Privacy Policy

1. Data controller

The data controller is Carlo Ronchin (Carlo Digital Craft) — Via Don Corrado Ballin 9, Pianiga VE, Italy.
For any request about your data, write to hello@carloronchin.it.

2. Data we collect

This site only collects the data you choose to provide through the contact form:

• name;
• email address;
• the content of the message you write.

We do not use profiling cookies, we do not run advertising tracking, and we do not build user profiles. We process the technical browsing data (for example, your IP address) strictly needed to serve the site securely, as described in section 5.

3. Purposes and legal basis

• Replying to your requests sent through the contact form. Legal basis: pre-contractual measures taken at your request and our legitimate interest in replying to the messages we receive (Art. 6(1)(b) and (f) GDPR).
• Protecting the form from spam and abuse. Legal basis: our legitimate interest in keeping the service secure (Art. 6(1)(f) GDPR).

4. How we process data

Data is processed electronically, with security measures designed to prevent unauthorised access, loss, or disclosure. Processing is carried out by the controller and by the processors listed in section 5.

5. Third-party services (data processors)

To run the site we rely on the following providers, who process data on our behalf:

• Cloudflare, Inc. — site hosting (Cloudflare Pages) and anti-spam protection for the form (Turnstile). It processes technical browsing data, including your IP address, to serve and protect the site.
• Resend (Plexo, Inc.) — delivery of the emails generated by the contact form. It receives the data entered in the form so your message can reach us.

The fonts used by the site (Unbounded and Onest) are hosted on our own domain: no requests are made to external services (CDNs), and your IP address is not shared with third-party font providers.

The site links to the Carlo Digital Craft shop on Etsy and to the template demo sites. These links open external websites: when you visit them, their own privacy policies apply (for purchases, Etsy's).

Some providers may also process data outside the European Economic Area. In that case, the transfer relies on the safeguards set out in Art. 44 et seq. GDPR (for example, Standard Contractual Clauses).

6. Cookies

This site does not use profiling or tracking cookies and does not set third-party advertising cookies. For this reason there is no cookie consent banner. Any technical tools needed for security (for example, Turnstile) do not profile users.

7. Retention period

Data sent through the contact form is kept for as long as needed to handle your request and to meet any legal obligations, and is then deleted. You can ask for it to be deleted at any time (section 8).

8. Your rights

As a data subject, under Articles 15–22 GDPR you have the right to:

• access your data and obtain a copy;
• ask for it to be corrected or deleted;
• restrict or object to its processing;
• request data portability;
• lodge a complaint with the Italian Data Protection Authority, the Garante per la protezione dei dati personali (garanteprivacy.it).

To exercise your rights, write to hello@carloronchin.it.

9. Changes to this policy

This policy may be updated over time. The version published on this page is the one in force; the date at the top shows when it was last updated.