Skip to content

We would like to use Google Analytics to understand, in aggregate, which pages are useful and how to improve the site. It only runs if you accept: no advertising, no profiling. Read the cookie policy

Let's talk about your project

Legal

Privacy policy

What personal data scriptoriumweb.it collects, why, for how long and how you can exercise your rights. This notice is provided under Article 13 of Regulation (EU) 2016/679 (GDPR).

Last updated:

Data controller

The data controller is Giovanni Vangelista, trading as Scriptorium Web Venezia, based in Venice and Padua, Italy, VAT no. 13826280961.

For any question about this policy or your data, write to info@scriptoriumweb.it.

Data and purposes

Contact form requests

When you write through the contact form you send your name, email address, message and, if you wish, your phone number and the service you are interested in.

  • Purpose: to reply to your request and, if you ask for one, prepare a proposal.
  • Legal basis: steps taken at your request before entering into a contract (Art. 6(1)(b) GDPR).
  • Required data: name, email and message are needed to reply; phone and service are optional.
  • Retention: the website does not store requests in a database. The message is emailed to the controller’s mailbox, which automatically forwards it to a Gmail account, and kept there for as long as needed to handle the request, and no longer than 24 months after the last contact; if it leads to an engagement, the data follows the duration of the relationship and legal obligations, such as tax rules.

Technical browsing data

As with any website, on each visit the server automatically receives some technical data: IP address, date and time, requested page, browser and operating system.

  • Purpose: to run the website and protect it from attacks and abuse, such as automated form submissions.
  • Legal basis: the controller’s legitimate interest in keeping the website secure (Art. 6(1)(f) GDPR).
  • Retention: the IP address used to limit form submissions is held only in the server’s memory, for 10 minutes; server logs are kept by the hosting provider for a limited period and used only for security and troubleshooting.

Visit statistics, only with your consent

If you accept in the banner, the website loads Google Analytics 4 through Google Tag Manager to learn, in aggregate, how many people visit it, where they come from and which pages they read. Without consent these tools are not loaded.

  • Data: pseudonymous identifiers stored in cookies, pages visited, visit duration, device type and browser, approximate location. Google Analytics 4 does not log or store IP addresses.
  • Legal basis: consent (Art. 6(1)(a) GDPR), which you can withdraw at any time from the “Cookie preferences” link at the bottom of every page, with no effect on your browsing.
  • Retention: Google Analytics data is kept for 14 months and then deleted automatically.

Details on each cookie are in the cookie policy.

Recipients

Your data is not sold or passed on to third parties for commercial purposes. It is processed, only for the purposes described and as data processors, by the providers of the services the website uses:

  • Hostinger International Ltd. (Cyprus, EU): website and email hosting.
  • Google Ireland Limited (Ireland, EU): Gmail, where emails received by the website are forwarded, and, only with your consent, Google Tag Manager and Google Analytics.

Fonts and images are served directly by scriptoriumweb.it: no other external service receives data while you browse.

Transfers outside the EU

Google may also process some data in the United States. Google LLC participates in the EU-U.S. Data Privacy Framework, found adequate by the European Commission in its decision of 10 July 2023; transfers are also covered by the standard contractual clauses approved by the Commission.

Your rights

At any time you can ask the controller for:

  • access to your data and a copy of it (Art. 15 GDPR);
  • rectification of inaccurate data (Art. 16);
  • erasure (Art. 17) or restriction of processing (Art. 18);
  • portability of the data you provided (Art. 20);
  • and you can object to processing based on legitimate interest (Art. 21).

You can withdraw your consent to statistics whenever you like; withdrawal does not affect processing carried out before it. To exercise your rights, write to info@scriptoriumweb.it; you will receive a reply within one month.

If you believe the processing of your data breaches the GDPR, you can lodge a complaint with the Italian data protection authority, the Garante per la protezione dei dati personali, or with the supervisory authority of the EU country where you live.

Automated decisions

No decisions based solely on automated processing, including profiling, are made.

Changes

This policy may be updated, for example if the services used by the website change. The date of the last update is shown at the top of the page.