Privacy Policy

1. Data Controller

The Data Controller is Oscar Simone, acting as a natural person.

For any privacy request or to exercise your data protection rights, you can write to info@oscarsimone.com.

2. Data processed

The website processes only the data necessary to respond to enquiries, provide requested services and ensure the technical operation and security of the website.

• Data voluntarily provided through the contact form: name, email address and message are required; phone number, company, type of enquiry, budget and timeline are optional.
• Data contained in subsequent communications sent by email, phone or WhatsApp, to the extent necessary to manage the enquiry or professional relationship.
• Technical browsing data processed by the IONOS hosting infrastructure, such as referrer, requested resource, browser, operating system, device type, access time and anonymised IP address.

3. Purposes and legal bases

Data submitted through the form or other contact channels is used exclusively to respond to the enquiry, prepare any requested quotation and manage subsequent communications related to the enquiry or a professional relationship.

The legal basis is the performance of pre-contractual measures taken at the data subject’s request and, where a professional relationship is established, performance of the relevant contractual relationship. Any processing necessary to comply with legal obligations is based on compliance with those obligations.

Technical data necessary for the security, stability and proper delivery of the website is processed on the basis of the legitimate interest in protecting and maintaining the service.

Personal data is not used for newsletters, promotional communications, behavioural advertising or marketing purposes.

4. Contact form

The contact form is designed to send the enquiry directly to info@oscarsimone.com through IONOS infrastructure. Enquiries are not stored in a website database.

To limit abuse and automated submissions, the form endpoint may temporarily use the IP address received by the server to derive a non-reversible pseudonymised key for rate limiting. The raw IP address is not written by the form to a website database or application file.

The form uses invisible anti-spam controls: a honeypot, request-source verification, payload-size limits, server-side validation and rate limiting. No visible CAPTCHA is used unless it becomes strictly necessary for service security.

The mandatory checkbox confirming that the Privacy Policy has been read is an acknowledgement of this notice and is not consent to marketing activities.

5. Data retention

If an enquiry does not result in an engagement or professional relationship, the data and related correspondence are retained for a maximum of 12 months after the enquiry has been concluded, unless longer retention is necessary to establish, exercise or defend a legal claim or to comply with legal obligations.

If the enquiry results in a professional relationship, the data is retained for the duration of that relationship and subsequently for the period required to comply with legal, tax and administrative obligations or to protect applicable rights.

Pseudonymised counters used by the form for rate limiting operate on a short server-side window (15 minutes by default); expired counters are not reused and are periodically removed by the endpoint. For visitor technical data processed as part of the IONOS Hosting product, IONOS currently states a retention period of 8 weeks.

6. IONOS hosting, email and SiteAnalytics

The website and email service use IONOS services. For its Hosting product, IONOS states that it collects technical visitor data and directly anonymises the IP address. This data is used for security, stability and service quality purposes.

IONOS SiteAnalytics may process technical data to produce aggregated usage statistics and support website optimisation. This website does not use Google Analytics, Meta Pixel or other first-party marketing or profiling trackers.

According to IONOS documentation currently published for the Hosting product, visitor data is not disclosed to third parties and is not transferred to third countries outside the European Union as part of that processing.

7. Cookies and local storage

The website does not use profiling, advertising or marketing cookies.

The browser’s local storage may be used solely for technical or user-experience functions, for example to remember the selected language and visit state. This information remains in the user’s browser and is not used to create commercial profiles.

Because the website does not install marketing cookies or trackers, no consent banner is provided for advertising purposes.

8. Recipients and technical providers

Personal data is not sold, transferred or shared with third parties for commercial or marketing purposes.

Data may be processed only by technical providers that are strictly necessary for the delivery of the website, email, security or connected services, within the limits of their respective functions and applicable obligations. These include IONOS for hosting and email services.

9. International transfers

The website is configured, where reasonably possible, to avoid transfers of personal data outside the European Union and European Economic Area.

If a strictly necessary service were to involve an international transfer in the future, processing would take place in compliance with the GDPR requirements and applicable safeguards. For visitor data processed through the IONOS Hosting product, IONOS currently states that there is no transfer to third countries.

10. WhatsApp and external links

The website may provide links to WhatsApp and other external services or websites. Opening those services takes place on third-party platforms that operate under their own privacy notices and terms of use.

Simply loading pages on this website does not automatically send personal data to those services through marketing pixels or first-party marketing trackers deployed by this website.

11. Automated decision-making and profiling

No automated decision-making or profiling is carried out on the basis of data collected through this website or its contact form.

12. Your rights

Where provided by the GDPR, you may exercise your rights of access, rectification, erasure, restriction of processing, objection and data portability, together with the other applicable rights under Articles 15–22 of Regulation (EU) 2016/679.

To exercise your rights, you can write to info@oscarsimone.com. Your request will be handled within the time limits required by applicable law.

You also have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali) if you believe that your personal data is being processed in breach of applicable data protection law.

13. Updates to this policy

This policy may be updated when the website, the services used or applicable legal requirements change. The date of the latest update is shown at the top of this page.