Last updated: August 31, 2026
This Privacy Policy describes how the personal data of users who visit the website of Christian Pezzilli (hereinafter also referred to as the "Website") is collected, used, stored and protected, in accordance with Regulation (EU) 2016/679 ("GDPR") and applicable data protection legislation.
The purpose of this policy is to provide users with clear and transparent information about the processing of personal data carried out while browsing the Website and using the services offered.
The Data Controller is:
Christian Pezzilli
Professional in the field of web and software development.
Email: info@christianpezzilli.com
CVR: 46577086
For any request concerning the processing of personal data or the exercise of rights provided for by the GDPR, users may contact the Data Controller using the email address indicated above.
This Privacy Policy applies exclusively to this Website and does not apply to third-party websites or services accessible through external links.
Access to external websites or services, such as LinkedIn, Instagram, YouTube or Calendly, is subject to their respective privacy and cookie policies.
For the purposes of this Privacy Policy:
During use of the Website, only information necessary for the operation of the services offered and the security of the infrastructure may be collected.
Through the contact form, the following information may be collected:
Providing this information is necessary to process and respond to the user's request.
During normal browsing, certain technical information necessary for the operation and security of the Website may be collected automatically, including:
Such data is processed for technical, security, abuse-prevention and proper operation purposes.
Technical browsing data, such as IP addresses and access logs, may be processed by the hosting provider and technical security service providers exclusively for security, maintenance and proper operation of the infrastructure.
Personal data is processed exclusively for the following purposes:
The Data Controller does not use the collected data for marketing, profiling or unsolicited promotional communications.
The processing of personal data is carried out in accordance with Article 6 of Regulation (EU) 2016/679 and is based on the following legal grounds:
Where processing requires the consent of the Data Subject, consent will be obtained in accordance with applicable legislation.
Personal data is processed using electronic and digital tools, adopting appropriate technical and organizational measures to ensure its security, integrity, confidentiality and availability.
Data is processed only for as long as necessary to achieve the purposes described in this Privacy Policy and in accordance with any applicable legal retention requirements.
This Website has been designed according to the principles of Privacy by Design and Privacy by Default, favoring solutions that limit the collection of personal data to what is strictly necessary and reduce the use of third-party services.
The Data Controller applies the principle of data minimization, collecting only the information necessary to manage user requests and ensure the security of the Website.
The Data Controller adopts appropriate technical and organizational measures to protect personal data against unauthorized access, loss, alteration, disclosure or accidental destruction.
Security measures also include systems designed to protect the Website against automated submissions, spam and abusive use of the forms available on the Website.
Although the utmost care is taken to protect personal data, no computer system can guarantee an absolute level of security.
To protect the contact form against spam, abuse and automated submissions, the Website uses Cloudflare Turnstile, a security service provided by Cloudflare, Inc.
Turnstile verifies requests submitted through the contact form in order to distinguish human users from automated systems. For this purpose, certain technical signals relating to the user's device and connection may be processed, including the client IP address, browser and device information, User-Agent, TLS fingerprint, Sitekey and associated origin.
Such information is used for security purposes, including spam prevention, detection and blocking of automated activity, and protection of the Website.
The Website does not use Cloudflare Turnstile for marketing, profiling or advertising purposes.
For the processing of data necessary to provide the Turnstile service and protect the Website against automated and malicious activity, Cloudflare acts as a data processor on behalf of the Data Controller. Cloudflare may also process certain signals as an independent data controller in order to improve Turnstile's bot-detection capabilities and service security, as described in its privacy documentation.
Turnstile does not access, store or transmit the content of the information entered by users into the contact form.
The processing of technical data through Turnstile is necessary to ensure the security of the Website and prevent automated and abusive use. The relevant legal basis for the Data Controller's processing is the legitimate interest in maintaining Website security and protecting its services, pursuant to Article 6(1)(f) of the GDPR.
For further information, please consult the Cloudflare Turnstile Privacy Addendum .
The Website provides a contact form that allows users to request information, quotations or initiate a professional collaboration.
The data requested through the form is limited to the information necessary to process and respond to the user's request.
Submitting the form involves the processing of the information voluntarily provided by the user for the purposes described in this Privacy Policy.
The submitted data is not stored in the Website's database but is sent directly to the Data Controller by email.
The Website uses the open-source PHPMailer library to manage communications submitted through the contact form.
PHPMailer is used exclusively as a technical tool for sending emails and does not constitute a service for collecting, analyzing or profiling personal data.
When the contact form is submitted, two communications are generated:
The automatic communication is exclusively informational and does not contain advertising, promotional or marketing material.
Personal data is retained only for as long as necessary to manage the request received.
If the request results in a professional or contractual relationship, the data may be retained for the period required by applicable law.
At the end of the applicable retention periods, the data will be deleted or anonymized, unless retention is required by law.
Personal data is not sold, commercially disclosed or distributed to third parties.
Data may be processed exclusively by parties providing technical services essential to the operation of the Website, including:
Such parties operate in compliance with applicable legislation and, where required, are appointed as Data Processors.
The Website is hosted on infrastructure managed by Hostinger.
The provider may process technical data strictly necessary to provide the service, including system logs, IP addresses and technical information required to ensure security, stability and operational continuity.
For further information, users are invited to consult the provider's privacy policy.
The Data Controller uses Google Search Console exclusively to monitor the presence of the Website in Google search results.
Google Search Console is used by the Data Controller for website management and monitoring purposes and is not integrated into the Website pages as a visitor behavior analytics tool.
The fonts used by the Website are hosted locally on the server.
Consequently, browsing the Website does not require requests to Google's servers to load the fonts.
The Website uses the GSAP (GreenSock Animation Platform) JavaScript library exclusively to improve the user experience through animations and graphical transitions.
GSAP is not used by the Data Controller to collect personal data, perform profiling or conduct marketing activities.
The Website provides a button that allows users to access the external Calendly service for appointment scheduling.
Calendly is not embedded within the Website.
By clicking the button, the user is redirected to the official Calendly website, which operates according to its own data processing practices.
Users are therefore invited to consult Calendly's privacy and cookie policies before using the service.
The Website contains links to the Data Controller's official profiles on platforms such as LinkedIn, Instagram and YouTube.
These links are simple hyperlinks and do not automatically load social plugins or tracking tools during browsing of the Website.
Any processing of personal data takes place only after the user voluntarily chooses to visit those platforms.
The Data Controller processes personal data in compliance with the provisions of the GDPR concerning transfers of personal data to third countries.
Some service providers used by the Website may process data on servers located outside the European Economic Area (EEA) or may belong to international corporate groups.
In such cases, processing will take place in accordance with Articles 44 et seq. of the GDPR, using the safeguards provided by applicable law, such as European Commission Adequacy Decisions, Standard Contractual Clauses (SCCs) or other legally recognized transfer mechanisms.
The Website does not use user profiling systems or automated decision-making processes that produce legal effects or similarly significantly affect the Data Subject within the meaning of Article 22 of the GDPR.
Cloudflare Turnstile is used exclusively as a technical security measure to distinguish legitimate requests from automated activity and is not used by the Data Controller to make decisions concerning users or create personal profiles.
The services offered by this Website are primarily intended for adults and professionals.
The Data Controller does not knowingly collect personal data from children under the age of 16.
If the Data Controller becomes aware that personal data relating to a minor has been collected unintentionally, it will take reasonable steps to delete such data as soon as possible, where legally permitted.
Data Subjects may exercise at any time the rights provided for by Articles 15-22 of Regulation (EU) 2016/679.
In particular, Data Subjects have the right to:
To exercise the rights described above, a request may be sent to the Data Controller using the email address provided in this Privacy Policy.
The Data Controller will respond within the time limits established by Regulation (EU) 2016/679, subject to any extensions permitted by applicable law.
If a Data Subject believes that the processing of personal data violates applicable law, they have the right to lodge a complaint with the competent supervisory authority in the country where they habitually reside, work or where the alleged infringement occurred.
The right to bring proceedings before the competent courts, where applicable, remains unaffected.
The Data Controller adopts appropriate technical and organizational measures to protect the Website and personal data against unauthorized access, loss, alteration, disclosure or misuse.
Such measures include, by way of example:
Despite the ongoing efforts to protect personal data, no computer system can guarantee an absolute level of security.
The Data Controller undertakes to adopt all measures reasonably necessary to ensure the accuracy of the information contained on the Website and the protection of personal data.
However, the Data Controller cannot be held responsible for damages resulting from service interruptions, force majeure events, cyberattacks, communication network failures or causes not directly attributable to the Data Controller's activities, to the extent permitted by applicable law.
This Privacy Policy may be updated or amended at any time to reflect changes in legislation, technological developments, changes to the services offered or changes in the methods used to process personal data.
Changes will take effect from the time they are published on this Website. Users are therefore invited to periodically consult this page for any updates.
The processing of personal data is governed by Regulation (EU) 2016/679 (General Data Protection Regulation - GDPR) and any applicable national legislation concerning the protection of personal data.
Any matter concerning the interpretation or application of this Privacy Policy shall be governed by applicable law, without prejudice to the rights granted to Data Subjects under European data protection legislation.
This Website may contain links to websites or external services operated by third parties.
The Data Controller does not exercise control over the privacy policies or data processing practices adopted by such third parties and cannot be held responsible for their practices.
Users are therefore invited to consult the respective privacy policies before using such services.
This Website has been designed in accordance with the data minimization principle established by the GDPR.
Only the data necessary to manage requests voluntarily submitted by users and to ensure Website security is collected, avoiding the use of tracking, profiling or mass personal-data collection tools.
The Data Controller's objective is to provide a privacy-respecting browsing experience while limiting the use of non-essential third-party services.
The Data Controller undertakes to process personal data in accordance with the principles of lawfulness, fairness, transparency, data minimization, accuracy, storage limitation, integrity and confidentiality set out in Article 5 of Regulation (EU) 2016/679.
All processing activities are carried out exclusively for the purposes described in this Privacy Policy and in compliance with the rights of Data Subjects.
For any information concerning this Privacy Policy or the processing of personal data, users may contact the Data Controller using the following address:
Christian Pezzilli
Email: [info@christianpezzilli.com](mailto:info@christianpezzilli.com)
CVR: 46577086
| Document: | Privacy Policy |
| Version: | 1.1 |
| Last updated: | August 31, 2026 |
| Language: | English |
For further information about the services mentioned in this Privacy Policy, users may consult the respective official privacy policies:
© Christian Pezzilli
All rights reserved.