Privacy Policy

This policy explains how personal data is processed when you visit filippobellisola.com and its related sections (including the gear, media kit and calling card pages), in accordance with Regulation (EU) 2016/679 (GDPR), Italian Legislative Decree 196/2003 as amended and the Italian Data Protection Authority’s guidelines on cookies and other tracking tools.

Data controller

Filippo Bellisola
Verona, Italy
VAT no. 04688200239
Email: info@filippobellisola.com

For any privacy-related request you can write to the email address above. A data protection officer has not been appointed, as it is not required for this activity.

What data is processed

This website is a professional portfolio. It has no user accounts and no general contact form. The data processed is:

• Browsing data: technical logs generated by the web server (IP address, browser and device type, operating system, pages requested, date and time, referring page).
• Visit statistics: aggregated counts of visits collected with Umami, a privacy-friendly analytics tool that uses no cookies, does not store IP addresses and does not identify or follow individual visitors (see “Statistics” below).
• Calling card email: on the calling card page you can type your email address to receive my contact details. The address is used only to send you that single email and is not added to any list.
• Emails you send me: if you write to info@filippobellisola.com, your address, name (if given) and message are handled in my email account.

Purposes and legal basis

• Operating and securing the website (server logs): legitimate interest, Art. 6(1)(f) GDPR.
• Aggregated visit statistics, to understand which pages and channels work: legitimate interest, Art. 6(1)(f) GDPR. No cookies are used and no consent is required.
• Sending you the calling card you requested: your request, Art. 6(1)(b) GDPR.
• Answering your emails about collaborations, projects or quotes: pre-contractual steps taken at your request, Art. 6(1)(b) GDPR.

Statistics

Visit statistics are collected with Umami (umami.is). Umami does not set cookies, does not store IP addresses and does not create profiles: each visit is turned into anonymous, aggregated figures (pages viewed, country, device type, referring website). No data is shared with advertising networks.

Content loaded from other services

Some parts of the website are delivered by external providers. When your browser loads them, these providers receive your IP address and basic technical data:

• Cloudinary: delivery of images and videos.
• YouTube (Google): video thumbnails are loaded from YouTube’s image servers. Videos are embedded in YouTube’s privacy-enhanced mode (youtube-nocookie.com) and are loaded only when you click play; from that moment YouTube’s own privacy policy applies.
• Microlink (microlink.io): used to fetch preview images of some portfolio videos.
• Amazon: product images on the gear page are loaded from Amazon’s servers. Links to Amazon and other retailers are affiliate or reference links; those stores process your data under their own policies only if you click them.

All fonts are served directly from this website: no external font service is used.

Cookies and browser storage

This website does not use profiling, marketing or analytics cookies, so no cookie banner is required. To work properly it only stores small technical items in your browser:

• Session storage: remembers that you unlocked the password-protected media kit or calling card, until you close the browser.
• Local storage: a short-lived copy of public social media figures shown in the media kit, so the page loads faster, and preferences of the calling card page.
• Exclusion flag: only if you use the dedicated opt-out page, a flag stops your visits from being counted in the statistics.

None of these items is used to identify you. You can delete them at any time from your browser settings. YouTube may set its own cookies only after you choose to play a video.

Recipients and transfers

Data is handled by the providers needed to run the website: the web hosting provider (server, logs and the calling card email), Umami (statistics), Cloudinary, Google/YouTube, Microlink and Amazon as described above. They act as processors or as independent controllers for their own services. Data is not sold or shared for marketing.

Some of these providers may process data outside the European Economic Area, for example in the United States. Such transfers rely on the EU-U.S. Data Privacy Framework or on the standard contractual clauses adopted by the European Commission.

Data retention

• Server logs: usually up to 90 days, then deleted automatically.
• Visit statistics: kept only as anonymous aggregated figures.
• Calling card email: used for the single message you requested; a copy may remain in the mail server logs for the time set by the hosting provider.
• Email correspondence: for as long as needed to handle your request, or longer where required by tax and accounting obligations.

Your rights

Under Articles 15 to 22 GDPR you can ask to access your data, correct it, erase it, restrict or object to its processing, and receive it in a portable format. To exercise these rights write to info@filippobellisola.com.

You also have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali, garanteprivacy.it).

Automated decision-making

No automated decision-making or profiling takes place.

Changes

This policy may be updated when the website changes. The “Last updated” date at the top shows the latest revision.