This is a personal static site. It doesn’t sell anything, doesn’t run a newsletter, doesn’t host comments. The occasions on which it processes personal data are few, and this page lays them all out—no boilerplate from a generator.
Last revised: May 2, 2026.
Data controller
Andrea Margiovanni—Pescara, Abruzzo, Italy. Contact: hello@margiovanni.it.
I process the data on my own behalf, as a natural person. There is no Data Protection Officer because the volume and nature of the processing don’t trigger the requirement under Article 37 GDPR.
What I actually collect
Server logs (Cloudflare). The site is hosted on Cloudflare Pages. For every HTTP request, Cloudflare automatically records—as any hosting provider does—your IP address, user-agent, timestamp, and the URL requested. These logs are used to deliver the page, mitigate abuse (DDoS, aggressive scraping), and diagnose failures. I don’t read them to profile visitors: the use is operational. For retention details, see the Cloudflare Privacy Policy.
One functional cookie: pref_lang.
When you click a flag in the language switcher in the top right,
the site writes a pref_lang cookie that remembers your choice
(it, en, fr, de). It lasts one year and is scoped to this
domain (SameSite=Lax, Secure). It isn’t set on first visit and
doesn’t fire unless you click: it exists only so you don’t have to
pick the language every time. Because it is strictly functional, it
is exempt from prior consent under Article 122 of the Italian
Privacy Code (the local implementation of the ePrivacy Directive).
Email, if you write to me. If you write to hello@margiovanni.it, the message stays in my inboxes (Apple iCloud Mail) for as long as I have a reasonable reason to keep it—usually for the duration of the conversation and a few months after, unless the nature of the request calls for longer (commercial proposals, invoicing).
What I do not collect
- No analytics is active. Cloudflare Web Analytics is wired up in the code, but the token is empty—the script doesn’t load. If I ever turn it on, I’ll update this page.
- No marketing pixels, no tracking cookies, no fingerprinting.
- No contact form, newsletter, comment system, login.
- No third-party embeds (YouTube, X/Twitter, Vimeo, Instagram, Google Fonts, Gravatar): pages render without loading resources from external domains.
- Internal search is client-side:
search-index.jsonis a static file, queries stay in your browser and are never sent to an external server.
Who the data is shared with
With Cloudflare, as an external processor (web hosting and CDN). Cloudflare operates a global network: some requests may be served from edge nodes outside the European Union. The transfer is covered by the Standard Contractual Clauses published by the European Commission and by the mechanisms described in their privacy policy.
With Apple (iCloud Mail), the processor for the inbox that receives any email you send me.
I don’t sell, share, or transfer data to third parties for commercial or marketing purposes.
Legal basis
- Server logs: legitimate interest of the controller (Article 6.1.f GDPR) in keeping the site running and defending it from abuse.
pref_langcookie: technical necessity to deliver the service you requested—the language you picked (Article 6.1.b GDPR; exempt from consent under Article 122 of the Italian Privacy Code).- Email: performance of pre-contractual measures or legitimate interest in replying to a request you sent me (Article 6.1.b or 6.1.f GDPR, depending on the content).
Your rights
You can ask me at any time, by writing to hello@margiovanni.it:
- confirmation that I’m processing data about you, and access to it;
- correction or deletion;
- restriction of processing;
- objection to processing based on legitimate interest;
- portability.
I reply within a month (extendable to three for complex requests,
Article 12 GDPR). To delete the pref_lang cookie you can also do
it yourself from your browser settings.
If you believe the processing infringes the GDPR, you can lodge a complaint with the Italian data protection authority, the Garante (garanteprivacy.it), or with the authority of the country where you habitually reside.
Changes
I’ll update this page when anything substantial changes—new analytics, new embed, new tool. The last revised date at the top is what counts.