How I handle your data

Who the data controller is

The controller is Alessandro Montibelli, IT consultant.
Email: info@alessandromontibelli.com
Phone: +39 351 9230545

No Data Protection Officer has been appointed, as none of the cases in Article 37 of the GDPR applies. For anything concerning your data, write to the address above.

What data I collect

Data you give me through the contact form

The form on the Contact page collects your name, email address and the text of your message (required), plus phone, company and type of enquiry (optional). You can write whatever you like in the message; please do not include special category data — health, beliefs, criminal matters — because answering a technical question does not require it.

At present the form does not send anything to a server belonging to this site: it opens the mail program on your device with the message pre-filled, and the message is sent from your own mailbox. The data therefore reaches me as an ordinary email and stays in my mailbox.

Data that arrives if you write or call

If you contact me by email, phone or LinkedIn, I process the data in that communication for the same purpose: replying to you and, if we go on to work together, managing the engagement.

Data collected automatically

The site uses Google Analytics 4 to see which pages get read, in aggregate form. The Google script is loaded only after you have explicitly consented: until you choose from the banner, or if you choose "Essential only", the page does not contact Google's servers and no analytics cookie is created.

If you do consent, Google Analytics records navigation data — pages viewed, time on site, device and browser type, referrer — and an identifier held in a cookie. Your IP address is processed in anonymised form.

Fonts and every other file on this site are served from the site's own server: nothing is fetched from Google Fonts or any other external network, so simply opening a page does not disclose your IP address to a third party.

Cookies and browser storage

The site sets no first-party cookies. It stores one item in your browser's local storage, under the key am-consent: the choice you made on the banner, so you are not asked again on every page. That stays on your device and is not sent anywhere. You can remove it by clearing the site's data in your browser settings, or change your mind at any time through the Cookie preferences link at the bottom of every page.

If you consent to Analytics, Google sets its own analytics cookies under its own privacy notice.

Why I process this data, and on what legal basis

• To answer your enquiry and prepare a quote if one follows. Legal basis: steps taken at your request prior to entering a contract (Art. 6(1)(b)).
• To manage the engagement if you become a client, including accounting and tax obligations. Legal basis: performance of a contract and legal obligation (Art. 6(1)(b) and 6(1)(c)).
• To understand how the site is used through aggregate statistics. Legal basis: your consent (Art. 6(1)(a)), withdrawable at any time.
• To establish or defend a legal claim, should that become necessary. Legal basis: legitimate interest (Art. 6(1)(f)).

Your data is not used for profiling, you are not added to any mailing list unless you ask, and no automated decisions are made about you.

How long I keep it

• Enquiries that do not lead to work: at most 24 months from the last contact, then the message is deleted.
• Client data: for the duration of the engagement and then for 10 years, as Italian tax and civil law requires.
• Google Analytics data: according to the retention set on the Analytics property, in any case no longer than 14 months.
• Your cookie choice: stays in your browser until you clear it.

Who else sees your data

Data is never sold, rented or traded. It may be processed, strictly as far as necessary, by:

• the hosting provider that runs the site and the email service;
• Google Ireland Limited, only if you consented to statistics;
• my accountant, for bookkeeping, once you are a client;
• public authorities, where the law requires it.

Some of these providers may process data outside the European Union. Where that happens, the transfer relies on the European Commission's Standard Contractual Clauses or on an adequacy decision.

Your rights

You can ask me at any time to give you access to your data, correct it, delete it, restrict its processing, provide it in a machine-readable format so you can take it elsewhere, or object to processing based on legitimate interest. If you consented to statistics you can withdraw that consent whenever you like, without affecting what was done beforehand.

To exercise a right, an email to info@alessandromontibelli.com is enough: I reply within 30 days. If you believe the processing breaches the GDPR you can complain to the Italian data protection authority (garanteprivacy.it) or to the authority in the country where you live.

Is the form compulsory?

No. You can always write or call directly. Filling in the required fields matters only so that I can reply: without a name and an email address there is no way for me to.

Changes to this notice

If the way the site collects data changes — for instance if the form moves from mailto to a real sending service — I update this page and the date below. Significant changes are flagged in the banner.

Last updated: 13 September 2026