Privacy

The data controller is me, Francesco Sacchini, trading as francesac.design (VAT no. IT02001940499). If you have any questions about this page or your data, email me at ciao@francesac-design.it.

Only what you enter in the contact form: your name, your email address, the type of project and your message. I need your name, email address and message in order to reply; choosing a project type is optional. If you contact me directly by email or on WhatsApp, the same applies to whatever you send me.

If you accept analytics, I also collect the visit data gathered by Google Analytics and Microsoft Clarity, described in section (06). For all visitors, even without consent, I collect the anonymous visit counts from Cloudflare Web Analytics, described in the same section.

To block automated messages, the server keeps an encrypted fingerprint of your IP address, which is used only to count how many messages are sent within an hour. I can’t see it.

To reply to you and, if it leads to a job, to prepare a quote and manage the project. This is what you’re asking me to do when you contact me, so no separate consent is required (Article 6(1)(b) GDPR).

Analytics help me understand which pages work and which don’t, and they only run with your consent (Article 6(1)(a) GDPR).

I won’t sign you up to any newsletter, I don’t pass your data to anyone for advertising, and I don’t sell it.

Messages sent through the form reach me as an email in my inbox, which is hosted by Aruba, the same provider that hosts this website.

I keep your data for as long as it is needed to follow up our conversation and any work that comes out of it. After that I delete it, except for anything the law requires me to keep, such as invoices and contracts.

You can ask me at any time to access the data I hold about you, to correct or erase it, to restrict how it is used or to receive it in a format you can take elsewhere, and you can object to its use. Just send an email to ciao@francesac-design.it.

If you believe I have mishandled your data, you can lodge a complaint with the Italian data protection authority, the Garante per la protezione dei dati personali.

This website only uses cookies if you give me permission, through the banner that appears on your first visit. If you say yes, two analytics tools are switched on; if you don’t, neither of them runs.

Google Analytics, provided by Google Ireland, counts visits and page views. It sets the cookies _ga and _ga_LM2QDGCQ5C, which last 6 months and are used to recognise returning visitors.

Microsoft Clarity, provided by Microsoft Ireland, records how you move around the page: where you click, how far you scroll, where you pause. It helps me see where the website is not working smoothly. Anything you type into form fields, and any numbers, remain masked and are never received by Clarity. It sets the cookies _clck, which lasts one year, and _clsk, which lasts one day.

Google and Microsoft may also process this data in the United States, under the safeguards of the EU-US Data Privacy Framework. I have switched off the advertising features in both.

There is also a counter that runs for everyone, even without consent, because it doesn’t use cookies: Cloudflare Web Analytics, provided by Cloudflare. It counts visits and page views, which website you came from, what device you are using and which country you are in, but it stores nothing on your device and doesn’t recognise you from one visit to the next. Cloudflare may also process this data in the United States, under the same safeguards.

You can change your mind at any time, here (change your choice) or through the ‘Cookies’ link at the bottom of the page. If you withdraw your consent, the cookies are deleted.

Apart from this, your browser only stores a few technical notes, for example where you were on the page and your choice about analytics, which stays on your device for 6 months.

The record player on the About page plays my playlist through the Spotify player, provided by Spotify AB, and only connects when you press play. From that point Spotify sets the cookies sp_t, which lasts one year, and sp_landing, which lasts one day, and Spotify’s own terms apply.

If you open Instagram, LinkedIn or WhatsApp from my links, the terms of those services apply from that point on.