Privacy notice

This notice explains which personal data I collect through maslabs.it, why I collect them, how long I keep them and what you can ask me to do with them. It is written under articles 13 and 14 of Regulation (EU) 2016/679 (GDPR).

Who processes your data

The data controller is Marco Andrea Sala, [INDIRIZZO_TITOLARE] — [P_IVA_O_CF]. For any request about your data write to privacy@maslabs.it: I answer personally.

I have not appointed a data protection officer (DPO) because the cases set out in article 37 of the Regulation do not apply.

Which data I collect, and only when you give them to me

Contact form. Name, email address and the text you write in the field about your idea. I use them to answer you and to assess whether I can be useful. Legal basis: pre-contractual measures at your request (art. 6.1.b) and, for keeping the correspondence only, my legitimate interest in keeping track of business contacts (art. 6.1.f).

Estimate breakdown request. Email address and the answers you gave the estimator. I use them to send you the PDF you asked for and to understand what kind of projects the site's visitors have in mind. Legal basis: pre-contractual measures at your request (art. 6.1.b).

Server technical data. The server records the IP address and the date of requests for a few days, for security reasons and to rate-limit automated submissions. Legal basis: legitimate interest in the security of the site (art. 6.1.f).

Visit statistics. I use a cookieless measurement with no persistent identifiers, whose data stay aggregated: it cannot be traced back to a person. I do not use Google Analytics or advertising profiling tools.

Cookies

This site uses no profiling cookies and no third-party cookies. That is why there is no banner: there is nothing to consent to. Your browser may store only technical information needed to display the page you are reading.

Who I share them with

Your data are never sold or transferred to anyone for commercial purposes. They are processed, on my behalf and on my instructions, only by the technical suppliers needed to run the site:

• The transactional email provider (Resend), which physically delivers the emails I send you and which, to do so, receives your address and the content of the message.
• The hosting provider, which processes technical connection data.

Each of them is appointed as a processor under article 28 of the Regulation.

Transfers outside the European Union

Some of the suppliers above are established in the United States. In that case the transfer takes place on the basis of the standard contractual clauses approved by the European Commission, or of the provider's participation in the EU-US data protection framework, where applicable.

How long I keep them

• Messages received through the contact form: 24 months from the last exchange, then deleted.
• Emails and answers collected by the estimator: 24 months from the request.
• Server technical logs: 30 days at most.

If we become each other's clients, accounting and contractual data follow the statutory retention periods (ten years).

What you can ask me

You have the right to ask me for access to your data, rectification, erasure, restriction of processing, portability, and to object to processing based on legitimate interest (articles 15-22 of the Regulation). Write to privacy@maslabs.it: I answer within thirty days, free of charge.

If you believe I am processing your data improperly you can contact the supervisory authority: in Italy it is the Garante per la protezione dei dati personali (www.garanteprivacy.it).

Changes

If I change anything in this notice I update the date at the top of the page. Previous versions remain available on request.