Privacy policy | SarioDesign

Privacy policy

Last updated on 5 November 2026

This policy explains which personal data the sariodesign.dev website processes, why, and with which tools, in accordance with Article 13 of Regulation (EU) 2016/679 (GDPR).

Data controller

Rosario Russo
Viale Galileo Galilei, 173 – 59100 Prato (PO), Italy
VAT no. IT02582190977
Email: sariodesign.it@gmail.com

Which data I process and why

Contact requests

When you fill in the contact form or email me, I process the data you send: name, email address, project type, estimated budget, the content of your message, and the language of the site you wrote from.

I use this data only to reply to your request and, where relevant, to prepare a proposal. The legal basis is taking steps at your request prior to entering into a contract (Art. 6(1)(b) GDPR). Providing this data is optional, but without it I cannot reply to you.

Browsing data

Like any website, the service hosting the site records some technical data about requests: IP address, browser type, requested page, date and time. This data is needed to run the site and protect it from abuse, based on my legitimate interest (Art. 6(1)(f) GDPR).

Visit statistics

To understand which pages are visited I use Umami and Vercel Web Analytics, plus Vercel Speed Insights to measure site performance. These tools do not use cookies and do not identify individual visitors: they collect aggregated data such as page views, referring site, device type, and country. The legal basis is my legitimate interest in improving the site (Art. 6(1)(f) GDPR).

Fonts

The site’s fonts are loaded from Google Fonts: to do so, your browser connects to Google’s servers, which receive your IP address. The legal basis is my legitimate interest in displaying the site correctly (Art. 6(1)(f) GDPR).

The choices you make in the cookie banner are recorded through Cookiebot, so that I can respect and demonstrate them as required by law (Art. 6(1)(c) GDPR).

Advertising

To promote my services I may use Google Ads and measure how many contact requests come from the ads. These tools use cookies and are only enabled if you give your consent in the banner (Art. 6(1)(a) GDPR). You can withdraw your consent at any time.

Who receives the data

I do not sell or hand over your data to third parties. To run the site I rely on these providers, which process data on my behalf as processors or, for their own services, as independent controllers:

  • Vercel (United States): site hosting, visit statistics, and performance.
  • Resend (United States): delivery of the emails generated by the contact form.
  • Google (Ireland and United States): receiving emails (Gmail), fonts (Google Fonts) and, only with your consent, advertising (Google Ads).
  • Umami: visit statistics.
  • Cookiebot by Usercentrics (European Union): cookie consent management.

Transfers outside the European Union

Some providers are based in the United States. In those cases, data is transferred on the basis of the European Commission’s adequacy decision for providers certified under the EU-U.S. Data Privacy Framework, or of the standard contractual clauses approved by the Commission.

How long I keep the data

  • Contact requests: for as long as needed to reply and to manage any professional relationship that follows. If no engagement follows, I delete them within 24 months of the last contact. If an engagement follows, data required by tax law is kept for 10 years.
  • Browsing data: for a limited period, according to the hosting provider’s settings.
  • Cookie preferences: until the expiry shown in the cookie list below.

Your rights

At any time you can ask me to access, correct, or delete your data, restrict its processing, receive it in a structured format (portability), or object to processing based on legitimate interest (Arts. 15–22 GDPR). If you gave your consent, you can withdraw it whenever you like, without affecting the lawfulness of processing carried out before the withdrawal.

To exercise your rights, write to sariodesign.it@gmail.com.

If you believe the processing of your data breaches the law, you can lodge a complaint with the Italian Data Protection Authority, the Garante per la protezione dei dati personali (garanteprivacy.it), or with the authority of your country.

Changes to this policy

I may update this policy, for example when I add new services to the site. The date of the last update is shown at the top of the page.

Cookies

The site uses technical cookies needed for it to work, such as the one that stores your cookie choices: these do not require consent. Other cookies, such as those from Google Ads, are only set if you accept them in the banner. You can change your choices at any time with the “Cookie preferences” link at the bottom of every page.

The list below is generated and kept up to date automatically by Cookiebot.