Privacy Policy

Who I am

This website is run by Piero Nanni, a web developer based in London, United Kingdom. I am the data controller for the personal data collected through this site. You can reach me at [email protected] or through the contact form.

This policy explains what personal data I collect, why I collect it and what rights you have under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

What I collect and why

Contact form

When you send a message through the contact form I collect:

• your name, email address and message;
• your IP address and browser user agent, to help spot spam and abuse.

I use this data only to read and reply to your enquiry. The legal basis is your consent, given when you tick the privacy box, and my legitimate interest in answering messages and keeping the form free of spam.

CV downloads

When you open my CV I record the time of the request, your browser user agent and the country your request came from (as reported by my CDN). I do not store your IP address for this. I use it to see how often the CV is viewed and to filter out bots, which is my legitimate interest.

Server logs and error reports

Like most websites, the server keeps technical logs of requests, which can include your IP address, browser and the pages you visited. If something breaks, an error report is sent to Sentry so I can fix it, and it may include similar request details. The legal basis is my legitimate interest in keeping the site secure and working.

Cookies

This site sets only the cookies it needs to work, and uses no analytics or advertising tools of its own. The contact page also loads Google reCAPTCHA, which sets a cookie to block spam, and an embedded Spotify player, which is only loaded if you accept marketing cookies. See the Cookie Policy for the full list.

Who I share it with

I do not sell your data or use it for marketing. It is shared only with the services that help run this site:

• Google reCAPTCHA, which checks contact form submissions for spam. Google's Privacy Policy applies.
• Resend, which delivers contact form messages to my inbox by email.
• Sentry, which collects error reports.
• Spotify, whose playlist player is embedded on the contact page. The player only loads if you accept marketing cookies. Once it loads, your browser connects to Spotify, which receives your IP address and browser details and sets cookies. The legal basis is your consent, which you can withdraw at any time from "Cookie settings" in the footer. Spotify's Privacy Policy applies.
• Cloudflare and my hosting provider, which serve and protect the website.

Some of these providers may process data outside the UK, for example in the United States. Where they do, the transfer is covered by appropriate safeguards such as the UK International Data Transfer Agreement or the UK Extension to the EU-US Data Privacy Framework.

How long I keep it

Contact form messages are kept only for as long as I need them to deal with your enquiry and any work that follows from it. CV view records are kept as simple statistics. Server logs and error reports are kept for a limited time and then deleted. You can ask me to delete your data at any time.

Your rights

Under UK data protection law you have the right to:

• ask for a copy of the personal data I hold about you;
• ask me to correct data that is wrong or incomplete;
• ask me to delete your data;
• object to, or ask me to restrict, how I use your data;
• withdraw your consent at any time, without affecting anything done before you withdrew it;
• receive your data in a portable format.

To use any of these rights, email me at [email protected]. I will reply within one month.

If you are unhappy with how I have handled your data, you can complain to the Information Commissioner's Office (ICO) at ico.org.uk.

Changes to this policy

If I change how I handle personal data I will update this page and the date at the top.