Privacy Policy ofwww.gdldesign.it

Last updated:22/08/2026

1. Data Controller

The Data Controller isGabriele De Lucaoperator of the websitewww.gdldesign.it(a personal industrial design portfolio)

For any request related to this Privacy Policy or to exercise the rights described below, please contact the Data Controller at:

📧privacy@gdldesign.it

2. Types of Data Collected

The website collects only navigation data and data voluntarily provided by the user, specifically:

• Navigation data (server logs):during normal operation, the computer systems and software procedures used to run the website acquire certain data whose transmission is implicit in the use of internet communication protocols (e.g. IP address, browser type, operating system). This data is processed by the hosting provider (Aruba S.p.A.) for security and website functioning purposes.
• Anonymized statistical data:the website uses theWP Statistics, plugin, configured withIP hashingandIP anonymizationThis means visitor IP addresses are not stored in a readable or user-identifiable form. Collected data is used solely for statistical purposes (e.g. number of visits, most visited pages) and is processed directly on the website's own server, without being sent to third-party services (such as Google Analytics).
• Voluntarily provided data:the website does not include contact forms. Should a user voluntarily write to the email address shown on the site, any data provided (e.g. name, email address, message content) is processed solely to respond to the request.

The websitedoes not usethird-party embedded media (videos, maps, social embeds): all content on the site is exclusively owned by the Data Controller and hosted directly on the website.

3. Purpose and Legal Basis of Processing

4. Cookies

The website uses a minimal number of technical cookies, necessary for some of its components to function:

Given the configuration with IP hashing and anonymization enabled,WP Statistics does not set identifying tracking cookies.

There are no profiling, marketing, or third-party cookies on the site. Since no non-technical cookies are installed,a consent banner is not requiredunder applicable regulations; information on the technical cookies used is nonetheless provided in this section in compliance with the principle of transparency.

5. Data Retention

Anonymized statistical data collected via WP Statistics is retained for a maximum period of112 months, after which it is automatically deleted.

Emails received are retained for as long as necessary to handle the request and subsequently archived according to standard correspondence management practices.

6. Data Transfer

Data is processed and hosted on servers located in Italy/European Union (Aruba S.p.A. hosting). No transfer of data to non-EU countries takes place.

7. Data Subject Rights

You may exercise, at any time by writing toprivacy@gdldesign.itthe rights set out in Articles 15-22 of the GDPR, including:

• the right to access your personal data;
• the right to rectify or erase your data;
• the right to restrict processing;
• the right to object to processing;
• the right to data portability.

You may also lodge a complaint with the competent supervisory authority (in Italy, theGarante per la Protezione dei Dati Personali-www.garanteprivacy.it).

8. Changes to this Privacy Policy

The Data Controller reserves the right to modify this Privacy Policy at any time, giving notice to users on this page. Please check this page regularly and refer to the "last updated" date at the top.