Privacy Policy (UE)

This privacy statement was last updated on December 12, 2021 and applies to citizens of the European Economic Area.

In this privacy statement, we explain what we do with the data we obtain about you via https://jacopospotti.com. We recommend you carefully read this statement. In our processing we comply with the requirements of privacy legislation. That means, among other things, that:

  • we clearly state the purposes for which we process personal data. We do this by means of this privacy statement;
  • we aim to limit our collection of personal data to only the personal data required for legitimate purposes;
  • we first request your explicit consent to process your personal data in cases requiring your consent;
  • we take appropriate security measures to protect your personal data and also require this from parties that process personal data on our behalf;
  • we respect your right to access your personal data or have it corrected or deleted, at your request.

If you have any questions, or want to know exactly what data we keep of you, please contact us.

1. Purpose, data and retention period

1.1 Contact – Through phone, mail, email and/or webforms

For this purpose we use the following data:

  • Email address

The basis on which we may process these data is:

Consent obtained

Retention period

We retain this data until the service is terminated.

2. Cookies

Our website uses cookies. For more information about cookies, please refer to our Cookie Policy. 

3. Statistics

We keep track of anonymised statistics to gain insight into how often and in what way visitors use our website.The inclusion of full IP addresses is blocked by us.

4. Security

We are committed to the security of personal data. We take appropriate security measures to limit abuse of and unauthorised access to personal data. This ensures that only the necessary persons have access to your data, that access to the data is protected, and that our security measures are regularly reviewed.

The security measures we use consist of:

  • Username and Password
  • DNSSEC
  • DKIM, SPF en DMARC
  • Physical security measures of systems which contain personal data.
  • Security software
  • HTTP Strict Transport Security
  • X-Content-Type-Options
  • X-XSS-Protection
  • X-Frame-Options
  • Content Security Policy

5. Third-party websites

This privacy statement does not apply to third-party websites connected by links on our website. We cannot guarantee that these third parties handle your personal data in a reliable or secure manner. We recommend you read the privacy statements of these websites prior to making use of these websites.

6. Amendments to this privacy statement

We reserve the right to make amendments to this privacy statement. It is recommended that you consult this privacy statement regularly in order to be aware of any changes. In addition, we will actively inform you wherever possible.

7. Accessing and modifying your data

If you have any questions or want to know which personal data we have about you, please contact us. You can contact us by using the information below. You have the following rights:

  • You have the right to know why your personal data is needed, what will happen to it, and how long it will be retained for.
  • Right of access: You have the right to access your personal data that is known to us.
  • Right to rectification: you have the right to supplement, correct, have deleted or blocked your personal data whenever you wish.
  • If you give us your consent to process your data, you have the right to revoke that consent and to have your personal data deleted.
  • Right to transfer your data: you have the right to request all your personal data from the controller and transfer it in its entirety to another controller.
  • Right to object: you may object to the processing of your data. We comply with this, unless there are justified grounds for processing.

Please make sure to always clearly state who you are, so that we can be certain that we do not modify or delete any data of the wrong person.

8. Submitting a complaint

If you are not satisfied with the way in which we handle (a complaint about) the processing of your personal data, you have the right to submit a complaint to the Data Protection Authority.

9. Contact details

Jacopo Spotti
Viale XX Settembre 37, Trieste, 34100
Italy
Website: https://jacopospotti.com
Email: info@jacopospotti.com

Annex

iThemes Security

Quali dati personali raccogliamo e perché li raccogliamo

Cookie

Visitando la pagina di accesso viene impostato un cookie temporaneo che aiuta la compatibilità con alcuni metodi di accesso alternativi. Questo cookie non contiene dati personali e scade dopo 1 ora.

Security Logs

L’indirizzo IP dei visitatori, l’ID utente degli utenti che hanno effettuato l’accesso e il nome utente dei tentativi di accesso vengono registrati in modo condizionale per verificare la presenza di attività dannose e per proteggere il sito da tipi specifici di attacchi. Esempi di condizioni in cui si verifica la registrazione includono tentativi di accesso, richieste di disconnessione, richieste di URL sospetti, modifiche al contenuto del sito e aggiornamenti della password. Queste informazioni vengono conservate per 60 giorni.

Con chi condividiamo i tuoi dati

Viene generata un’immagine del codice QR per gli utenti che impostano l’autenticazione a due fattori per questo sito. Questa immagine viene generata utilizzando un’API ospitata da iThemes. Come parte della generazione di questa immagine, il tuo nome utente viene inviato all’API. Questi dati non vengono registrati. Per i dettagli sull’informativa sulla privacy, consultare l’Informativa sulla privacy di iThemes. Durante l’esecuzione di Security Check, ithemes.com verrà contattato come parte di un processo per determinare se il sito supporta le richieste TLS/SSL. Nessun dato personale viene inviato a ithemes.com come parte di questo processo. Le richieste a ithemes.com includono l’URL del sito. Per i dettagli sull’informativa sulla privacy di ithemes.com, consultare l’Informativa sulla privacy di iThemes. Questo sito viene scansionato per potenziali malware e vulnerabilità da iThemes Site Scanner. Non inviamo informazioni personali allo scanner; tuttavia, lo scanner potrebbe trovare informazioni personali pubblicate pubblicamente (ad esempio nei commenti) durante la scansione. Per garantire l’integrità dei file, iThemes Security estrae i dati da wordpress.org, ithemes.com e amazonaws.com. Nessun dato personale viene inviato a questi siti. Le richieste a wordpress.org includono la versione di WordPress, le impostazioni internazionali del sito, un elenco di plug-in installati e un elenco della versione di ciascun plug-in. Le richieste a ithemes.com e amazonaws.com includono i prodotti iThemes installati e le loro versioni. Per i dettagli sull’informativa sulla privacy di wordpress.org, consultare l’Informativa sulla privacy di WordPress. Per i dettagli sull’informativa sulla privacy di ithemes.com, consultare l’Informativa sulla privacy di iThemes. Le richieste ad amazonaws.com riguardano i contenuti aggiunti e gestiti da iThemes che sono coperti dalla politica sulla privacy dei dati di Amazon Web Services.

Per quanto tempo conserviamo i tuoi dati

I registri di sicurezza vengono conservati per 60 giorni.

Dove spediamo i tuoi dati

Questo sito fa parte di una rete di siti che proteggono dagli attacchi di forza bruta distribuiti. Per abilitare questa protezione, l’indirizzo IP dei visitatori che tentano di accedere al sito è condiviso con un servizio fornito da ithemes.com. Per i dettagli sull’informativa sulla privacy, consultare l’Informativa sulla privacy di iThemes.

iThemes Security

What personal data we collect and why we collect it

Cookies

Suggested text: Visiting the login page sets a temporary cookie that aids compatibility with some alternate login methods. This cookie contains no personal data and expires after 1 hour.

Security Logs

Suggested text: The IP address of visitors, user ID of logged in users, and username of login attempts are conditionally logged to check for malicious activity and to protect the site from specific kinds of attacks. Examples of conditions when logging occurs include login attempts, log out requests, requests for suspicious URLs, changes to site content, and password updates. This information is retained for 60 days.

Who we share your data with

Suggested text: A QR code image is generated for users that set up two-factor authentication for this site. This image is generated using an iThemes hosted API. As part of generating this image, your username is sent to the API. This data is not logged. For privacy policy details, please see the iThemes Privacy Policy.

When running Security Check, ithemes.com will be contacted as part of a process to determine if the site supports TLS/SSL requests. No personal data is sent to ithemes.com as part of this process. Requests to ithemes.com include the site’s URL. For ithemes.com privacy policy details, please see the iThemes Privacy Policy.

Suggested text: This site is scanned for potential malware and vulnerabilities by the iThemes Site Scanner. We do not send personal information to the scanner; however, the scanner could find personal information posted publicly (such as in comments) during the scan.

In order to ensure file integrity, iThemes Security pulls data from wordpress.org, ithemes.com, and amazonaws.com. No personal data is sent to these sites. Requests to wordpress.org include the WordPress version, the site’s locale, a list of installed plugins, and a list of each plugin’s version. Requests to ithemes.com and amazonaws.com include the installed iThemes products and their versions. For wordpress.org privacy policy details, please see the WordPress Privacy Policy. For ithemes.com privacy policy details, please see the iThemes Privacy Policy. Requests to amazonaws.com are to content added and managed by iThemes which is covered by the Amazon Web Services Data Privacy policy.

How long we retain your data

Suggested text: Security logs are retained for 60 days.

Where we send your data

Suggested text: This site is part of a network of sites that protect against distributed brute force attacks. To enable this protection, the IP address of visitors attempting to log into the site is shared with a service provided by ithemes.com. For privacy policy details, please see the iThemes Privacy Policy.