Privacy Policy

1. Data controller

The data controller is Leonardo De Marchi, Sst. Castello 1542, I-30122 Venezia (Italy).
Email: leonardo.f.demarchi@gmail.com
Website: leonardodemarchi.com

This notice is provided under Articles 13 and 14 of Regulation (EU) 2016/679 (GDPR) to the people who visit this website or contact me through it.

2. What data I process, why and on what legal basis

• Contact form and email. If you write to me through the form in the footer of the site, or by email, I process your email address and the content of your message, together with the technical data needed to receive the message and protect the form from spam (such as IP address and browser information). I use them only to reply to you. Legal basis: steps taken at your request (Art. 6(1)(b) GDPR) and my legitimate interest in answering the messages I receive (Art. 6(1)(f)). The messages are sent to the email address above and may also be stored in the administration area of the website.
• Navigation data and statistics. The website is hosted on WordPress.com and uses the WordPress.com / Jetpack Stats service to measure visits in aggregated form (for example pages viewed, approximate country, referring website, type of device). This involves the processing of technical data such as the IP address. Legal basis: my legitimate interest in understanding how the website is used and keeping it secure (Art. 6(1)(f)), or your consent where the law requires it.
• Embedded content and external services. Some pages show content from other services: YouTube videos (Video page), a Spotify player (Home page) and the Instagram feed (Home page, through LightWidget). The site also loads its fonts from Fontshare. When a page containing such elements is displayed, the provider can receive your IP address and other technical data and, in some cases, set cookies. See the Cookie Policy.

I do not collect special categories of data, I do not sell your data and I do not carry out automated decision-making or profiling. Providing your data through the contact form is optional, but without it I cannot reply to you.

3. Who receives the data

Your data are accessible to me and to the service providers that make the website work, acting as processors or independent controllers according to their role: Automattic Inc. (WordPress.com hosting, Jetpack, statistics and the contact form), Google (YouTube), Spotify, Meta Platforms (Instagram) and LightWidget (Instagram feed), and Fontshare (fonts). Your data are not disclosed to anyone else, except where required by law.

4. Transfers outside the European Economic Area

Some of these providers are based in, or use servers in, the United States. In that case the transfer relies on the European Commission’s adequacy decision (EU–US Data Privacy Framework) where the provider is certified, or on the Standard Contractual Clauses.

5. How long I keep the data

Messages received through the form or by email are kept for the time necessary to reply and to follow up on your request, and then deleted. Statistical and technical data are kept by the providers according to their own retention terms, described in their privacy policies.

6. Your rights

You have the right to access your data, have them corrected or deleted, restrict or object to their processing, receive them in a portable format and, where the processing is based on consent, withdraw your consent at any time without affecting the processing carried out before. To exercise these rights write to leonardo.f.demarchi@gmail.com.

You also have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali, www.garanteprivacy.it) or with the authority of your country of residence.

7. Minors

This website is not aimed at children under 14 and I do not knowingly collect their data.

8. Changes to this notice

I may update this notice, for example when the website or the services it uses change. The current version is always published on this page.

Last updated: 20 October 2026