Information notice
Privacy & Cookie Policy
Last updated: 22 August 2026
This notice explains, under Article 13 of Regulation (EU) 2016/679 (GDPR), how personal data is processed when you use ondanueve.it.
Data controller
The data controller is Marco Pescosolido. For any privacy request, contact info@marcopescosolido.it.
Contact form
When you submit the form, we process your name, email address, message and, if provided, telephone number. We use these details only to reply and to manage any pre-contractual steps or resulting relationship. The legal basis is taking steps at your request before entering into a contract (Article 6(1)(b) GDPR) or, for general enquiries, our legitimate interest in replying (Article 6(1)(f) GDPR). Name, email and message are required to send an enquiry; the telephone number is optional.
The form is handled through Formspree, which receives the data as a service provider and processor. The controller does not use these details for newsletters or marketing.
Hosting and technical data
The site is delivered through Cloudflare Pages. Cloudflare may process the IP address, request date and time, requested URL and technical browser information needed to deliver, secure and maintain the site. This processing is based on the controller’s legitimate interest in the security and proper operation of the service (Article 6(1)(f) GDPR).
Cloudflare and Formspree may process data outside the European Economic Area, using Standard Contractual Clauses or other GDPR safeguards where required. The site does not install analytics tools, advertising cookies or profiling systems.
Cookies and local technologies
The site uses only strictly necessary tools. Your external-media choice is stored in the browser under the local key “ondanueve_external_media_consent_v1” for 180 days: it records the choice, date and notice version so that the banner is not shown on every page. If you sign in to the protected media area, the technical cookie “ondanueve_media” keeps the session active for one hour; it is Secure, HttpOnly and SameSite=Strict.
These tools do not require consent because they remember your choice or provide a function you requested. You can delete them through your browser settings.
YouTube and Spotify
YouTube and Spotify players are blocked by default. Until you select “Accept”, the site creates no iframe, loads no provider API and sends no data to those providers. If you accept, YouTube (Google) or Spotify receive at least your IP address and technical device information and may use cookies or similar technologies under their own privacy notices. The legal basis is consent (Article 6(1)(a) GDPR).
You may reject without losing the site’s other functions and withdraw your choice at any time through “Manage preferences” in the footer. Withdrawal does not affect the lawfulness of processing carried out beforehand. Direct links to YouTube or Spotify open external sites governed by their respective privacy notices.
Retention and recipients
Enquiries are kept for as long as needed to reply and manage any subsequent relationship. They may be retained longer only where required by law or to establish, exercise or defend legal claims. Data may be accessed by the controller and by providers needed for hosting, security, form delivery and email, within the scope of their respective roles.
Your rights
You may request access, correction, erasure, restriction of processing, portability where applicable, object to processing based on legitimate interests and withdraw consent. Contact info@marcopescosolido.it. You may also lodge a complaint with the Italian Data Protection Authority (garanteprivacy.it).