Privacy policy

Data controller

Dario Destro — VAT 12345678901
Address: Via Don C.Torello 53, 04100, Latina (LT), Italy
Email: info@dariodestro.it

Last updated: 28 Luglio 2026

What data is processed, and why

Contact forms and gallery requests. Name, surname, email and the content of your message (including any photo selection) are received by the site's systems (Cloudflare) and delivered to my mailbox through Formspree Inc. (USA) or, depending on the configuration in force, through Brevo (Sendinblue SAS, France — EU). Alongside the message, some technical details of the request (IP address and browser type of the sender) are transmitted to the provider for anti-spam filtering. Legal basis: pre-contractual steps taken at your request (art. 6.1.b GDPR). Transfers to the USA rely on the provider's safeguards (standard contractual clauses / EU-U.S. Data Privacy Framework). Messages are kept for as long as needed to handle the request and any resulting contractual or tax obligations.

Client galleries. Photographs delivered to clients are stored on Dropbox (Dropbox Inc., USA, under the provider's transfer safeguards) and shown on private pages reachable only through a personal protected link, communicated directly to the client. Legal basis: performance of a contract (art. 6.1.b). Galleries stay online for the period agreed with the client and are then removed.

Browsing data. The site is served by Cloudflare, Inc.: for security and operational reasons, its systems log technical data such as IP addresses. Legal basis: legitimate interest in service security (art. 6.1.f).

No tracking. This site uses no profiling cookies, pixels or third-party analytics. Fonts are hosted on this very domain: nothing is sent to Google to load them. The only local storage is your theme preference (light/dark), saved in your browser and never transmitted: as a purely technical setting it requires no consent.

Anti-spam protection (Cloudflare Turnstile)

To defend the site's forms from automated submissions and abuse, this site uses Cloudflare Turnstile (Cloudflare, Inc.), a verification tool that analyses technical browser signals without profiling cookies and without tracking your browsing. Legal basis: legitimate interest in service security (art. 6.1.f GDPR). More in the provider's notice: cloudflare.com/privacypolicy.

Newsletter

By subscribing to the newsletter from the box at the bottom of the home page, your email address (with the subscription language and the date of consent) is processed to send you updates about my work, stories and availability. Legal basis: consent (art. 6.1.a GDPR), collected with double opt-in: the subscription becomes effective only when you click the link received by email. The management and sending service is Brevo (Sendinblue SAS, France — EU), acting as data processor. You can withdraw consent at any time through the unsubscribe link in every email, or by writing to the controller: upon withdrawal your address is removed from the list. The data is not used for other purposes nor shared with third parties.

Photographs and image rights

Images portraying people are published in the portfolio only with the subjects' consent or in the cases allowed by Italian law (artt. 96–97, L. 633/1941). If you wish to have an image of yourself removed, write to the controller's address: requests are handled as quickly as possible.

Recipients

Data is never sold or shared with third parties for their purposes. It is processed, as service providers, by: Formspree Inc. (form handling), Brevo — Sendinblue SAS (newsletter management and delivery), Dropbox Inc. (gallery storage), Cloudflare Inc. (hosting, security and anti-spam verification), plus professional advisors bound by confidentiality where necessary (e.g. accountant, for billing data).

Your rights

You may exercise at any time the rights under artt. 15–22 GDPR: access, rectification, erasure, restriction, portability, objection. An email to the controller is enough. You may also lodge a complaint with the Italian supervisory authority (garanteprivacy.it).

Updates

This notice may be updated: the version published on this page prevails. Last update: July 2026.