OPEN31 / Legal information
Privacy policy
Updated: 12 October 2026 · v2026-10-12
Cookie policy ↗1. Controller and contact
The data controller is Niccolò Corsini, operating as OpenTrentuno di Corsini Niccolò, VAT number 02078540479. Contact opentrentuno@gmail.com for personal data requests.
Registered office and correspondence address: Via del Frascone 61, 51100 Pistoia (PT), Italia. opentrentuno@gmail.com
2. Data processed
Enquiries: name, email, requested service, form language, message and information you choose to provide. Do not send credentials, sensitive personal data or confidential third-party information.
Technical data: IP address, browser and device information, requested URLs, timestamps and security data needed to deliver the website and handle forms.
Privacy preferences: statistics choice, action, date, expiry and policy version. These contain no name, email or message content.
Only after statistics consent, Google Analytics 4 processes online identifiers and data about page views, traffic sources, approximate location, devices, scrolls and outbound clicks. This website does not enable advertising purposes.
3. Purposes and legal bases
Answering enquiries and discussing a collaboration: pre-contractual steps at your request and contractual performance where applicable (GDPR Article 6(1)(b)). General correspondence relies on the legitimate interest in responding and managing professional relationships (Article 6(1)(f)).
Website delivery, security and spam prevention: legitimate interest in reliable services and secure communications (Article 6(1)(f)). Storing preferences: compliance with privacy choice and cookie obligations (Article 6(1)(c) and applicable cookie rules).
Google Analytics statistics: optional consent (Article 6(1)(a) and applicable cookie rules). Refusing does not limit browsing or form submission.
Legal obligations and claims: Article 6(1)(c) or the legitimate interest in establishing, exercising or defending legal claims (Article 6(1)(f)), as applicable. Sending a message does not subscribe you to a newsletter.
4. Providing data
Providing data is voluntary. Name, email, requested service and message are necessary to send the form and handle your request. You can still browse or email me directly without using the form. The form does not require statistics consent and does not use Google reCAPTCHA.
5. Services and recipients
Data is accessible to the controller and, when necessary for these purposes, authorised technical support, professional advisers and legally entitled authorities.
Netlify, Inc. hosts the website, receives and stores submitted forms and handles email notifications. Spam filtering uses Automattic’s Akismet. Hosted customer data is covered by Netlify’s processing terms; providers may also process technical and security data for their own purposes described in their notices.
Google provides Gmail for receiving and answering email and, only after consent, Google Analytics. Google Ireland Limited provides relevant services to EEA users, with possible processing by Google LLC and other group entities under applicable terms. Roles and responsibilities depend on the service.
Form contents are not intentionally sent to Analytics. GitHub, npm and LinkedIn are ordinary external links, not embedded widgets.
6. International processing
Providers may process data outside the European Economic Area, including in the United States. Applicable safeguards are described in their terms and include standard contractual clauses and, for covered transfers to certified organisations, the EU–US Data Privacy Framework. The mechanism depends on the service and recipient. Statistics consent does not replace these safeguards.
Contact the controller for information about safeguards relevant to your data. Netlify and Google references are provided below.
7. Retention
Enquiries and correspondence: for the time needed to handle the request, discussion and necessary follow-up. If a professional relationship follows, relevant data is kept for that relationship and applicable accounting, statutory or legal-claim obligations. Retention is assessed against request status, outstanding commitments and legal requirements; not every message is kept indefinitely by default.
Privacy choices: six calendar months, unless changed or browser storage is cleared. A localStorage copy notifies other tabs but cannot enable Analytics independently and is invalid after its recorded expiry. No external consent platform receives the record.
Analytics: website cookies last 180 days without automatic renewal. The existing G-NTX2D02E9S property retains event data for 2 months and user data for 14 months, with identifier retention reset by new activity. Expired detailed data is deleted through Google’s monthly process; standard aggregated reports follow separate rules.
Hosting, anti-spam and security data: for periods needed to provide the service, investigate abuse and comply with provider obligations, according to their published criteria.
Withdrawal stops future optional collection on this browser. It does not automatically erase messages already sent or data already lawfully processed. A separate erasure request can be made.
8. Your rights
Where conditions apply, you may request access, rectification, erasure, restriction and portability for data processed automatically on consent or contract grounds. You may object to legitimate-interest processing for reasons relating to your situation. Withdraw statistics consent at any time without affecting earlier lawful processing.
Write to opentrentuno@gmail.com. Proportionate information may be requested to verify identity. Requests are normally answered within one month; any permitted extension is explained within that period. You may complain to the Italian Garante per la protezione dei dati personali or the competent authority where you live or work.
9. Automated checks and external resources
Automated spam filtering may block form delivery; email me directly if needed. This website does not make solely automated decisions with legal or similarly significant effects about you.
Fonts and images are hosted locally. No social feed or external video is loaded automatically. External links open services governed by the relevant provider’s notice.
10. Updates
This notice is updated when processing changes. Date and version appear above. Material changes to optional processing require a new choice. Preferences are shared across Italian, English and Chinese on the same browser and hostname.