Notice

Privacy Policy

Last updated:

This Privacy Policy describes how lucz.dev manages personal data processing for users who visit the site, under Regulation EU 2016/679 ("GDPR") and Italian Legislative Decree 196/2003 as amended.

1. Data controller

The data controller is LUCZ DI LUCREZIO MATTEO, sole proprietorship with operational office in Lecce, Puglia (Italy).

For any request about personal data processing, you can write to matteo.lucrezio@lucz.dev.

2. Types of data collected

The site collects the following personal data categories:

  • Navigation data: IP address, user-agent, visited pages, access date and time, country of origin, processed in aggregated and anonymized form for statistics.
  • Contact data: name, email and message content voluntarily provided through the contact form or by email.
  • Data collected through third-party cookies (Google Analytics 4), subject to user consent. See the Cookie Policy for details.

3. Purposes and legal basis

  • Providing the site and requested services - performance of pre-contractual measures / contract (art. 6.1.b GDPR).
  • Replying to contact requests - performance of pre-contractual measures requested by the data subject (art. 6.1.b GDPR).
  • Aggregated statistical analysis of browsing behavior - user consent (art. 6.1.a GDPR), provided through the cookie banner.
  • Site security and abuse prevention - legitimate interest of the controller (art. 6.1.f GDPR).

4. Processing methods

Data is processed with electronic tools and appropriate technical and organizational measures to protect security and confidentiality. No automated decision-making or profiling under art. 22 GDPR is performed.

5. Data retention

  • Navigation data: up to 26 months (Google Analytics 4 standard setting).
  • Emails and contact messages: for the time needed to handle the request and then for the period required by tax and civil law (10 years).
  • Data collected with consent: until consent withdrawal or for the period declared in the Cookie Policy.

6. Recipients and transfers

Data may be communicated to the following subjects as processors (art. 28 GDPR):

  • Vercel Inc. (hosting provider) - servers in Europe (fra1 region).
  • Google Ireland Ltd / Google LLC (Google Analytics 4) - transfer based on Standard Contractual Clauses approved by the European Commission and supplementary measures implemented by Google.

7. Data subject rights

You can exercise the rights under articles 15-22 GDPR at any time by writing to matteo.lucrezio@lucz.dev:

  • right of access (art. 15)
  • right to rectification (art. 16)
  • right to erasure / right to be forgotten (art. 17)
  • right to restriction of processing (art. 18)
  • right to data portability (art. 20)
  • right to object (art. 21)
  • right to withdraw consent at any time
  • right to lodge a complaint with the Italian Data Protection Authority

8. Policy changes

The controller reserves the right to update this notice to reflect legal or organizational changes. Updated versions will be published at this address with the date of last modification.