Notice provided under Article 13 of Regulation (EU) 2016/679 (the "GDPR") and Italian Legislative Decree no. 196 of 30 June 2003 to those who visit www.valeriopastore.com and to those who contact the Controller through the details given on it.
Last updated: 25 September 2026.
The data controller is Valerio Pastore (the "Controller"), who can be contacted at contact@valeriopastore.com. No data protection officer has been appointed, as the conditions set out in Article 37 GDPR do not apply.
This notice covers only the website www.valeriopastore.com and the personal data processed when it is visited or when correspondence is exchanged with the Controller through the details given on it. It does not cover processing carried out by the Controller in the performance of professional engagements, which is governed by specific notices provided when the engagement is agreed.
The site contains links to third-party services (LinkedIn, Signal). Processing carried out by those services is governed by their own notices, over which the Controller has no control.
a) Browsing data. In the course of their normal operation, the systems that run the site acquire certain data whose transmission is inherent in the use of Internet communication protocols: the IP address, the date and time of the request, the resource requested, the outcome of the request, and the type and version of the browser. These data are recorded in the technical logs of the hosting provider identified in section 6.
The site uses no cookies or other identifiers, whether session or persistent, first-party or third-party; it uses no analytics tools; and it loads no resources from domains other than its own. None of the circumstances in which Article 122 of Legislative Decree 196/2003 requires the data subject's consent therefore arise.
b) Data provided voluntarily by the data subject. Sending an email to the addresses given on the site results in the acquisition of the sender's address, the content of the message, any attachments, and any further personal data the data subject chooses to disclose.
Data are not processed for marketing purposes, are not subject to profiling or to automated decision-making within the meaning of Article 22 GDPR, and are not disclosed to third parties for their own purposes.
The provision of browsing data is inherent in the use of the site. The provision of data contained in correspondence is optional; without an email address, however, no reply can be given.
Data subjects are advised not to include confidential information, or data falling within the special categories set out in Article 9 GDPR, in ordinary correspondence. At the data subject's request, communication may continue over an encrypted channel.
Data are processed by the Controller. The providers of the technical services needed to deliver the site and handle correspondence may have access to them as processors within the meaning of Article 28 GDPR:
Data are neither disseminated nor sold to third parties. They may be disclosed to public authorities in the cases provided for by law.
The hosting provider is established in the United States of America and the email provider belongs to a group headquartered in the same country. Any transfer of data to the United States takes place in accordance with Chapter V of the GDPR: on the basis of the European Commission's adequacy decision on the EU-U.S. Data Privacy Framework, for companies that participate in it, and, failing that, of the standard contractual clauses adopted by the Commission under Article 46(2)(c) GDPR.
Browsing data are held in the hosting provider's logs for a limited period set by the provider's retention policies and are not retained by the Controller.
Correspondence is retained for as long as is necessary to respond to the enquiry and, thereafter, for the period required to comply with legal obligations or to protect the Controller's rights, within the applicable limitation periods.
Within the limits and subject to the conditions set out in Articles 15 to 22 GDPR, the data subject may exercise the following rights: access to the personal data concerning them; rectification; erasure; restriction of processing; data portability; and objection to processing based on legitimate interest.
Requests should be addressed to the Controller at contact@valeriopastore.com. The Controller responds without undue delay and in any event within one month of receipt of the request, subject to extension in the cases provided for by Article 12(3) GDPR. The Controller may ask the data subject for the information needed to verify their identity.
The Controller applies technical and organisational measures appropriate to the risk, in accordance with Article 32 GDPR. The site is served exclusively over HTTPS with HTTP Strict Transport Security and applies a Content Security Policy that prevents resources from being loaded from external domains.
This notice may be updated. The version published on this page is the one in force; the date of the last update is shown at the top.