfrancescoronchi.it, with your address set for replies. Resend in turn uses Amazon Web Services to send it. You do not receive any automatic confirmation email.
• Google Ireland Limited, which provides the Gmail mailbox where requests arrive and correspondence is kept.
• Whoever looks after the technical side of the site on the controller's behalf, who can see the browsing data recorded by the host.

Data may be disclosed to public authorities where the law requires it. It is never published.

6. Transfers outside the EU

Some providers process data outside the European Union. These are the safeguards:

• Vercel (United States): the function that receives the form runs in Frankfurt, in the EU, but Vercel Inc. is a US company and may process browsing data and technical logs in the United States. Vercel Inc. participates in the EU-U.S. Data Privacy Framework, found adequate by the European Commission in its decision of 10 July 2023.
• Resend (United States): emails are sent from servers in Ireland, but Resend stores the data in the United States. Data is transferred under the standard contractual clauses approved by the European Commission (Decision 2021/914), included in its data processing agreement; Resend also participates in the EU-U.S. Data Privacy Framework.
• Google: may process data on servers outside the EU. Google LLC participates in the EU-U.S. Data Privacy Framework and, where needed, Google uses standard contractual clauses.

You can write to the controller for information on these safeguards.

7. How long

• Requests, emails and messages: as long as needed to handle the request, then no more than 12 months from the last contact if no assignment follows. If an assignment follows, for its duration and then for the period required by law (for example 10 years for accounting records, Art. 2220 of the Italian Civil Code).
• Copy held by Resend: Resend keeps the content and technical data of sent emails for 30 days. The site’s function that receives the form keeps nothing.
• Browsing data: for the period set by Vercel to run and secure its service.
• Preferences saved in your browser (see “Cookies and browser storage”): the language until you delete it; your cookie choice for 6 months.

8. Your rights

You can ask the controller to access your data, correct it, erase it, restrict its use and receive it in a commonly used format (Arts. 15–20 GDPR). You can also object at any time to processing based on legitimate interest, on grounds relating to your particular situation (Art. 21 GDPR). Just write to the email or certified email address above. Requests are free and answered within one month; for complex requests this can be extended by two months, and you will be told why (Art. 12 GDPR).

If you believe your data is processed in breach of the GDPR, you can lodge a complaint with the Italian Data Protection Authority, the Garante per la protezione dei dati personali (garanteprivacy.it), or with the supervisory authority of the EU country where you live or work, or go to court (Arts. 77 and 79 GDPR).

9. Cookies and browser storage

The site uses no cookies, neither its own nor third-party ones. There are no analytics, advertising pixels, social buttons, embedded videos or maps. Fonts and libraries are served by the site itself: while you browse, your browser does not contact any third-party service. Even when you send the form, your browser only talks to the site: it is the site that passes your request on to the email service (Resend, section 5).

The site does use your browser’s local storage (localStorage) for two technical items. They stay on your device and are not sent to anyone:

These are technical tools, needed to provide the service you ask for, so they do not require consent (Art. 122 of the Italian Privacy Code, Legislative Decree 196/2003; Italian Data Protection Authority cookie guidelines of 10 June 2021).

The banner. On your first visit a banner asks you to choose: “Accept all”, “Reject” or “Manage preferences”, where you find each category. Closing the banner with the X or the Esc key counts as rejecting; scrolling or carrying on browsing does not count as consent. Today the site has no tools that require consent: whatever you choose, it works the same way and only uses the technical items in the table. The banner is there so that, if the site ever uses other tools (such as analytics), they are only turned on after you say yes.

Changing your choice. You can change or withdraw your choice at any time from the “Cookie settings” link at the bottom of every page. Your choice is valid for 6 months: the banner only reappears sooner if the site adds tools that require consent, and this page will then be updated.

You can also delete this data in your browser settings, under the option that clears site data: the site switches back to Italian and the banner appears again.

10. Changes

This notice changes when the site or the law changes. The date at the top shows the latest update.

11. Legal notice

Information about the service provider (Art. 7 of Italian Legislative Decree 70/2003).

• Ing. Pierfrancesco Ronchi, self-employed mechanical engineer
• Registered with the Ordine degli Ingegneri della Provincia di Perugia (Order of Engineers of the Province of Perugia), no. A2349
• Via Germania 34, 06024 Gubbio (PG), Italy
• VAT no. IT03012450544
• Email pierfrancesco.ronchi@gmail.com · Certified email (PEC) pierfrancesco.ronchi@ingpec.eu · Phone +39 347 55 32 142
• Professional title: engineer (ingegnere), Italy
• Professional rules: Code of conduct of Italian engineers (in Italian) issued by the National Council of Engineers (CNI); Presidential Decree no. 137 of 7 August 2012.