Privacy notice

Last updated: 2 November 2026

This notice explains, in plain words, what happens to your information when you use robertogrosa.org. It is short because very little is collected.

Who is responsible

robertogrosa.org is a personal, not-for-profit project of Roberto Grosa, an individual living in the United Kingdom. Roberto is responsible for your information (the "controller" under UK data protection law).

For any question about your information, write to contact@robertogrosa.org. Every message is read.

What is collected, and why

1. The newsletter

You can join it in two ways: the email box at the top of the page, or the box you can tick in the contact form.

• What: your email address (and your name, if you joined through the contact form), the language of the page you used, and where you joined.
• Why: to send you the robertogrosa.org newsletter, including the news when the full website is ready.
• How it works: you first receive one email asking you to confirm. Nothing is added to the list until you press the button in that email.
• Lawful basis: your consent. You can withdraw it at any time with the unsubscribe link in every email, or by writing to the address above.
• How long: until you unsubscribe. After that, only your email address is kept on a "do not email" list, so you are never emailed again by mistake.

2. The contact form

• What: your name, email address and your message.
• Why: to read your message and reply. That is the only reason.
• How it works: your message waits safely until you confirm your email address with the link you receive. If it isn't confirmed within 48 hours, it is deleted automatically and never arrives. Once confirmed, it arrives in Roberto's inbox.
• Lawful basis: legitimate interest in answering people who write.
• How long: as long as needed to answer and follow up, and no longer than two years after the last contact.

3. Keeping the forms safe from spam

• To stop automated spam, the forms use Cloudflare Turnstile, which looks at technical signals from your browser, such as your IP address and browser type.
• Submissions are also counted per visitor for one hour, using a scrambled (hashed) version of your IP address that can't be turned back into the address.
• Lawful basis: legitimate interest in keeping the website and the inbox safe.

4. Visitor statistics

• What: simple totals about visits, such as which pages are read, which website sent the visitor, the country, the type of device and browser, and how fast the pages load.
• Why: to see whether the website is useful and working well, and to improve it. Only totals are ever seen, in a dashboard, never an individual visit or person.
• How it works: Cloudflare Web Analytics. It doesn't use cookies and doesn't store anything on your device, and it isn't used for advertising or to build a profile of you.
• Your choice: statistics are switched off automatically if your browser sends a "Global Privacy Control" or "Do Not Track" signal. You can also switch them off for this device here:

• If you switch them off, your browser remembers that one choice (and nothing else) in its own storage, so it can be respected next time.
• Lawful basis: legitimate interest in understanding, in totals, how the website is used, so it can be improved.

What is never done

• Your information is never sold, rented or traded.
• No advertising trackers, and no profiling.
• The website sets no cookies. Turnstile may use only what is strictly necessary to tell people from bots.
• You are never added to anything you didn't choose.

Who helps (processors)

A few services handle information on Roberto's behalf, only as instructed, under data processing agreements:

• Brevo (Sendinblue SAS, France): sends the emails and holds the newsletter list, on servers in the European Union.
• Cloudflare, Inc.: hosts the website, runs the spam protection (Turnstile) and the visitor statistics, and holds unconfirmed contact messages for up to 48 hours.
• Google Workspace (Google LLC): the email inbox that receives the confirmed messages and the replies.

Some of these companies may process information outside the UK. When they do, the transfer is protected by the safeguards UK law requires, such as UK-approved contract terms or the UK–US data bridge.

Your rights

You can ask to:

• see the information held about you,
• correct it,
• delete it,
• stop or limit how it is used,
• receive it in a portable format.

Where consent is the basis, you can withdraw it at any time. That doesn't affect anything done before.

To use any of these rights, write to the address above. You'll get an answer within one month, free of charge.

If you're not happy

Please say so first, and it will be put right where possible. You also have the right to complain to the Information Commissioner's Office (ICO), the UK's data protection regulator, at ico.org.uk/make-a-complaint or on 0303 123 1113.

Children

This website isn't aimed at children under 13, and their information isn't knowingly collected.

Changes

If anything here changes, this page and the date at the top are updated.

Back to robertogrosa.org · Română