(privacy policy)
What happensto your data.
Information notice pursuant to articles 13 and 14 of Regulation (EU) 2016/679. It concerns this site and the mail that reaches me from here. This site has no forms to fill in and does not use cookies on its own initiative: the only statistics tool, Google Analytics, starts only if you accept it from the banner you see on your first visit.
Last updated: 9 October 2026
Who processes the data
The data controller is Andrea Veramonti, graphic and web designer, Alba Adriatica (TE), Italy — VAT number 02053870438.
For anything concerning this notice, including the exercise of the rights listed at point 08, write to info@andreaveramonti.it or call (+39) 389 5515643.
No data protection officer has been appointed: the conditions of article 37 of the Regulation do not apply.
Which data, and why
Browsing data. To deliver a page the server records what every server records: IP address, date and time of the request, requested address, type of browser and operating system, outcome of the request. These are data that I do not associate with a person and that I do not consult except when something doesn't work or the site is attacked. Legal basis: my legitimate interest in keeping the site up and secure (art. 6.1.f).
What you write to me. If you send me an email or call me, I process what is in it: name, address, number, the content of the message and what you add yourself. Legal basis: answering a request is a pre-contractual measure (art. 6.1.b) and, when the request does not lead to an assignment, my legitimate interest in giving you an answer anyway (art. 6.1.f).
Browsing statistics, only if you consent. I use Google Analytics to know which pages are read most: pages viewed, approximate origin, type of device, in aggregate form. It does not start until you click “Accept” in the banner, and if you refuse or don't choose it stays off. Legal basis: your consent (art. 6.1.a). You can withdraw it at any time from the cookie policy, which also explains which cookies it sets and how long they last.
A technical memory in the browser. The site writes an entry in sessionStorage, called av-transizione, to make the animation match between the page you leave and the one you open. It contains the title of the project you clicked on and two coordinates. It stays in the tab, does not leave your computer, and the page that arrives deletes it as soon as it has read it. It is not a cookie and does not need consent. The choice you make in the banner above, on the other hand, stays in localStorage, under av-consenso, so I don't ask you again on every page.
There is no profiling, no advertising, no automated decisions. I neither buy nor sell contact lists.
The email composer
On the contact page there is a sentence with four boxes to fill in. It is not a form that sends: what you write stays in your page, and the button opens your mail program with subject and text already written. Until you press send in your mail program, those words have not left your computer and I have not seen them.
There is no server that receives that form, and no external form-collection service in between.
Who else touches the data
The site is built with WordPress and almost everything you see comes from this domain: the animation libraries and the 3D library sit on the server together with the site's theme, and are not requested from anyone else. Three providers remain: one always receives a request from your browser while you read, one only if you accept statistics.
Hostinger
It hosts the site. The servers are in France and the backups in Lithuania: inside the European Union, in both cases. It processes browsing data on my behalf, as processor pursuant to article 28 of the Regulation.
Adobe Fonts
It delivers the page's two typefaces (use.typekit.net, p.typekit.net). It receives the IP address and technical data of the request. It writes no cookies for this service. The licence of these typefaces does not allow keeping them on my server.
Google Analytics (Google Ireland Limited)
Browsing statistics in aggregate form, only if you accept from the banner. It processes the data as an independent controller, according to the terms published by Google for Analytics. Details on cookies in the cookie policy.
Outside here, the data may be seen by my accountant and the consultants who assist me, when the law requires it, and by the judicial authority on legitimate request. By nobody else.
The links to Instagram, Behance, Dribbble, LinkedIn, Vimeo and to the CV on Google Drive are just links: no content from those sites is embedded in this page, and nothing goes out to them until you click. When you click, the notice of that site applies, not this one.
Transfers outside the European Union
The pages, images and server logs do not leave the European Union: they are in France, with backups in Lithuania.
Adobe Inc. and Google LLC are based in the United States: the request your browser sends to download the typefaces, or for statistics if you accepted, with your IP address, may be processed there. The transfer takes place on the basis of the safeguards provided by Chapter V of the Regulation — the EU-U.S. Data Privacy Framework adequacy decision, to which both Adobe and Google adhere, and standard contractual clauses — as declared by the two companies in their own notices.
The transfer to Adobe takes place in any case, to download the page's typefaces. The one to Google takes place only if you accept statistics, and you can avoid it by refusing or withdrawing consent from the cookie policy. If you prefer that your browser not even talk to Adobe, it is enough to block third-party requests: the page stays readable and working, only the typefaces change.
How long
Browsing data: they stay in the hosting provider's logs for the technical time needed for security and diagnostics, then are overwritten.
Google Analytics, if you accept: Google keeps the data for the period set in the property — normally no longer than fourteen months, the basic limit of Google Analytics 4 — then deletes it automatically.
Correspondence that does not lead to an assignment: I keep it as long as it serves to answer and to remember what we talked about, and I delete it when it is no longer needed.
Correspondence and documents of an assignment: for the whole duration of the work and then for the ten years that tax and accounting obligations require to be kept (art. 2220 of the Italian Civil Code).
The av-transizione entry: the time it takes to open the next page. The page that arrives deletes it, and in any case it dies when you close the tab.
If you have to give it to me
To read the site you don't have to give anything: no data is asked of you and there is no reserved area. Browsing data, yes, is unavoidable: without your IP address the server would not know to whom to deliver the page.
When you write to me, you choose the data. If you don't tell me who you are and what you need I cannot answer you, but that is the only consequence: there is no obligation.
Your rights
Articles 15 to 22 of the Regulation give you the right to ask me:
to know whether I process data about you and to have a copy of it (access);
to correct or complete it (rectification);
to delete it (erasure);
to freeze it instead of deleting it, until a matter is cleared up (restriction);
to have in a file what you gave me, or to have it passed to someone else (portability);
to stop a processing that relies on my legitimate interest (objection).
A single email to info@andreaveramonti.it is enough. I reply within one month, as article 12 provides; if the request is complex I tell you so and the deadlines are extended by two months. I don't ask for payment to do it.
If something goes wrong
You can lodge a complaint with the Garante per la protezione dei dati personali (the Italian data protection authority) — Piazza Venezia 11, 00187 Rome — or turn to the ordinary court. Procedures and forms are at garanteprivacy.it.
But first try writing to me: almost everything is solved with an email.
Minors and changes
This site is not aimed at children under fourteen and does not knowingly collect their data. If you notice that it has happened, write to me and I will delete it.
If I change something — a provider, a tool, a way of working — I update this page and change the date at the top. The version you read here is the one that applies.