Legal
Privacy Policy
Last updated: 2026-09-14 — Davide Ladisa
1. Data controller
Davide Ladisa (info@davideladisa.it) is the data controller for personal data processed through this website.
2. Data we collect
Analytics (only with your consent). With consent, Google Analytics 4 sets _ga (up to 2 years) and _ga_* (up to 2 years) to measure aggregate traffic. With the same consent, Vercel Speed Insights collects anonymous performance metrics (Core Web Vitals), visited page URLs and coarse device/region information to monitor site speed — it sets no cookies. No analytics or performance data is collected before you accept.
Consent choice. Your choice is stored locally in your browser (ga-consent, first-party localStorage, kept until you clear it) so the banner does not ask again.
Language preference (functional). When you switch languages, your preference is stored in the first-party NEXT_LOCALE cookie (1 year, SameSite=Lax) so the site remembers your choice. It is a strictly functional cookie: it only serves content in your chosen language and needs no consent, but it is documented here for transparency.
Technical logs. The hosting provider may process IP addresses and user-agent strings in server logs for security and debugging.
| Cookie | Purpose | Duration |
|---|---|---|
| NEXT_LOCALE | Language preference (functional) | 1 year |
| ga-consent | Consent banner choice (local) | Until cleared |
| _ga, _ga_* | Google Analytics (consent only) | Up to 2 years |
3. Purposes and legal basis
Analytics runs on your consent (Art. 6(1)(a) GDPR, ePrivacy). Technical logs rely on legitimate interest in operating a secure website (Art. 6(1)(f) GDPR). The language preference relies on legitimate interest in serving content in your requested language (Art. 6(1)(f) GDPR).
4. International transfers
With consent, analytics data is processed by Google LLC in the USA under Google's contractual safeguards, and performance data by Vercel Inc. in the USA under Vercel's safeguards. Declining keeps all measurement off.
5. Retention
GA4 data is retained per the property settings (default 2 months, configurable up to 14 months). Speed Insights performance data is retained in aggregated form per Vercel's policy. Your local consent choice persists until you clear site data; the language preference expires after 1 year. Server logs rotate on the hosting provider's schedule.
6. Your rights
Access, rectification, erasure, restriction, portability and objection (GDPR Art. 15–21), plus withdrawal of consent at any time (Art. 7(3)) — click the cookie icon in the site header to change your choice instantly, no account needed. For any request, write to info@davideladisa.it.
7. Changes
Material changes to this policy will be reflected here with a new revision date, and analytics consent will be requested again — continued use alone does not constitute acceptance of the updated policy.