Privacy Policy

The data controller for the data collected through this website is Francesco Scarparo, VAT no. 05787270288. For any request about this policy or your data you can write to info@scarpadev.com.

This website collects personal data in three ways: the contact form, the WhatsApp button and, if you give your consent, analytics cookies.

When you fill in and submit the contact form, the following are sent:

• name
• email address
• type of project requested
• indicative budget range (optional)
• message describing the project

To protect the form from spam, when you submit it Cloudflare Turnstile checks that the request comes from a person and not from an automated program. To do so it processes some technical data about the connection and the browser (for example IP address and browser type), as described in section 5.

The website also includes a button that opens a WhatsApp chat with me. Clicking it takes you away from this website to the WhatsApp app or website (Meta Platforms Ireland Limited), where you can write to me directly. At that point your phone number and the content of the messages you send me become visible to me through WhatsApp, as described in section 5. The website itself does not receive or store any data from this interaction: it only opens the link to WhatsApp.

While you browse, and only after you consent through the cookie banner, Google Analytics and Microsoft Clarity collect in anonymous or pseudonymised form the pages you visit, how long you stay, the device and browser you use and your interactions with the page (mouse movements, clicks, scrolling). Without consent these tools stay switched off.

The data collected is processed in order to:

• respond to your contact or quote request, via the form or WhatsApp;
• assess and manage any collaboration;
• send you an email confirming that your request has been received (form only);
• protect the form from spam and automated submissions;
• analyse, in aggregate form and only with your consent, how the website is used and improve the experience.

The data is not used for marketing purposes, nor is it passed on to third parties for their own commercial purposes.

Processing of the form data is based on the consent you give when submitting it (Art. 6(1)(a) GDPR) and, for handling the business request, on steps taken at your request prior to entering into a contract (Art. 6(1)(b) GDPR). Processing of the data you share by starting a WhatsApp chat is based on the consent you give when you click the button and choose to write to me through that channel (Art. 6(1)(a) GDPR).

The anti-spam check with Cloudflare Turnstile is based on the legitimate interest in protecting the website from abuse (Art. 6(1)(f) GDPR).

Processing of browsing data through Google Analytics and Microsoft Clarity is based solely on the consent you give through the cookie banner (Art. 6(1)(a) GDPR) and can be withdrawn at any time from «Cookie preferences», at the bottom of every page.

To run the website, the contact form and traffic analysis, the following services are used:

• OVHcloud (OVH GmbH) — provides the server that runs the website and its CMS, in a data centre in Germany (European Union). Like any web server, it receives the technical data needed to show you the pages (for example IP address and browser type).
• OVHcloud (MX Plan email) — provides the website's mailbox. The email with the form data, addressed to my inbox, and the confirmation email to you are sent from this mailbox, and any replies you send arrive here. It receives the data you enter in the form and processes it on servers in the European Union.
• Cloudflare Turnstile — checks that the form is submitted by a person and not by a bot, without asking you to solve puzzles. It processes technical data about the connection and the browser for this purpose only, not for advertising or profiling.
• Google Analytics 4 — traffic and behaviour statistics for the website, in aggregate form. Active only after consent.
• Microsoft Clarity — heatmaps and anonymous session recordings, to understand how the website is used and where to improve it. Active only after consent.
• CookieScript — shows the cookie banner, records your choices and switches on Google Analytics and Microsoft Clarity only if you accepted them.
• WhatsApp (Meta Platforms Ireland Limited) — if you use the website's WhatsApp button, the chat takes place entirely on the WhatsApp platform: your phone number and messages are processed by Meta under the WhatsApp privacy policy, which may involve transferring data to countries outside the EU with the safeguards required by law (standard contractual clauses). I have no control over this processing and I am not responsible for Meta's privacy policies.

Cloudflare, Google and Microsoft are based in the United States: any transfer of data outside the European Union takes place with the safeguards required by the GDPR (EU-U.S. Data Privacy Framework or standard contractual clauses).

Fonts are served directly by this website: your browser does not contact external services to download them.

The form also includes a hidden anti-spam field (honeypot): if a bot fills it in, the request is discarded without being forwarded.

The website uses technical cookies, needed for the banner itself to work, and third-party analytics cookies (Google Analytics, Microsoft Clarity), set only after your explicit consent. Consent is collected and managed through CookieScript, which shows a banner on your first visit and lets you accept, reject or customise the cookie categories. You can change your choices at any time from «Cookie preferences», at the bottom of every page.

The website does not use profiling or advertising cookies, and the language you choose is not stored in your browser. Cloudflare Turnstile, active only on the contact form, may use technical tools that are strictly necessary for the anti-spam check and are not used to track you.

Data sent through the contact form is kept, in my inbox and in the website's CMS, only for as long as needed to handle your request and any resulting professional relationship, and in any case for no more than 24 months from the last contact, unless the law requires otherwise (e.g. keeping accounting records for tax purposes). Visit statistics are aggregate only and contain no data that identifies you.

At any time, by writing to info@scarpadev.com, you can request:

• access to the personal data concerning you;
• correction of inaccurate or incomplete data;
• erasure of your data ("right to be forgotten");
• restriction of processing;
• data portability;
• objection to processing;
• to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali).

The website is served over HTTPS only. Data sent through the form travels encrypted: it is sent from the website's mailbox and saved in the website's database, on the same server, in a password-protected area that only I can access.

This policy may be updated over time, for example when new services are added to the website. The date of the last update is shown at the top of the page.