Skip to main content

Privacy Policy

Last updated: 8th October 2026

1. Data Controller

The data controller is Andrea Losavio, VAT number 12705460967. For any questions regarding the processing of your personal data, you can contact me at info@andrealosavio.com.

2. Data Collected

This website processes the following categories of personal data:

  • Full name, entered in the contact form
  • Email address, entered in the contact form
  • Message content (description of your challenge or request)
  • The service you are interested in, if you write to me from one of the services presented on the site
  • IP address and technical request data (browser, page visited, date and time), processed by the hosting provider and, for the contact form, by the anti-spam rate limit
  • Aggregated, anonymous visit statistics: page visited, referring site, country, device type and browser, page load speed metrics

You provide the contact form data voluntarily when you submit it: without your name, email and message I cannot reply to you. The other data is generated automatically as you browse.

3. Purpose of Processing

Your personal data is processed exclusively for the following purposes:

  • To respond to your contact request
  • To send you a confirmation email acknowledging receipt of your message
  • To protect the contact form from spam and abuse
  • To understand, in aggregate, which pages are read and how fast the site is

4. Legal Basis

Processing of the contact form data is based on your explicit consent, given by ticking the consent checkbox before submitting (Art. 6(1)(a) GDPR). Protecting the form from spam and abuse and collecting anonymous visit statistics are based on my legitimate interest in keeping the site secure and understanding how it is used (Art. 6(1)(f) GDPR).

5. Third-Party Services

The site is hosted on Vercel, which receives your browser's requests and processes their technical data, including your IP address, to serve the pages. Vercel also provides Web Analytics and Speed Insights, which collect the anonymous statistics described in section 2 without using cookies: Web Analytics recognizes visits through a hash of the request that is discarded after 24 hours, and Speed Insights does not identify the visitor at all. Contact form data is sent through Resend, an email delivery service that delivers the confirmation to you and the notification to me, and it ends up in my mailbox. Vercel and Resend act as data processors on my behalf, in accordance with their respective privacy policies. Finally, if you open the window to vote for a cat, your browser connects directly to The Cat API (thecatapi.com) to load the image and record the vote: the vote is anonymous, but as with any website The Cat API receives your IP address. If you never open that window, no request is made to The Cat API.

6. Transfers Outside the EU

Vercel and Resend are based in the United States, so some data may be processed outside the European Union. These transfers rely on the safeguards provided by the GDPR, such as the Standard Contractual Clauses approved by the European Commission and, where applicable, the EU-U.S. Data Privacy Framework.

7. Data Retention

Contact form data is kept only for as long as strictly necessary to respond to your request and to handle any collaboration that follows; it is then deleted, unless retention is required by law. The IP address used by the anti-spam rate limit is held in memory for 15 minutes only and is never saved. Technical request data is kept by Vercel for a limited period, according to its policies, and visit statistics are kept only in aggregated, anonymous form.

8. Your Rights

Under the GDPR, you have the following rights:

  • Right of access – to know what data I hold about you
  • Right to rectification – to correct inaccurate data
  • Right to erasure – to request deletion of your data
  • Right to restriction of processing
  • Right to data portability
  • Right to object to the processing of your data
  • Right to withdraw consent at any time, without affecting the lawfulness of processing carried out before the withdrawal
  • Right to lodge a complaint with a supervisory authority, in Italy the Garante per la protezione dei dati personali (garanteprivacy.it)

To exercise any of these rights, contact me at info@andrealosavio.com.

9. Cookies

This website uses no profiling cookies and no analytics cookies: Vercel's statistics work without cookies. The only cookie that may be set is a technical one, NEXT_LOCALE, which remembers the language you picked: it is created only if you switch to a language other than your browser's, and it expires when you close the browser. Being strictly necessary, it does not require consent.

10. Site Content and Use of AI

The text on this site is written by me and refined with the help of artificial intelligence tools, which I use to polish the wording and to translate between Italian and English. The content, figures and experiences described are real and verified by me. AI is not used to process the data you send through the contact form: that data only goes through the services listed in section 5.

11. Changes to This Policy

This privacy policy may be updated from time to time. Any changes will be posted on this page with an updated revision date.