Legal

Privacy Policy

Last updated: 10 September 2026

This policy explains what personal data massimoselvi.com collects, why, how long it is kept, and what rights you have as a visitor.

Data controller

Massimo Selvi
Ravenna, Italy
Email: hello@massimoselvi.com

What data is collected and why

Analytics

This site uses no analytics or tracking service. There is no Google Analytics, no Plausible, no Matomo, no advertising network, and no behavioural or cross-site tracking of any kind.

Server logs

This site is served by Amazon CloudFront. Standard access logs are recorded for every request and contain your IP address, browser user-agent string, the URL requested, and the response status. These logs are not used to build a profile of you and are not combined with any other data.

Legal basis: Legitimate interest (Art. 6(1)(f) GDPR) — operating the site securely, detecting and preventing abuse, and diagnosing faults.

Retention: 90 days, after which log files are deleted automatically by a storage lifecycle rule.

Contact form

When you submit the contact form on the Contact page, the following data is collected: your name, email address, optional phone number, and message. This data is used solely to respond to your enquiry.

Legal basis: Legitimate interest / pre-contractual steps (Art. 6(1)(b) and Art. 6(1)(f) GDPR).

Retention: Contact records are deleted automatically 12 months after submission, enforced by a time-to-live rule on the database record. Encrypted point-in-time backups may retain a copy for up to a further 35 days before they too expire.

Browser storage (not cookies)

This site stores two values in your browser that are not cookies and contain no personal data:

localStorage (theme): your light/dark mode preference. Persists until you clear browser storage.
sessionStorage (utm_params): UTM campaign parameters from the URL, used to attribute a single session to a marketing campaign. Cleared automatically when you close the tab.

Third-party data processors

Amazon Web Services (AWS)AWS hosts and delivers this site (Amazon S3 and Amazon CloudFront), which is where server logs are generated and stored. Contact form submissions are processed via AWS API Gateway, stored in Amazon DynamoDB (eu-west-1), and forwarded by Amazon SES. AWS acts as a data processor under a Data Processing Addendum. AWS Privacy Notice

Your rights

Under the GDPR you have the right to: access the personal data held about you; request correction or erasure; restrict or object to processing; and data portability where applicable.

To exercise any of these rights, email hello@massimoselvi.com. Requests will be acknowledged within 72 hours and fulfilled within 30 days.

Supervisory authority

If you believe your data is being processed unlawfully, you have the right to lodge a complaint with the Italian data protection authority:

Garante per la Protezione dei Dati Personali
www.garanteprivacy.it