Policy

01 Data controller

The controller is Nicola Zaccarelli, a natural person and the author of the photographs published here. For any request concerning your data, write to the address given on the Contact page.

No data protection officer (DPO, Art. 37) has been appointed: the processing is not carried out by a public body, does not involve regular and systematic monitoring on a large scale, and does not concern special categories or criminal-offence data — none of the cases in which appointment is mandatory.

02 Data processed

2.1 · Contact form

The form sends nothing to any server. Pressing «Send» opens your own mail application with a message already drafted: name and text. The message leaves your mailbox and arrives in mine, like any other email.

Writing is optional, and no part of this site closes if you choose not to. I use what you send me only to reply: the legal basis is your consent (Art. 6(1)(a)) and, for professional enquiries, the performance of pre-contractual measures (Art. 6(1)(b)). I do not pass it on to anyone and I do not add it to any list.

2.2 · Photograph statistics

The number of times each photograph is opened is recorded: one number per photo, nothing else. No identifier, no code stored on your device, no IP address, no date or time.

Views by different people flow into the same counter and become indistinguishable the moment they are recorded: the data is anonymous at source and cannot be traced back to you, not even by cross-referencing. That is why no consent is required and you will not find a banner.

2.3 · Hosting provider logs

Like every site reachable on the network, the provider records ordinary access logs — IP address, date and time, page, browser. I do not consult them to analyse visits: they exist for the security and operation of the service, and the legal basis is the legitimate interest in keeping the site reachable and secure (Art. 6(1)(f)).

03 Cookies and local storage

This site uses no cookies.

It uses the browser's local storage so as not to repeat work already done on every visit. These are technical data: none contains an identifier, none serves to recognise you, none leaves your device. They require no consent under Art. 122 of the Italian Privacy Code.

You can delete all of it from your browser settings, under site data. The site will keep working — just a little slower the first time.

04 Third-party services

The site relies on two providers, and both receive your IP address: it is how the network delivers a file to a browser.

Supabase, Inc. stores the site's texts and the photograph files, as a processor under Art. 28 and on the basis of an agreement restricting its use to the purposes of the service. «Processor» means whoever processes data on behalf of the controller: a different role from the DPO in section 1, which is not appointed here. jsDelivr is the content delivery network from which the site downloads a library needed to read the content.

For any transfers outside the European Economic Area, the standard contractual clauses approved by the European Commission apply (Art. 46). No other service is present on these pages: no third-party analytics, no social buttons, no advertising, no tracking pixels.

05 Retention

The emails you send me stay in my mailbox for as long as is needed to handle the conversation and, if a professional relationship arises, for the statutory periods attached to it; you can ask me to delete them at any time. The photograph counters have no expiry, because they contain no personal data: they are numbers. The hosting provider's logs follow the provider's own technical periods.

06 Your rights

Over the data concerning you — in practice, the emails you have sent me — you may exercise the rights of access, rectification, erasure, restriction, portability and objection (Arts. 15-22). Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of what was done before.

I reply within one month. If the reply does not satisfy you, you may turn to the Italian supervisory authority, Garante per la protezione dei dati personali, to the supervisory authority of the country where you habitually reside, or to the courts. There is no automated decision-making and no profiling.

07 Copyright

© Nicola Zaccarelli — All rights reserved.

The photographs, texts, graphics and structure of these pages are protected by Italian Law No. 633 of 22 April 1941 and by international conventions.

It is not permitted to download, copy, reproduce, modify, crop, republish, distribute, display in public or use in any way — in print, on the web, on social networks or in commercial contexts — the photographs on this site without the author's prior written authorisation, nor to remove or alter the authorship information contained in the files.

TDM reservation. Use of the images for training artificial intelligence systems and their automated extraction is prohibited. Reproduction and extraction of text and data are expressly reserved under Art. 70-quater of Law 633/1941 and Art. 4(3) of Directive (EU) 2019/790.

Browsing the site and viewing the images on screen are of course free: that is what they are here for. What is not free is taking them elsewhere. If you need a photograph for a project, a publication or a print, the answer is not automatically no: write to me.

Any unauthorised use will be pursued in the competent forums. The author reserves every action in defence of his rights, including requests for removal and for compensation.

08 Changes

If the way the site works changes, this document changes too, and the date at the top says so. Previous versions are not kept: the published one is the one that applies.