Privacy notice

1. Who is responsible for your data

The data controller is Andrea Somenzi, Via Michelangelo 110, 25124 Brescia (BS), Italia. Contact for anything about your data: andreas.network08@gmail.com.

No Data Protection Officer has been appointed, as none is required for this service.

2. What data we process

If you subscribe to emails or to the platform waitlist: your email address; the areas, categories, levels, language, digest frequency, alert and waitlist choices you selected; which page you signed up from; the times you signed up and confirmed; a private link code (token) that lets you change or cancel your subscription; and a log of which emails were sent to you.

If you create a calendar link: the filter you chose and a random code. The link is anonymous — it is not tied to an email address — and we record only when it was last polled and how often, to count active calendar subscriptions.

If you only browse the website, use the public API or the calendar feed, you do not have to give us any personal data. Our servers record technical data such as IP address, time and requested page in logs, used for security and troubleshooting, and IP addresses are briefly counted (for up to an hour) to limit abuse. Log retention: 30 days.

We do not use cookies or advertising. To see how the site is used we use Umami, a cookie-free analytics tool self-hosted on our own server, which does not store IP addresses or identify you; it counts page views and visits in aggregate. We never keep data about individual visitors.

3. Why we process it and on what legal basis

To send you the digests and alerts you asked for, based on your consent (Art. 6(1)(a) GDPR), given by subscribing and confirming through the link we email you (double opt-in). We do not use your data for marketing, profiling or anything else, and there is no automated decision-making with legal or similarly significant effects on you.

To keep the service secure and working (logs, abuse limits) and to measure its use in aggregate (cookie-free analytics, anonymous action counts, calendar-link polls), based on our legitimate interest (Art. 6(1)(f) GDPR).

Giving us your email is optional, but without it we cannot send you emails.

4. Who receives your data

We do not sell or share your data. It is handled only by service providers acting on our instructions (processors): hosting: OVH S.r.l. (Via Carlo Imbonati 18, 20159 Milano, Italy), server located in Warsaw, Poland; email sending: Brevo SAS, France; web analytics: Umami, self-hosted on our own server (no third party involved); backups: stored on the hosting server and periodically copied off-server by the site operator (in Italy).

5. Transfers outside the EU/EEA

We do not transfer your data outside the EU/EEA. Our hosting provider's servers are in Poland, and our email provider is based in France.

6. How long we keep it

Sign-ups you never confirm are deleted after 7 days. Confirmed subscribers are kept until they unsubscribe; unsubscribing deletes your address, preferences, token and sending log immediately. The sending log is in any case deleted after 90 days.

Daily backups are kept for 14 days, so data you erased may remain in a backup for up to that long, and is not restored except after a system failure.

7. How we protect it

Email addresses are stored encrypted, connections use HTTPS, access to the systems is restricted, and requests are rate-limited. No system is perfectly secure; if a breach put your rights at risk we will notify you and the authorities as the law requires.

8. Your rights

You can ask for access to your data, correction, erasure, restriction, portability and object to processing (Arts. 15–21 GDPR), and withdraw your consent at any time without affecting what was done before. You can change your preferences or unsubscribe yourself from the link in every email. For anything else, write to andreas.network08@gmail.com; we reply within one month.

You also have the right to complain to the Italian data protection authority, the Garante per la protezione dei dati personali (www.garanteprivacy.it), or to the authority of your own EU country.

9. Changes

We may update this notice; the date above shows the latest version. Material changes affecting subscribers will be communicated by email.