Privacy policy

Data controller

AptecStudio is an independent project of Adriano Calogero Patrizio, a private individual residing in Italy, who is the data controller.

Email: [email protected]

Data processed

• Browsing data: IP address, date and time of the request, requested page, browser and operating system. It is recorded automatically by the systems that deliver the website.
• Data sent by email: address, name and content of the messages you choose to send to AptecStudio, including any attachments.

The website has no forms, requires no registration and uses no analytics, advertising or profiling tools.

Purposes and legal basis

• Browsing data: is used to deliver the website, keep it working and secure and prevent abuse. The legal basis is the controller’s legitimate interest (Art. 6(1)(f) GDPR).
• Data sent by email: is used to answer your request and handle any follow-up. The legal basis is taking steps at your request (Art. 6(1)(b) GDPR) or the legitimate interest in replying (Art. 6(1)(f) GDPR).

No profiling takes place and no decisions are based solely on automated processing.

Cookies and browser storage

The website uses no analytics, advertising or profiling cookies. When you choose a language with the IT/EN switcher, the preference is saved in the browser’s local storage so that later visits show pages in the same language. It stays on your device, is not sent to AptecStudio and can be cleared from your browser settings.

Cloudflare may set technical cookies required for the website’s security, for example to tell automated traffic apart. As these are technical tools, no consent is required.

Providers processing the data

The data is processed on behalf of the controller, under their respective data processing agreements, by the following providers:

• Railway Corporation: website hosting, on servers located in the United States.
• Cloudflare, Inc.: domain management, delivery and protection of website traffic, and routing of emails sent to aptecstudio.com addresses.
• Google Ireland Limited: the Gmail mailbox where emails are received and stored.

The data is not sold or disclosed to anyone else, except where required by law.

Transfers outside the European Union

Railway and Cloudflare are based in the United States, and Google may also process data outside the European Union. Transfers rely on the EU-US Data Privacy Framework, for companies that participate in it, or on the standard contractual clauses approved by the European Commission.

Retention

• Browsing data: kept for the periods set by Railway’s and Cloudflare’s technical logs, and longer only when needed to investigate abuse.
• Emails: kept for as long as needed to handle the request and no longer than 24 months, unless you ask for earlier deletion.

Your rights

At any time you can request access to your data, rectification, erasure, restriction of processing and portability, and you can object to processing based on legitimate interest (Articles 15 to 22 GDPR). To do so, write to the address above.

You also have the right to lodge a complaint with the Italian Data Protection Authority (garanteprivacy.it) or with the supervisory authority of the country where you live or work.

Provision of data

Browsing data is required to visit the website. Writing by email is optional, but without the data in the message it is not possible to reply.

Changes

This policy may be updated when the website, providers or regulations change. The date of the last update is shown at the top of the page.