Privacy
Data controller
The data controller is:
Bernardo DestitoVAT no. 13373980013
info@bernardodestito.com
Data processed and purposes
When you use the contact form, the information you voluntarily provide is processed, including your name, company, email address and information concerning your project or technical enquiry.
These data are used solely to receive and manage your enquiry, reply to your message, assess a possible professional engagement and take pre-contractual steps requested by you.
The legal basis is Article 6(1)(b) GDPR, concerning steps taken at the request of the data subject prior to entering into a contract. Where correspondence must be retained to comply with legal, tax or administrative obligations, Article 6(1)(c) GDPR may also apply.
Consent is not required to submit an ordinary professional enquiry.
Spam protection and Cloudflare Turnstile
The contact form uses Cloudflare Turnstile to distinguish legitimate visitors from automated traffic and protect the website against abuse.
Turnstile may process technical signals such as IP address, TLS fingerprint, User-Agent, site key and the associated origin. Cloudflare states that Turnstile does not access, store or transmit user communications, form entries or other page inputs.
This processing is based on the controller’s legitimate interest in website security, abuse prevention and reliable operation under Article 6(1)(f) GDPR.
Email delivery through Resend
Messages submitted through the contact form are delivered using Resend, which acts as a technical email delivery provider for messages sent to the professional mailbox.
Resend therefore processes message content and the data required for delivery. According to the provider’s current documentation, email and log data on Free, Pro and Scale plans are retained for 30 days.
Resend states that customer data, including message content and delivery logs, is stored in the United States. Transfers to the United States are covered by the Standard Contractual Clauses in its Data Processing Addendum, with the EU-U.S. Data Privacy Framework as an additional transfer mechanism.
Email management
Professional email is managed through Google Workspace. Google provides Workspace customers with a Cloud Data Processing Addendum addressing its obligations as a processor under applicable data protection laws.
Correspondence may be retained for as long as necessary to handle the enquiry and, where a professional relationship is established, for the period required to manage that relationship and comply with applicable administrative, tax or legal obligations.
Technical and security data
Cloudflare also provides network infrastructure, edge services and website security. In connection with these services, technical data required for the secure operation of the website may be processed, including IP addresses, HTTP request information and connection data.
Cloudflare operates under its applicable contractual terms and Data Processing Addendum.
Cookies and similar technologies
The website does not use advertising cookies, profiling technologies or analytics.
A first-party functional cookie named bd_locale is used to remember the visitor’s selected language and prevent that preference from being overridden by automatic localisation behaviour. It is not used for advertising or profiling.
Cloudflare Turnstile processes signals strictly necessary for its security function. Prior consent is not requested for these strictly necessary technologies.
Disclosure and international transfers
Personal data are not sold or used for advertising purposes.
They may be processed by technical providers required to operate the website and manage communications, in particular Cloudflare, Resend and Google Workspace, according to their respective roles and contractual arrangements.
Some of these providers may involve transfers outside the European Economic Area. Such transfers are handled using the safeguards provided by the GDPR and the applicable provider agreements.
Providing personal data
Providing data through the contact form is voluntary. However, fields marked as required are necessary to understand and respond to the enquiry.
Please do not submit special categories of personal data or other personal information that is not necessary for your enquiry.
Your rights
Where provided by the GDPR, you may request access to your personal data, rectification, erasure, restriction of processing, data portability, object to processing based on legitimate interests and exercise any other rights available under applicable law.
Requests may be sent to the contact email shown on this page.
You also have the right to lodge a complaint with the competent data protection supervisory authority.
Changes to this notice
This notice may be updated if the processing activities, service providers or applicable legal requirements change. The version published on this page is the version in force at the time of access.