Privacy notice
Last updated:
This notice (articles 13 and 14 of Regulation (EU) 2016/679, GDPR) says which personal data this page processes, why, for how long and with whose help. Where a piece of data is not stored, we say so. In short: the page has no accounts, uses no cookies and does not store visitors' IP addresses.
Who is the data controller
The data controller is Denis Casanuova. For any request about your data, use the form at the bottom of this page or write to privacy@tt4.info.
Visits to the page
- Data
- The address you requested (path and parameters) and the request method, the date and time, the outcome of the response, the site you come from (only the page address, without its parameters), your browser and system (the "user agent"), the languages your browser accepts and the one we show the page in, whether your browser ran our small script, and a daily code.
- The daily code
- We calculate it from your IP address, your browser and the date, with a secret key that only we have. It does not allow tracing back to the address, and it changes every day: a person cannot be followed from one day to the next. It is used to count how many different people visit the page in a day. The IP address is neither stored nor written in our logs.
- What happens
- Every request to the page ends up in the visit log, including those coming from the old addresses of the site that used to be on this domain and those of automated programs; the exception is the most obvious probes of the latter (hidden files, admin panels and the like), which the server discards without recording them. Our small script sends a random visit identifier once, to mark the visit as "opened in a browser": it sets no cookies and stores nothing in the browser. For each name and each day at most 20,000 visits are stored; beyond that, only the count is kept.
- Why
- To know who arrives on this domain and from where, and to decide what to do with it (our legitimate interest, article 6(1)(f) GDPR).
- For how long
- 180 days: beyond that limit the visits and their counts are deleted by the clean-up, which runs every day.
The offer and contact form
- Data
- Name, email, the message and the offer in dollars, if you write one. With the message we store the page you wrote from, the language, the date and time and the daily code of the visit.
- What happens
- The message is stored on our server and reaches us by email through the Amazon SES sending service, in the Frankfurt region (eu-central-1). To protect the form from spam we use a hidden field, a minimum filling time and a limit of messages per IP address: of the address we keep in memory, for less than an hour, only a code calculated with a secret key (it cannot be traced back to the address) and the number of messages sent; then it disappears by itself. No third-party services, no cookies.
- Why
- To answer your request or your offer (article 6(1)(b) and (f) GDPR). You are not required to fill in the form: if you do not, we will not be able to reply.
- For how long
- 24 months: beyond that limit the message is deleted from the site by the clean-up, which runs every day. The copy in the mailbox stays for as long as needed to handle the request.
The same goes for the form at the bottom of this page, with which you can ask us to exercise your rights: name, email and request are handled as above and are used only to reply to you.
Browsing statistics
To count visits we use Umami, a statistics software installed on a server of ours (analytics.parcheggio.tt4.info). It sets no cookies and does not store IP addresses: it records the page visited, the referring site, the browser, the operating system and the device type, the screen size, the language and the country, region and city derived from the connection, together with an anonymous session identifier calculated without storing the IP address. This data is not shared with third parties and is used to understand which pages are of interest (our legitimate interest, article 6(1)(f)).
Server logs
Like any site, the server hosting the page and the system that routes requests (Traefik) record accesses: IP address, requested address, date and time, browser and referring site. They serve security and understanding errors (our legitimate interest, article 6(1)(f)), not identifying visitors, and are kept for a few hours; then they are deleted automatically.
Error reporting
If the page fails, it reports the error to Sentry, a monitoring service, so that it can be fixed. The report contains the type of error, the point in the code where it happened, the requested address (without its parameters) and some request headers (for example the browser and the language). It does not contain the content of requests (so not the form messages either), nor cookies nor visitors' IP addresses.
Who processes data on our behalf
- Contabo: the servers the page runs on, in the "Hub Europe" region.
- Amazon Web Services: the Amazon SES email sending service (region eu-central-1).
- Sentry (Functional Software, Inc., United States): reporting of technical errors, under the standard contractual clauses.
Statistics do not go through third parties: Umami runs on our own server. We do not sell or give the data to anyone and we do not carry out profiling or automated decision-making. Some providers may process data outside the European Economic Area, with the safeguards the GDPR provides (adequacy decision or standard contractual clauses).
Third-party sites
The buy button leads to the site of a marketplace (GoDaddy): when you use it you leave this page and its own privacy notice and cookies apply.
Cookies
The page uses no cookies or similar tools: no browser local storage, no identifiers stored on your device.
Your rights
You can ask us for access to the data concerning you, rectification, erasure, restriction of processing and, where the conditions are met, portability, and you can object to the processing (articles 15 to 22 GDPR). To exercise them, use the form at the bottom of this page or write to privacy@tt4.info: we reply within one month. If you believe the processing breaks the law you can lodge a complaint with the Italian data protection authority (Garante per la protezione dei dati personali).