Privacy Policy
Last updated: 21 June 2026
This page explains what personal data gancio.xyz collects, why, and your rights over it. It is written to be read — no dark patterns, no tracking. This site sets no cookies and runs no analytics or advertising scripts.
1. Who is responsible (data controller)
The data controller for this website is Alessandro Faranda Gancio. For any privacy matter, or to exercise your rights, you can get in touch at dpa@gancio.xyz.
2. What data is collected, and why
Two narrow categories, nothing more:
- Contact-form submissions. When you use the contact form, the name, email address and message you enter are collected for the sole purpose of reading and replying to your enquiry. The form is sent only when you actively submit it.
- Server access logs. The hosting server records standard technical data for each request — IP address, browser/user-agent, requested page and timestamp — to keep the site secure, available, and to diagnose faults and abuse.
No profiling, no advertising, no behavioural tracking, and no automated decision-making take place.
3. Legal basis for processing
Where the EU/UK General Data Protection Regulation (GDPR) applies, the legal bases are:
- Contact form — Article 6(1)(b) (steps taken at your request prior to entering a contract) and/or Article 6(1)(f) (legitimate interest in responding to enquiries about my work). Because the basis is not consent, there is no consent checkbox — submitting the form is your request to be contacted back.
- Access logs — Article 6(1)(f) (legitimate interest in the security and reliable operation of the website).
4. Cookies and tracking
This site uses no cookies and no client-side tracking. Web fonts are served from this site's own domain — they are not loaded from Google Fonts or any other third party, so your IP address is not shared with a font provider when the page loads. Because no non-essential cookies or trackers are used, no cookie-consent banner is required.
5. Who else processes your data (sub-processors & transfers)
- Web3Forms — delivers contact-form submissions to my inbox. When you submit the form, the data you entered is transmitted to Web3Forms for delivery. Web3Forms is a US-based service, so for visitors outside the US this involves an international data transfer, carried out under appropriate safeguards (e.g. Standard Contractual Clauses). See web3forms.com/privacy-policy.
- IONOS — provides the hosting/server that serves this site and generates the access logs described above.
Your personal information is never sold, rented, or shared for marketing or any other purpose — and has not been in the preceding 12 months.
6. How long it is kept
- Contact enquiries — kept only as long as needed to handle the conversation and any resulting engagement, then deleted. You can ask for deletion at any time.
- Access logs — retained for a short period for security and diagnostics, then rotated/deleted.
7. Your rights
Depending on where you live, you have rights over your personal data — for example under the EU/UK GDPR, the California CCPA/CPRA, or comparable privacy laws. These commonly include the right to access the data held about you, to correct or delete it, to receive a copy, and to object to or restrict certain processing.
Because this site does not sell or share your personal information and runs no advertising, profiling, or tracking, there is nothing to "opt out of" in that respect. Exercising any right will never lead to discriminatory treatment.
To exercise a right, email dpa@gancio.xyz. You may also have the right to lodge a complaint with your local data-protection or privacy authority (for example, your national supervisory authority in the EU/EEA or UK).
8. Changes to this policy
If this policy changes, the "last updated" date above will change with it.
// Plain-language summary: no cookies, no trackers, fonts served from this site. The only data I receive is what you type into the contact form (to reply) and standard server logs (to keep the site up). Questions: dpa@gancio.xyz.