This policy explains which personal data is processed when you visit ANDR3A.OS (portfolio.andreasargiotto.dev), the personal portfolio of Andrea Sargiotto, and which rights you have under the EU General Data Protection Regulation (Regulation (EU) 2016/679, “GDPR”).
Data controller
Andrea Sargiotto — andrea.sargiotto.uni@gmail.com
In short
- There are no accounts, analytics, advertising or profiling.
- The site does not set cookies.
- The contact form does not send anything to a server: it opens your own email app.
- Your interface preferences stay in your browser.
What data is processed
Technical data from hosting
The site is hosted by Vercel Inc. When you load a page, Vercel’s servers receive the technical data every browser sends: IP address, date and time of the request, the page requested, browser and operating system (user agent) and the referring page. This data is used only to deliver the site, keep it secure and diagnose errors, and is not used to identify visitors. Vercel keeps these logs for a limited period under its own retention policy.
Legal basis: legitimate interest in running a secure and working website (Art. 6(1)(f) GDPR).
Messages you send
The contact form checks your input in the browser and then opens your email client with a pre-filled message: nothing is transmitted until you send it yourself. If you write by email or WhatsApp, I receive your name, your email address or phone number and the content of your message, and I use them only to reply to you.
Legal basis: replying to your request (Art. 6(1)(b) GDPR) and legitimate interest in answering the messages I receive (Art. 6(1)(f) GDPR). Messages are kept for as long as the conversation requires, and deleted on request.
Preferences stored in your browser
Theme, language, reduced motion and background speed are saved on your device so the site remembers them. They are never sent to me. The Cookie Policy lists exactly what is stored.
Third parties and external links
- Vercel Inc. hosts the site and processes the technical data above on my behalf. See Vercel’s privacy policy.
- GitHub, LinkedIn, Instagram and WhatsApp are plain links. The site does not embed their widgets, scripts or trackers; once you follow a link, that provider’s privacy policy applies.
- Fonts are served by this site itself; no external font service is contacted.
Transfers outside the EU
Vercel is based in the United States and may process technical data outside the European Economic Area. These transfers rely on the safeguards described in Vercel’s Data Processing Addendum, such as the EU–US Data Privacy Framework and the European Commission’s Standard Contractual Clauses.
Your rights
You can ask to access, correct or delete your personal data, to restrict or object to its processing, and to receive it in a portable format (Articles 15–21 GDPR). Write to andrea.sargiotto.uni@gmail.com.
You also have the right to lodge a complaint with a supervisory authority. In Italy this is the Garante per la protezione dei dati personali (garanteprivacy.it).
Changes
If the way the site handles data changes — for example, if analytics are ever added — this policy will be updated and the date at the top will change.