Privacy policy

Data controller

The data controller is Whattadata S.r.l., with registered office at Rotonda dei Mille 1, 24122 Bergamo, Italy, VAT number 04836660169. For official communications, you can write to the certified email address whattadata@trustpec.it or to info@whattadata.it.

1. Scope of this policy

This policy describes the processing connected with browsing whattadata.it. It does not cover platforms, subdomains, services or third-party websites linked from this site, which may have their own privacy policies.

2. Data processed while browsing

The site does not contain contact forms, restricted areas, payment systems, analytics tools, advertising pixels or profiling features. Technical data required to operate the site may still be processed while you browse, including your IP address, user-agent, request date and time, requested URL and similar technical information generated by browsers and network systems.

3. Purposes and legal bases

• Website delivery and technical security: browsing data is processed to deliver pages, prevent abuse, diagnose technical issues and keep the service secure. The legal basis is the controller's legitimate interest in ensuring the website operates correctly.
• Responding to voluntary enquiries: if you write to an email address listed on the site, we process your email address, message and any information you choose to provide. The legal basis is taking pre-contractual or contractual steps at your request and, where applicable, the legitimate interest in managing the communication.
• Legal obligations and protection of rights: certain data may be retained or disclosed when necessary to comply with legal obligations or to establish, exercise or defend legal claims.

4. Cookies and tracking technologies

As of the date of this policy, the site does not set cookies and does not use tracking, analytics or profiling tools. localStorage and sessionStorage are not used to identify visitors. Because the site sets no non-essential cookies, no consent banner is displayed. If cookies or equivalent technologies are introduced in the future, this policy will be updated and consent will be requested where required.

5. Hosting and external resources

• GitHub Pages: the site is hosted on GitHub Pages. GitHub and its technical infrastructure may process browsing data and technical logs to deliver the site, maintain security, prevent abuse and operate the service.
  GitHub Privacy Statement
• Lineicons: social icons on the homepage are loaded from an external CDN. Requesting these resources may involve Lineicons and its CDN infrastructure processing technical data such as your IP address.
  Lineicons Privacy Policy
• jsDelivr: the Three.js library on the homepage is loaded from an external CDN. Requesting this resource may involve jsDelivr and its CDN infrastructure processing technical data such as your IP address and browser information.
  jsDelivr Privacy Policy

6. Recipients, transfers and retention

To the extent necessary, data may be disclosed or made accessible to technical providers supporting the site (hosting, CDN and security services), email providers handling voluntary enquiries, and advisers, professionals or authorities where required by law or to protect the controller's rights. The site's main technical providers are GitHub Pages, Lineicons and jsDelivr, including their respective CDN infrastructures. Some providers may process data outside the European Economic Area. In such cases, transfers take place under the applicable safeguards described in their policies or terms, including adequacy decisions, standard contractual clauses or other GDPR mechanisms where applicable. Logs and technical data are retained only as long as necessary for site security, maintenance and operation, in line with the policies of the providers involved. Email communications are kept for as long as needed to handle the enquiry and any related administrative, contractual or legal obligations.

7. Automated decision-making

The site does not profile visitors or use automated decision-making that produces legal or similarly significant effects on users.

8. Your rights

Subject to the limits and conditions of the GDPR, you may exercise your rights of access, rectification, erasure, restriction of processing, objection and data portability where applicable. If processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

9. Exercising your rights and making a complaint

To exercise your rights or request more information, write to info@whattadata.it or to the certified email address whattadata@trustpec.it. You also have the right to lodge a complaint with the Italian data protection authority, Garante per la protezione dei dati personali.