Privacy

Controller

Denis Mazzotti
VAT 04816740403
Milan, Italy

Contact: contact@denismazzotti.com
No data protection officer is appointed; all requests go to that address.

This site collects as little as possible: no analytics, no advertising or profiling cookies, and therefore no consent banner. Browsing requires no personal data. You share something only if you choose to write.

Data collected

Correspondence. The address in the footer opens your own mail client. Messages are received and retained in order to reply and, where an engagement follows, to carry it out. Legal basis: performance of a contract and pre-contractual steps, Article 6(1)(b), and legitimate interest in answering enquiries, Article 6(1)(f). Correspondence is kept for as long as the exchange requires; where it relates to an engagement, for the period imposed by tax obligations.

Server logs. The hosting infrastructure records incoming requests: IP address, timestamp, page requested, browser type. This serves the operation and security of the site. Legal basis: legitimate interest, Article 6(1)(f). Logs are not combined with other data, not used to identify visitors, and not disclosed.

Cookies

No profiling, analytics or advertising cookies are set on the public site, and no tag manager is present. The single item stored in your browser is a preference you set yourself: pausing the opening showreel is remembered on your next visit. It is held in local storage, remains on your device, is never transmitted, and is cleared with the site data.

The hosting provider may set a strictly necessary cookie to tell automated traffic from human visitors. It carries no profiling function and serves only the security of the site.

The editorial area of this site requires an account and uses technical cookies for authentication. It is not linked from the public pages and is not reachable without credentials.

Typefaces and images

Typefaces are served from this domain; your browser contacts no external font service. Images are delivered and resized by Sanity's content delivery network.

Video

The opening showreel is a file held with the rest of the site's content and delivered by the same network that serves the images. It plays automatically, but no video platform is involved and none receives a request from you.

Video players inside project pages load only after you press play; until then no third party receives a request from you. Once a player has loaded, the provider's own policy applies in addition to this one: Vimeo, YouTube. Players are requested with the most restrictive settings they offer: the Do Not Track signal for Vimeo, the cookie-free domain for YouTube.

Processors

Two providers process data on my behalf, appointed under Article 28 GDPR: Sanity, for content management and image delivery, and Cloudflare, for hosting and content delivery. Part of the processing may take place outside the European Union; such transfers are governed by the standard contractual clauses approved by the European Commission.

Automated decisions

No automated decision-making or profiling within the meaning of Article 22 GDPR takes place.

Your rights

You may request access to your data, its rectification or erasure, restriction of processing, portability, or object to processing, under Articles 15 to 22 GDPR. Requests go to the address above and receive a reply within one month. A complaint may also be lodged with the Italian supervisory authority, Garante per la protezione dei dati personali.