Privacy notice.

1. Controller and contact

The controller is Nicola Zacchei, who operates this personal portfolio. For data inquiries or to exercise your rights, email [email protected].

2. Data, purposes and legal bases

The form collects your name, email, subject, message and acknowledgment of this notice. This information is used to handle and answer your inquiry. For inquiries about a potential assignment or professional relationship, the basis is taking steps at your request before entering into a contract (Article 6(1)(b)); for other correspondence, it is the legitimate interest in managing incoming inquiries (Article 6(1)(f)).

Providers may process connection information, such as IP address, date and time, and browser details, to deliver the website and prevent abuse, on the basis of the legitimate interest in service security and operation (Article 6(1)(f)). The form is not used for newsletters or marketing subscriptions.

Contacting me is optional. Required fields enable submission and a reply; without them you cannot use the form. Do not include sensitive data, credentials or confidential information. You may email me directly instead.

3. Providers and recipients

Cloudflare delivers and protects the website; OVHcloud hosts the receiving mailbox. Form data is sent to Web3Forms, operated by Web3Creative, which uses subprocessors for infrastructure, delivery and spam prevention. These services may also process technical data. Their terms explain the respective roles and processing: Cloudflare, OVHcloud, Web3Forms and the Web3Forms data processing agreement.

Messages are not published on the website. Information may be disclosed to authorities when legally required. LinkedIn is an external link; its service is reached only when you open it.

4. International transfers

Web3Creative operates from India and may use infrastructure outside the European Economic Area. Its data processing agreement provides for Standard Contractual Clauses where those safeguards are required. Infrastructure services may also involve international processing under their respective agreements. You may contact the controller for information about safeguards.

5. Retention

For correspondence handled by the controller, the criterion is the time needed to answer and complete the requested follow-up: once an inquiry is closed and no specific documentary need remains, the data is to be deleted. If a professional relationship follows, or records are required for legal obligations or a dispute, retention is limited to the data and time necessary for those purposes.

The Web3Forms policy consulted for this notice provides for up to three years for submissions, unless deleted earlier or a shorter applicable period applies. This is separate from retention of the email copy. Technical logs follow providers’ security and deletion cycles described in the linked notices.

6. Cookies and interactive content

The portfolio code sets no marketing cookies, includes no profiling or analytics tools, and does not save messages in persistent browser storage. Images, system fonts and the 3D viewer are served without embedded advertising services; interactive models load when you activate them. Infrastructure may use technical security mechanisms. No decisions producing legal or similarly significant effects are based solely on automated processing.

7. Your rights

Where the GDPR conditions apply, you may request access, rectification, erasure, restriction and portability, and object to processing based on legitimate interests. Email [email protected]. You may also complain to the Italian Data Protection Authority or the competent authority in your country.