Privacy notice

Who is responsible for your data

The data controller is Paolo Crespi, Milan, Italy. You can reach me at the email address shown in the Contact section of this site.

What the form collects

When you use the request form, I receive the data you type in: your name, work email, company or firm, your role (optional) and your message (optional), together with the date and the type of request (CV or message). Your IP address is used only to prevent abuse of the form and appears in the notification email.

Why and on what basis

I use this data for one purpose only: to answer your request and, when you ask for it, to send you my full CV as a password-protected PDF. The legal basis is your consent, given by ticking the box next to the form, and my legitimate interest in replying to a message you sent me. There is no profiling and no automated decision-making.

How long it is kept

Requests are not stored on this website: they are sent to me by email and nothing else is kept on the server. The email stays in my mailbox for as long as our conversation is relevant.

Who else sees it

Nobody else reads it, and the data is not shared or sold. The processors involved, all acting on my instructions, are the hosting provider of this website, the email service that delivers the notification to me, and Akismet (Automattic Inc.), which checks each submission for spam. For that check the form sends Akismet your name, email, company, role, message, IP address and browser type; Automattic may process this data in the United States (see Automattic’s privacy policy). Submissions Akismet identifies as clear spam are discarded: they are neither emailed to me nor stored. Doubtful ones still reach me, marked as possible spam, so that a genuine request is never lost.

Cookies and analytics

This site uses Google Analytics 4 to count visits and understand which sections are read, and only if you accept it in the banner shown on your first visit. Until you accept, no Google script is loaded and no analytics cookie is set. If you accept, Google Analytics sets its own cookies and processes technical data about your visit (pages viewed, device and browser, approximate location from a truncated IP address); the data is processed by Google Ireland Ltd on my behalf and is not used for advertising. Your choice is remembered in a technical first-party cookie for six months; you can change it at any time with the “Cookies” link in the footer. No other analytics, advertising or third-party embeds are present.

Your rights

Under the GDPR you may ask me at any time to access, correct or delete the data you sent, to restrict its use or to withdraw your consent. Write to the email address in the Contact section. You also have the right to lodge a complaint with the Italian data protection authority (Garante per la protezione dei dati personali).