← Back

Privacy

Short version: nothing is tracked. The long version, as the GDPR (Art. 13) asks for it, is below. Last updated 21 October 2026.

Who is responsible
Nicolò Padovan, VAT IT01956360935, is the data controller for this site. Write to info@nicolopadovan.com.
What is collected
Visiting the site, the servers that run it log what every request carries anyway: IP address, browser, the page requested and when. If you email me, I get your address and whatever you write. The site uses no cookies, no analytics and no tracking.
Why, and on what basis
Server logs keep the site running and secure: legitimate interest (Art. 6(1)(f) GDPR). Emails are answered at your request: pre-contractual steps or legitimate interest (Art. 6(1)(b) and (f) GDPR).
Who else handles it
Vercel Inc. hosts the site (privacy policy), Cloudflare, Inc. runs the domain's DNS (privacy policy) and Aruba S.p.A., in Italy, handles email (aruba.it). Vercel and Cloudflare may process data in the United States, under the EU-US Data Privacy Framework or the European Commission's standard contractual clauses. Nothing is sold or shared beyond that, unless the law requires it.
How long
Server logs: 24 hours. Emails: 24 months after the last exchange, or longer if they lead to a contract and the law requires it.
Your rights
You can ask to see, correct, delete, restrict or export your data, or object to its use (Arts. 15–21 GDPR), by writing to info@nicolopadovan.com. You can also complain to the Italian data protection authority, Garante per la protezione dei dati personali.