Privacy
This notice explains what personal data this website handles, why, and what you can ask for. The short version: no cookies, no tracking profiles, no forms that send data to a server.
Last updated:
Who is responsible
The data controller is Matteo Daniel Mezin, an independent designer based in Italy. For anything about your data, write to info@matteodanielmezin.com.
What data is processed
- Emails you send. If you write to me, I receive your email address, your name if you include it, and whatever you choose to share in the message.
- The brief form. The project brief on this site is not sent to a server. It only opens your own email app with a pre-filled message. Nothing reaches me unless you press send there, and then it is an ordinary email.
- Server logs. When you load a page, the hosting provider processes technical data such as your IP address, browser type, the page requested and the time. This is needed to deliver the site and keep it secure.
- Aggregated statistics. The site uses Vercel Web Analytics to count visits. It does not use cookies and does not build a profile of you. I only see aggregated figures, such as page views, referring sites and country.
Why, and on what legal basis
- Replying to your request and preparing a quote or proposal: steps taken at your request before a contract (Art. 6(1)(b) GDPR). If we then work together, the data is also used to perform the contract.
- Keeping the site running and secure, and understanding in aggregate how it is used: my legitimate interest (Art. 6(1)(f) GDPR). The data involved is minimal and not used to identify you.
- Legal obligations, such as keeping invoices and related correspondence for tax purposes (Art. 6(1)(c) GDPR).
How long it is kept
- Enquiries that do not lead to a project are deleted within 24 months of the last exchange. Teams often plan one season ahead, so this covers a follow-up for the next season and no more. You can ask me to delete them sooner at any time.
- Contracts, invoices and the correspondence linked to them are kept for 10 years from the last entry, as required by Italian law (article 2220 of the Civil Code).
- Server logs are kept by the host for a short period, under its own retention settings. Analytics data is aggregated and does not identify you.
Who else handles it
Data is never sold or shared for marketing. It is handled only by the providers needed to run the site and email:
- Vercel Inc. (United States): hosting, server logs and Web Analytics.
- My email provider: storing and delivering the emails we exchange.
These providers act as processors, under agreements that limit how they may use the data.
Transfers outside the EU
Vercel is based in the United States, so some data may be processed there. These transfers rely on the EU–US Data Privacy Framework where the provider is certified under it, and otherwise on the European Commission's Standard Contractual Clauses. You can ask for more information about these safeguards at info@matteodanielmezin.com.
Cookies
This site does not set cookies, and nothing on it requires your consent to cookies. Your browser may keep ordinary cached files to load pages faster; these are not used to track you.
Your rights
Under the GDPR you can, at any time:
- access the personal data I hold about you;
- have it corrected if it is inaccurate;
- have it erased, or its use restricted;
- object to processing based on legitimate interest;
- receive the data you gave me in a portable format.
Write to info@matteodanielmezin.com. I will reply within one month. You can also lodge a complaint with a supervisory authority. In Italy, that is the Garante per la protezione dei dati personali.
Changes
If the way this site handles data changes, this page will be updated and the date above will change.