Privacy Policy

Last updated: 24 October 2026

1. Data Controller

The data controller is Gianluca De Falco, author and owner of the website https://gianlucadefalco.com.

For any questions or requests regarding the protection of personal data, please contact gianluca@defalco.me.

2. Personal Data Collected

When visiting this website, the following categories of personal data may be processed:

  • Browsing data: IP address, browser and device information, date and time of requests, pages visited, and technical data necessary for the operation and security of the website.
  • Voluntarily provided information: email address, name, and any other information provided by visitors who contact the author by email.
  • Technical cookie data: information necessary for website functionality, security, and language preferences, depending on the features actually in use.

3. Purposes and Legal Bases for Processing

Personal data is processed for the following purposes:

  • To ensure the proper functioning, maintenance, and security of the website, based on the data controller’s legitimate interests.
  • To respond to communications voluntarily submitted by visitors, based on the legitimate interest in managing correspondence or, where applicable, taking steps at the request of the data subject prior to entering into a contract.
  • To comply with applicable legal obligations.

Personal data is not sold to third parties.

4. Hosting and Technical Services

This website is built using WordPress and, as of the date of this Privacy Policy, is hosted by SiteGround.

To ensure the proper functioning and security of the website, the hosting provider and technical services in use may process browsing data, access logs, and information necessary to identify technical issues or unauthorized access attempts.

The website also uses Polylang to manage its Italian, English, and Spanish language versions.

5. Cookies and Language Preferences

The website uses the technical cookie pll_language, managed by the Polylang plugin, to remember the visitor’s selected browsing language.

This cookie may contain the values it, en, or es and has a default lifespan of one year.

The WordPress administration area may also use technical cookies required for authentication and the management of authorized users.

During technical checks carried out on 24 October 2026 on the public pages examined, no advertising or profiling cookies or requests to external traffic analytics services were detected.

Strictly necessary technical cookies do not require prior user consent. Visitors can manage or delete cookies through their browser settings.

6. Email Communications

Visitors may voluntarily contact the author using the email address published on the website.

The information provided is used exclusively to handle the request, provide a response, and manage any directly related communications.

Providing this information is voluntary. However, the sender’s email address is necessary in order to receive a reply.

7. Data Retention

Personal data is retained for as long as necessary to fulfil the purposes for which it was collected.

Communications received by email are retained for a maximum of 12 months from the most recent communication, unless a longer retention period is necessary to comply with legal obligations, manage potential disputes, or protect the rights of the data controller.

Technical access logs are managed through the SiteGround hosting service. Historical logs accessible to the data controller are available for up to 30 days. Any additional technical retention carried out by the provider is governed by its applicable conditions and security purposes.

Personal data that is no longer necessary is deleted or anonymized, where applicable.

8. Data Recipients and International Transfers

Personal data may be accessible to technical service providers necessary for website operation, hosting, and email services, within the limits of their respective functions.

Any transfer of personal data outside the European Economic Area must comply with the safeguards established by Regulation (EU) 2016/679 (GDPR).

9. Links to External Websites

This website may contain links to external platforms, including Amazon, Goodreads, Instagram, and online bookstores.

When visitors access these external websites, the respective privacy policies of those platforms apply.

The data controller of this website does not control how those external platforms process visitors’ personal data.

10. Data Subject Rights

Under Regulation (EU) 2016/679 (GDPR), individuals may exercise, where applicable, their rights of access, rectification, erasure, restriction of processing, objection, and data portability.

To exercise these rights, please contact gianluca@defalco.me.

Individuals also have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali).

11. Changes to This Privacy Policy

This Privacy Policy may be updated to reflect changes to website functionality, services used, or applicable legislation.

Any updates will be published on this page.