Data controller
Simone Bova. For any request about this notice or your data: simone@yempik.ai.
What data, why, on what basis
Traffic and performance statistics. I use Vercel Web Analytics and Vercel Speed Insights in cookieless mode: visitors are counted via a technical hash generated from the request, valid for at most one day and unable to recognize you across days or across sites. The data I consult is aggregated (pages viewed, device type, approximate geographic area, loading metrics) and cannot identify you. Legal basis: legitimate interest in understanding whether the site works and gets read, with the smallest possible impact on your privacy.
Technical hosting logs. The site is served by Vercel's CDN; like any hosting provider, Vercel processes technical connection data (e.g. IP address) to deliver the service, keep it secure and prevent abuse. Legal basis: legitimate interest in delivering and securing the service.
Email. If you write to me, I process your address and the content of your message to reply and for any follow-up to the conversation. Legal basis: responding to your request. No lists, no automated mailings.
Who processes the data, and where
The hosting and analytics provider is Vercel Inc. (USA), acting as a service provider under its own privacy notice (si apre in una nuova scheda). Any data transfers to the United States rely on the safeguards provided by the GDPR (EU-U.S. Data Privacy Framework participation and/or standard contractual clauses). I do not sell or share data with third parties for marketing purposes.
What is NOT here
No profiling cookies, no tracking pixels, no advertising, no fingerprinting for cross-site tracking, no automated decision-making producing effects on you. If the site ever introduces tools that require consent, this page and the consent collection mechanism will be updated before they go live.
Retention
Emails are kept for as long as needed to handle the conversation and any relationship that follows. Statistics are retained in aggregated form under Vercel's terms of service. Technical logs follow the provider's retention periods.
Your rights
To the extent data concerns you, you can exercise the rights under Articles 15-22 GDPR (access, rectification, erasure, restriction, objection, portability) by writing to the address above. You also have the right to lodge a complaint with a supervisory authority (for Italy, the Garante per la protezione dei dati personali), as provided by Art. 13 GDPR.
// collecting little isn't just a matter of respect: it's also the simplest architecture to keep honest.