Privacy Policy
Last updated: August 2026.
This is a personal blog. It sells nothing, has no accounts, no comments and no newsletter, so there is very little to say here — but what there is should be accurate, and where a sentence is vague that is a defect rather than caution.
Data controller
Marco Fabbri
For anything concerning personal data: privacy@marcofabbri.com
No Data Protection Officer has been appointed: none of the cases that require one applies to a site like this.
What is processed
Technical data, unavoidable in any web request. To send you a page, the server that delivers it necessarily sees your IP address, your browser and operating system, the page you asked for, the date and time, and the page you came from. This is used to deliver the site and to protect it from abuse. It is not used to identify you and is not combined with anything else. Legal basis: legitimate interest in providing and securing the service, Art. 6(1)(f) GDPR.
Statistics, only if you allow them. This site uses Google Analytics 4 to count visits and see which articles get read. It does not run until you have chosen: before your choice the tag sits in the page inert and no request leaves your browser — not even a DNS lookup. If you accept, Google receives your IP address and assigns your browser an identifier. It is measurement, not anonymous counting, which is exactly why it is asked for rather than assumed. Legal basis: your consent, Art. 6(1)(a) GDPR, which you can withdraw at any time from the “Cookie Preferences” link at the bottom of every page. Withdrawing does not affect what was lawful before.
What you send through the contact form, or by email. The contact form asks for your name, your email address and your message. Nothing else is collected, nothing is stored on this site: the message is delivered straight to the controller’s mailbox and used only to reply. Writing to the address above does the same thing without the form.
The form is protected by Cloudflare Turnstile, which receives your IP address to check that you are a person and not a bot. It is the only third party on that page, it does not profile you, and it does not run anywhere else on the site. Legal basis: the request you made by writing; for the anti-spam check, the legitimate interest in keeping the form usable.
Please don’t put health data or other special-category information in the message — there is no reason to, and it would be handled by an ordinary mailbox.
Nothing here is used for advertising, profiling or automated decision-making.
Who receives it, and where they are
| Who | What for | Where |
|---|---|---|
| Cloudflare | serves the site | a global network: the node answering you is the one nearest to you, which may be outside the EEA |
| Google Ireland Ltd | statistics, only after consent | data may be transferred to Google LLC in the United States |
Nothing is sold or handed to anyone else. Where a transfer outside the European Economic Area happens, it relies on the safeguards in Chapter V GDPR — the European Commission’s standard contractual clauses and, for the United States, the EU-US Data Privacy Framework.
Apart from the anti-spam check on the contact page, everything else the site needs — styles, scripts, fonts, images — is served from marcofabbri.com itself, so no other company learns that you were here. The links to LinkedIn and to external sites are ordinary links: they transmit nothing until you click them, and once you do, you are on someone else’s site under their rules.
How long it is kept
| Data | Retention |
|---|---|
| Server technical logs | as long as needed for security, in the order of days |
| Analytics data — events | 2 months |
| Analytics data — the record of a visitor | 2 months, not restarted when the same person comes back |
| Your cookie choice | it stays in your browser until you withdraw it, or until the services change and it is asked again |
Google Analytics offers a setting that restarts the retention window every time the same person visits again — which would make “2 months” mean “forever” for anyone who reads this site regularly. It is switched off here, deliberately.
Your rights
You can ask for access to your data, rectification, erasure, restriction of processing, portability, and you can object to processing based on legitimate interest. Where processing rests on consent, you can withdraw it at any time — for statistics, through the Cookie Preferences link in the footer, with no need to write to anyone.
Requests go to privacy@marcofabbri.com and are answered within one month. Email rather than the form, deliberately: exercising a right should not depend on JavaScript, on an anti-spam check recognising you as human, or on a form of mine being up — and it leaves you your own copy of what you sent.
You can also lodge a complaint with the Italian Data Protection Authority (garanteprivacy.it), or with the authority of the country you live in, if you think the law is being broken.
Changes
If this notice changes in substance, the date at the top changes with it. When the change concerns the services listed above, your consent is asked again instead of being carried over.