Data controller

Lorenzo Breda
VAT number: 13225651002
Contact: privacy@lbreda.com

Data processed

This website does not collect personal data through forms, registrations, or other forms of direct interaction with the user.

However, the servers (managed directly by the Data Controller) automatically record, through the Apache web server log files, some technical information related to browsing, including:

• IP address of the connecting device
• date and time of the request
• requested page (URL)
• browser user-agent
• referrer (originating page, if present)
• HTTP response code

This data is collected automatically simply by visiting the website, with no registration required from the user.

Regarding third-party cookies used for statistical analysis purposes, please refer to the Cookie Policy, which specifically governs their purpose, duration, and consent management.

Purpose of processing

The data collected through server logs is processed for the following purposes:

• ensuring the security and proper functioning of the website and technical infrastructure
• detecting and preventing any fraudulent, abusive, or unlawful activity (e.g. intrusion attempts, cyberattacks)
• performing technical diagnostics in case of malfunctions

Logs are not used for profiling, marketing, or commercial communication purposes.

Legal basis

The processing of browsing data (access logs) is based on the Data Controller's legitimate interest (Art. 6(1)(f) GDPR) in ensuring the security, stability, and proper functioning of the website and the underlying IT systems.

Retention period

Access logs are retained for a maximum period of 30 days, unless a longer period is required for the investigation of crimes or unlawful activities, upon a reasoned request from judicial authorities.

Data recipients

The data collected through the logs resides on servers managed directly by the Data Controller, hosted on the infrastructure of OVH (hosting provider), which acts as a data processor limited to the infrastructure services provided.

Data is not shared with third parties for commercial purposes and is not disseminated.

Data transfer outside the EU

The servers hosting the website are physically located in France, at an OVH data center. Data is therefore not transferred outside the European Economic Area (EEA).

Data subject rights

As a data subject, you have the right to request at any time, within the limits and under the conditions set out in Articles 15-22 of the GDPR:

• access to your personal data
• rectification or erasure of your data
• restriction of processing
• objection to processing
• data portability, where applicable

You can exercise these rights by contacting the Data Controller at the address indicated above.

You also have the right to lodge a complaint with the competent supervisory authority (in Italy, the Garante per la Protezione dei Dati Personali, www.garanteprivacy.it), if you believe that the processing of your data violates applicable law.

Changes to this policy

The Data Controller reserves the right to modify this policy at any time, notifying users through publication on the website. Users are encouraged to periodically review this page.

Last updated: January 1th 2026