Privacy notice

Data controller

Piklok S.R.L. (Innovative SME), VAT ID 09545701212, owner of matteorusso.ai, of which Matteo Russo is founder and CEO. No Data Protection Officer (DPO) has been appointed, as it is not mandatory for this processing.

What data we process and why

• Browsing data (technical logs): IP address, date and time, requested page, browser type. They are generated by the hosting provider and are used to run the site and defend it from abuse and attacks. Legal basis: legitimate interest in security and service operation (Art. 6(1)(f) GDPR).
• Anonymous visit statistics: page viewed, language, referring site domain, country and city (inferred from the IP, which is not stored), device type, browser and operating system, and a code that changes every day and cannot be traced back to you. No cookies and nothing stored on your device. Legal basis: legitimate interest in understanding which content is useful (Art. 6(1)(f)). You can opt out by turning statistics off in the cookie preferences or with your browser’s Do Not Track signal.
• Messages and contact requests: if you email us, we process your address and what you tell us to reply and handle your request. Legal basis: pre-contractual measures at your request (Art. 6(1)(b)) or legitimate interest in replying (Art. 6(1)(f)).
• Newsletter signup: it happens on the Substack platform, where you leave your email address. Legal basis: your consent (Art. 6(1)(a)), which you can withdraw at any time with the unsubscribe link in every email.
• Third-party content (YouTube videos and the Substack signup form): loaded only after your consent. See the cookie policy.

Special categories and profiling

We do not ask for or collect special categories of data. We do not profile you or take decisions based on automated processing. We do not sell data.

Who may receive the data

Data is processed by authorised staff of Piklok S.R.L. and by the providers we use, appointed as processors where required:

• Vercel Inc. — hosting and delivery of the site.
• Supabase — database for anonymous statistics, articles and the private area.
• Substack Inc. — newsletter and signup management; it acts under its own notice (substack.com/privacy).
• Google (YouTube) — video playback, only after your consent.

Transfers outside the European Economic Area

Some providers are based or have infrastructure in the United States. Transfers rely on the EU-US Data Privacy Framework where the provider is certified, or on the European Commission’s Standard Contractual Clauses.

How long we keep data

• Technical logs: only as long as strictly necessary, according to the hosting provider’s settings.
• Anonymous statistics: up to 26 months, then deleted.
• Emails and contact messages: up to 24 months from the last exchange, unless required by law or a contract begins.
• Newsletter: until you unsubscribe, as handled by Substack.
• Cookie choice: 6 months, then you will be asked again.

Your rights

You can ask at any time for access, rectification, erasure, restriction, portability, and object to processing (Arts. 15-22 GDPR), and withdraw consent without affecting earlier processing. Write to us with the “Show contacts” button above: we reply within one month.

If you believe the processing breaches the law, you can lodge a complaint with your data protection authority; in Italy, the Garante per la protezione dei dati personali (www.garanteprivacy.it).

Nature of the data and minors

Browsing the site does not require you to provide data. If you do not write to us or join the newsletter, we receive no personal data from you. The site is not aimed at children under 14.

Changes

We may update this notice when the site or the law changes. The date above shows the latest version.