Privacy Policy

Last updated: May 2026

This personal website, accessible at paolobuatti.it, is operated by Paolo Buatti as the Data Controller of personal data pursuant to Regulation (EU) 2016/679 (“GDPR”) and applicable Italian legislation.

This notice describes how the personal data of users visiting the site is processed.

1. Data Controller

Paolo Buatti
Contact email: info [at] paolobuatti.it

2. Types of data processed

The site does not use:

• analytics systems;
• profiling tools;
• advertising cookies;
• newsletters;
• restricted areas;
• user registration forms.

During normal browsing, however, some technical data strictly necessary for the operation of the site may be automatically collected, such as:

• IP address;
• browser type;
• operating system;
• technical information automatically transmitted by the browser.

Such data is used exclusively for technical and security purposes.

3. Embedded content from third-party platforms

The site may embed video content from:

• YouTube
• Vimeo

Viewing such content may involve the processing of personal data and the installation of cookies by the respective third-party platforms.

Video content is loaded only following a voluntary interaction by the user.

For further information:

• YouTube/Google Privacy Policy
• Vimeo Privacy Policy

4. Legal basis for processing

Data processing is carried out on the basis of:

• the legitimate interest of the Data Controller relating to the security and proper functioning of the site;
• the user’s consent, where required by applicable law for third-party services.

5. Processing methods

Data is processed using IT and electronic tools, with appropriate security measures in place to prevent unauthorised access, disclosure, alteration or destruction of the data.

6. Data retention

Any technical data collected is retained for the time strictly necessary for the operation and security of the site.

7. Communication of data

Data is not sold nor used for commercial or advertising purposes.

It may be processed by technical providers involved in hosting or maintaining the site, exclusively for technical requirements.

8. Data subject rights

Users may exercise the rights set out in Articles 15-22 of the GDPR, including:

• access to data;
• rectification;
• erasure;
• restriction of processing;
• objection to processing;
• lodging a complaint with the Garante per la Protezione dei Dati Personali (Italian Data Protection Authority).

Competent authority:
Garante per la Protezione dei Dati Personali

9. External links

The site may contain links to external websites. The Data Controller is not responsible for the relevant privacy notices or the content of such sites.

10. Changes to this notice

This Privacy Policy may be updated at any time to reflect regulatory adjustments or technical changes to the site. Any updates will be published on this page.

This policy entirely replaces any previously published versions.