Privacy and cookies

Last updated: 23 October 2026

This page explains how personal data is handled on gfusco.com, in line with the EU General Data Protection Regulation (Regulation (EU) 2016/679, “GDPR”) and the Italian Data Protection Code (Legislative Decree 196/2003, as amended).

Data controller

Giuseppe Fusco, sole trader
Via Tremana 7, 24123 Bergamo (BG), Italy
VAT no. IT04176050161
Email: hello@gfusco.com

What data I collect and why

Contact form. When you request a free audit, the form collects your name, email address, website (optional), type of business, your message and your confirmation that you have read this policy. I use this data only to reply to your request, assess your situation and, if you ask for it, prepare a proposal. The legal basis is taking steps at your request before entering into a contract (Art. 6(1)(b) GDPR). Providing the data is voluntary, but without your name, email and message I cannot reply.

Emails. If you write to hello@gfusco.com, I process your email address and whatever you include in your message, on the same legal basis, to answer you.

Hosting logs. Like any website, the server automatically records technical data when you visit a page, such as your IP address, browser type, requested page, date and time. This data is used only to deliver the site, keep it secure and fix errors, based on my legitimate interest in running a secure website (Art. 6(1)(f) GDPR). It is not used to identify you or build profiles.

Cookies and tracking

This site does not use cookies, analytics, advertising pixels or any other tracking tools, and it does not store anything on your device. Fonts and images are served from this site, not from third parties. The LinkedIn link takes you to LinkedIn only if you click it; from that point LinkedIn’s own privacy policy applies.

Who processes the data

I do not sell or share your data for marketing. To run the site and receive messages I rely on these providers, who process data on my behalf:

• Vercel Inc. (United States): website hosting and server logs.
• FormSubmit (formsubmit.co, operated by Devro LABS): receives the contact form submission and delivers it to me by email. According to its documentation, FormSubmit keeps a copy of submissions for 30 days.
• Forward Email (forwardemail.net): forwards email sent to hello@gfusco.com to my mailbox.
• Google (Gmail): the mailbox where form submissions and emails are received and stored.

Some of these providers may process data outside the European Economic Area. In that case the transfer relies on the safeguards required by Chapter V GDPR, such as an adequacy decision (for example the EU-US Data Privacy Framework) or the European Commission’s standard contractual clauses.

How long I keep the data

• Requests and emails that do not lead to a working relationship: up to 24 months from our last contact, then deleted.
• If we work together: for as long as needed to carry out the work, and for the periods required by Italian tax and civil law for contracts and invoices (generally 10 years).
• Hosting logs: for the limited period set by the hosting provider for operational and security purposes.

Your rights

Under Articles 15 to 22 GDPR you can ask at any time to access your data, have it corrected or deleted, restrict its processing, receive it in a portable format and object to processing based on legitimate interest. To exercise these rights, write to hello@gfusco.com. I will reply within one month.

No decisions are made about you by automated means, including profiling.

Right to complain

If you believe your data has been handled unlawfully, you can lodge a complaint with the Italian supervisory authority, the Garante per la protezione dei dati personali (Piazza Venezia 11, 00187 Rome, www.garanteprivacy.it), or with the authority of the EU country where you live or work.

Changes

If this policy changes, the new version will be published on this page with an updated date.