Skip to main content

Privacy Policy

Published April 10, 2023

Table of Contents
  1. Introduction
  2. Third party data processing and storage
    1. Netlify
    2. Oracle Cloud Infrastructure
    3. Storyblok
  3. First-party analytics
  4. Updates and revisions to this policy

Last updated: November 28, 2023.

Introduction

This website is designed to minimize the collection of data from visitors.

  • This website uses Netlify, Storybook and Oracle Cloud Infrastructure for content delivery.

  • The site features first-party analytics, powered by a private instance of Plausible Analytics.

  • With the exception of images and media assets, served through Storyblok, the site does not enable connections to third-party HTTP resources without the user's prior consent or explicit action.

  • Any links to third-party websites are identified with an appropriate icon, as follows: https://example.com/

Third party data processing and storage

This website uses third party services to process and store data. These services are used to deliver content and improve the user experience.

Netlify

This static website is hosted on Netlify's CDN.

The choice fell on Netlify due to the attention they paid to static sites, the availability of a CDN network for content distribution, as well as the availability of additional services designed for sites created with Jamstack architecture.

In accordance with the GDPR, Netlify processes the IP (Internet Protocol) address of the device accessing the site and additional traffic data, including the browser software and operating system used by the computer and the URL address from which the visitor came. This information is processed for the purpose of diagnosing technical problems and defending against attacks.

Pursuant to the GDPR, Netlify is identified as a Data Processor. The terms of the processing are indicated in the relevant Data Processing Agreement (PDF).

Netlify has implemented and is committed to maintaining an information security program in compliance with SOC2 Type II and ISO 27001 standards.

Netlify undertakes to process visitor data exclusively for the purpose of providing the services offered, or in accordance with the legitimate interest in providing a functional website. Any data collected is retained for 90 days online, and for a period of 1 year offline.

Netlify is based in the United States and primarily processes data there. The data processing agreement with Netlify includes data processing clauses and an international data transfer support mechanism (European Commission Standard Contractual Clauses) as required by the EU General Data Protection Regulation.

This domain also uses Netlify to manage the DNS (Domain Name System).

Oracle Cloud Infrastructure

The first-party analytics service is hosted on an Oracle Cloud Infrastructure server.

The location of the chosen data center is: Milan, Italy.

Oracle Cloud Infrastructure is committed to ISO and SOC security standards. Further information about Oracle Cloud Compliance is available on their website.

Oracle Cloud's data protection policies are available on their Services Privacy Policy page.

Storyblok

In accordance with the GDPR, Storyblok processes the IP (Internet Protocol) address of the device downloading images and/or any other digital media assets on this website, as well as the browser software and operating system used by the computer and the URL address from which the visitor came. This information is processed for the purpose of diagnosing technical problems and defending against attacks.

Storyblok is committed to ISO 27001 standards, and audits are conducted on an annual basis by a registered external auditor.

Storyblok leverages a global content delivery network (CDN) from AWS called CloudFront that securely delivers data to you with low latency and at high transfer speeds.

Storyblok is based in Austria, and processes data in European Union.

https://www.storyblok.com/legal/legal-notice

https://www.storyblok.com/legal/dpa-storyblok

First-party analytics

As mentioned above, the site features first-party analytics, based on a private instance of Plausible Analytics. This private instance is hosted on an Oracle Cloud Infrastructure server, located in Milan, Italy.

The following data is collected and processed:

  • Hash based on IP address

  • Device type

  • Operating system

  • Browsers

  • Country

Further information on how Plausible Analytics works is available on their Data Policy page.

The service does not use cookies to identify the user, and the data collection takes place in an aggregate and anonymous form, with the aim of knowing which contents are most popular on this site, monitoring and optimizing the available resources.

The statistical processing takes place on its own, without this analysis resulting in an activity which, going beyond the boundaries of a mere statistical count, takes on the characteristics of a processing aimed at making decisions of a commercial nature.

Updates and revisions to this policy

  • Nov, 28 2023: Added a section dedicated to Storyblok

  • Apr, 12 2023: An English translation of this policy is provided

  • Apr, 10 2023: Initial release