Last updated: 31 October 2026
Data controller
Santiago Ceresa
info@santiagoceresa.com
When you contact me
Email links open your own email application. If you write to me, I process your email address, name and the information in your message to reply and follow up on your request. Please avoid sending sensitive information that is not needed.
For enquiries about a potential project, the legal basis is taking pre-contractual steps at your request under Article 6(1)(b) GDPR. For other correspondence, it is the legitimate interest in answering your enquiry under Article 6(1)(f). Contacting me is optional; I cannot reply without the necessary contact details. I do not use these contacts for newsletters or advertising.
Providers and transfers
Hosting and email providers process data as needed to deliver those services, according to their respective roles. Vercel Inc. hosts this website. Cloudflare routes incoming email for this site's domain, and Apple provides iCloud Mail for my iCloud address. I do not sell data or share it for advertising.
These providers use international infrastructure that may process data outside the European Economic Area, including in the United States. Their privacy notices explain their processing and transfer safeguards, including standard contractual clauses where applicable. Vercel's data processing agreement applies where it acts as a processor under the relevant service contract. You can contact me for information about the providers used for correspondence or a copy of the applicable safeguards.
Retention
I keep enquiry correspondence until the request and its follow-up are complete. If a project follows, relevant correspondence is kept for that relationship. Afterwards, only records needed for a legal obligation or a specific legal claim are retained, until the applicable legal period expires or the dispute is resolved; other correspondence is deleted.
The website application has no visitor database. Technical service data is retained under the hosting provider's service settings and privacy notice, for service operation, resolving security incidents and applicable legal requirements.
Your rights
Where provided by the GDPR, you can request access, correction, erasure, restriction and portability. To exercise your rights, email me at the address above.
You may object at any time, on grounds relating to your particular situation, to processing based on legitimate interests.
I reply without undue delay and within one month. Where permitted for complex or numerous requests, this may be extended by up to two further months; I will explain any extension within the first month.
You may complain to the Italian Data Protection Authority or your competent supervisory authority. I do not carry out profiling or make decisions based solely on automated processing.