Privacy policy

Data controller

The data controller is Andrea Tarascio, a sole proprietorship with VAT number 05791120289, registered with the Padua Companies Register under REA no. PD-492785. For any request about your data, you can write to andrea@tarascio.software.

The contact form

The contact form collects your name, email and chosen service and, if you fill them in, your company and message. The same data also arrives when you write by email or on WhatsApp, or when you call.

This data is used to reply to your request and, if you ask for one, to prepare a quote. The legal basis is taking steps at your request before entering into a contract (Art. 6(1)(b) GDPR). Name, email and service are required to send the form. Company and message are optional.

How long data is kept

If the request does not turn into an engagement, messages are deleted within 24 months of the last exchange. If it does, the data is kept for 10 years, as tax and accounting obligations require.

Spam protection

To block automated submissions, the site keeps the IP address of whoever sends the form in memory for 10 minutes, then deletes it. The legal basis is the legitimate interest in protecting the form from abuse (Art. 6(1)(f) GDPR).

The form is also protected by Cloudflare Turnstile, a service of Cloudflare, Inc. that checks that a submission comes from a person and not from an automated program. To do that, Turnstile receives the IP address and some technical data about the browser and the device. It uses no cookies and is loaded only on the contact page. The legal basis is the same legitimate interest.

Visit statistics

The site uses Vercel Web Analytics and Vercel Speed Insights to count visits and measure page speed. Neither uses cookies. The data collected is the page, the referrer, the country, the browser and the device type, and it can only be viewed in aggregate form. To count visits, Vercel uses an identifier derived from the request, which is deleted after 24 hours. The legal basis is the legitimate interest in knowing which pages are read and how fast they load.

Cookies

The site uses no cookies or other tracking tools. The only thing stored in the browser is the chosen display preference, which is never sent to any server.

Who the data is entrusted to

Vercel Inc. hosts the site and collects the visit statistics. Google runs the email service where form messages arrive. Cloudflare, Inc. checks form submissions. All three process data on behalf of the controller, as data processors. Cloudflare also uses the same technical data to improve its own detection of automated programs, and for that use it is an independent controller. The data is not shared with anyone else.

Transfers outside the European Union

Vercel, Google and Cloudflare may process data on servers in the United States. All three companies take part in the EU-US Data Privacy Framework, which the European Commission recognised as adequate in its decision of 10 July 2023.

The WhatsApp button

The WhatsApp button leads to a service run by Meta. From that point on, WhatsApp's privacy policy applies.

Your rights

You can ask to access your data, correct it, delete it, restrict its use or receive it in a machine-readable format (Art. 15-20 GDPR). You can also object to processing based on legitimate interest (Art. 21).

To exercise these rights, write to andrea@tarascio.software. You will receive a reply within one month. You can also lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali) at garanteprivacy.it.

Automated decisions

No data is used for automated decision-making or to profile visitors to the site.

Changes to this page

When the site adds a service that processes personal data, this page is updated.