Privacy and cookies
Last updated: 23 October 2026
Controller and contact
The data controller is Enrico Basso. For information or to exercise your rights, email info@enricobasso.it. This notice applies to enricobasso.it.
Data and purposes
Enquiries. Your name, email address and message are used to answer your enquiry. Providing them is optional, but the required fields are necessary to use the form. The legal basis is taking pre-contractual steps at your request (GDPR Article 6(1)(b)) or, for other correspondence, the legitimate interest in answering enquiries (Article 6(1)(f)). Your details are not used for newsletters or advertising.
Browsing and security. IP addresses, browser information, requests and technical data are processed to deliver and protect the website, based on the legitimate interest in operating it and preventing abuse (Article 6(1)(f)).
Statistics. Umami Cloud measures visits, pages viewed, traffic sources, browsers, devices and approximate location to understand website usage. The legal basis is the legitimate interest in measuring website performance and improving its content (Article 6(1)(f)). The standard tracker does not use cookies; it processes IP addresses for geolocation and to generate a hashed session identifier, without storing the IP address as a field in standard analytics records. Form data is not sent to Umami.
Videos. The YouTube player loads only when you select “Watch video”. Google receives technical data, including your IP address and the page origin, and may use cookies or similar technologies. Loading the player delivers the content you requested. Activation and disconnection are explained in the cookie section.
Providers and transfers
The website uses Cloudflare for hosting and security, Web3Forms (Web3Creative) to receive, filter and forward messages, the controller’s email service for correspondence, and Umami Software, Inc. for statistics. These providers process the data needed for their services; data processing agreements apply to activities carried out on behalf of the controller. The Google Privacy Policy also applies to videos.
Some providers may process data outside the European Economic Area with GDPR safeguards, including standard contractual clauses where applicable. You can ask the controller for information about those safeguards. Umami’s EU region concerns analytics storage and does not mean all provider processing takes place in the EU. Links to Instagram and other external websites lead to services with their own privacy notices.
Retention
Correspondence is kept for the time needed to handle and conclude your enquiry; where a professional relationship follows, for managing that relationship and meeting legal obligations or protecting legal rights. Web3Forms retains submissions separately for up to three years under its service terms. Umami Cloud Hobby analytics are retained for six months. Technical and security logs follow provider retention cycles according to service purposes; residual backups are deleted under their respective rotation cycles.
Your rights
Where GDPR conditions apply, you may request access, rectification, erasure, restriction and portability, object to processing based on legitimate interests, and withdraw any consent without affecting earlier lawful processing. Email info@enricobasso.it; requests are normally answered within one month. You may complain to the Italian Garante per la protezione dei dati personali or your competent supervisory authority. The controller does not make solely automated decisions producing legal or similarly significant effects concerning you.
Cookies and similar technologies
The website does not save persistent preferences for its menu, gallery or filters. Fonts and video previews are hosted locally. Umami Cloud uses the standard cookieless tracker described above. External services may use cookies or other forms of browser storage.
Hosting and security
Cloudflare provides website hosting and protection. Its security features may use strictly necessary technical cookies, depending on configuration and visit conditions. Purposes and lifetimes for individual services are described in the Cloudflare documentation.
YouTube videos on request
YouTube does not load until you select “Watch video”. The player uses youtube-nocookie.com, YouTube’s privacy-enhanced mode; Google may nevertheless process data and use cookies or other storage technologies while you use it. Lifetimes depend on the service, browser and account settings; see Google’s cookie information.
You can leave a video unloaded, open it directly on YouTube or select “Disconnect video” to remove the player. Disconnecting does not erase data already sent to or stored by Google. No global video preference is saved.
Managing browser data
You can block or delete cookies and website data in your browser settings; some external-service features may then be unavailable. Local deletion does not automatically remove data already received by providers. For questions or to exercise your rights, email info@enricobasso.it.