Privacy Policy

Last updated: 21 October 2026

This policy explains how personal data is processed when you visit matteobombelli.eu (the “website”), in line with the EU General Data Protection Regulation (GDPR, Regulation (EU) 2016/679) and Italian data-protection law. It does not cover third-party websites linked from this site.

Data controller

The data controller is Matteo Bombelli, based in Padova, Italy. For any question or request about your personal data: webmaster@mail.matteobombelli.eu.

What data we process, why and on what legal basis

1. Hosting and server logs

The website is hosted by Netlify, Inc. (610 22nd Street, Suite 315, San Francisco, CA 94107, USA). When you visit, Netlify’s infrastructure automatically records standard technical data in server log files, which is necessary for the secure and functional delivery of the site. This includes:

• your IP address (personal data under the GDPR);
• the date and time of your visit;
• the pages or files you requested;
• your browser type and operating system (User-Agent string).

Legal basis: legitimate interest (Art. 6(1)(f) GDPR) in the security, stability and reliable performance of the website, and in protecting it against attacks such as DDoS.

Retention: temporary, typically up to 30 days, after which the logs are deleted or anonymised.

2. Web fonts

The website loads the Inter font from Google Fonts (fonts.googleapis.com, fonts.gstatic.com). When your browser requests the font files, your IP address and User-Agent are transmitted to Google (Google Ireland Limited / Google LLC, USA).

Legal basis: legitimate interest (Art. 6(1)(f) GDPR) in consistent, performant typography.

Transfer: to the United States, covered by Standard Contractual Clauses and/or the EU–US Data Privacy Framework.

3. Cookies and tracking

This website does not use cookies, analytics platforms (such as Google Analytics), advertising or tracking scripts. It does not track your behaviour across the internet and does not build user profiles. Because no cookies are set, no cookie-consent banner is required.

4. Contact by email

If you contact me by email, I process your email address and the content of your message solely to reply to you.

Legal basis: performance of your request / legitimate interest (Art. 6(1)(b) or (f) GDPR).

Retention: for as long as necessary to handle the request.

Recipients and international transfers

Personal data is processed by the service providers listed above — Netlify (hosting) and Google (fonts) — acting as data processors, and is never sold or shared for marketing purposes. Both are based in the United States, so data may be transferred outside the EEA; these transfers rely on appropriate safeguards (Standard Contractual Clauses and/or the EU–US Data Privacy Framework).

Your rights

Under the GDPR you have the right to: access your data; rectify inaccurate data; erase data (right to be forgotten); restrict processing; data portability; object to processing based on legitimate interest; and withdraw consent where processing is based on consent. To exercise any of these rights, email webmaster@mail.matteobombelli.eu.

You also have the right to lodge a complaint with the Italian supervisory authority, the Garante per la protezione dei dati personali (www.garanteprivacy.it).

Automated decision-making

No automated decision-making or profiling is carried out.

Changes to this policy

This policy may be updated from time to time. The “last updated” date at the top reflects the latest revision.