Privacy policy What this site knows
Almost nothing. There is nothing here to fill in and nothing to sign up for. The longer answer is below, written to be read.
Who is responsible
The data controller is Matteo Leoni, NIF Y3782215V. There is no big corp behind this site, just me. Anything to do with this page goes to the same address as everything else:
What I collect
Nothing you type, because there is nothing to type. No contact form, no comments, no account, no mailing list. I do not count visits and I keep no record of who came here.
Cookies
The three addresses, matteoleoniactor.com, matteoleoniactor.es and matteoleoniactor.it, set no cookies. Each language has its own domain, so the site knows which one to serve without storing anything about you.
If a cookie is ever needed it is a technical one, there to make the page work, never to track or profile you. Those need no consent, which is why you never get a cookie banner.
Where the site runs
Opening a page means your device asks for it, and that request carries your IP address, the user agent your browser sends and the page you asked for. Those lines land in the logs of the company that hosts the site. I have no other log and no database of my own.
Cloudflare runs the domains, so every request passes through it before it reaches the host at all.
The legal basis is legitimate interest, article 6.1.f GDPR: without that traffic data the site cannot be delivered or defended from attack. How long those logs are kept is the provider’s decision under its own terms, not mine.
The site is built and updated by an outside studio, which needs technical access to the server to do it. Its mark is at the bottom of every page. If you want the names in writing, the studio’s and the host’s, ask at the address above.
If you write to me
The addresses on this site open your own mail program. What you send then sits in my mailbox: your address, your name if you sign it, and whatever you wrote. The mailbox is a Gmail account, so Google holds it as my mail provider.
If you write to an address on one of these domains, Cloudflare forwards the message on to that mailbox, so it passes through Cloudflare as well as Google.
I use it to answer you and for nothing else. The basis is your own request, article 6.1.b GDPR: you wrote to me and expect a reply. I keep the exchange while it is still live and delete it when you ask.
Outside the European Union
The companies that host the site, run its domains and carry its mail are international groups, and I have no way of knowing which data centre any one request ends up in. Some of this data may therefore be handled outside the European Union.
Where that happens, the transfer rests on the safeguards the GDPR requires for countries outside the Union, set out in those providers’ standard contracts.
Links and other companies
Everything a page here loads comes from this site: the typeface, the photographs, the video on the ATIF page. No Google Fonts, no embedded player, no tracking pixel, so nobody else watches you read. The rest are links: Instagram, IMDb, e-Talenta, WhatsApp. Follow one and you are on their service, under their privacy rules, and they can see you arrived from here.
The WhatsApp button on the ATIF page works the same way. It opens a chat in WhatsApp, and from there Meta handles the conversation.
Your rights
You can ask what I hold about you, have it corrected or deleted, object to my using it, ask for a copy to take elsewhere, or ask me to put it on hold. Write to the address above. I read those myself.
For more on privacy rights and obligations in Spain, and to lodge a complaint, the supervisory authority is the Agencia Española de Protección de Datos, at www.aepd.es.
Last updated