Privacy Policy

1. Who is responsible

Vincenzo Russo is the controller for the personal data he processes in connection with this portfolio and its professional correspondence. For questions about this notice or your data, email vinrusso.dev@proton.me.

2. Visiting the website

The website is hosted on GitHub Pages. GitHub receives technical information needed to deliver the website and states that visitors’ IP addresses are logged and stored for security purposes. I do not maintain a separate visitor database or use visitor analytics.

GitHub’s processing for its own service and security purposes is described in the GitHub Privacy Statement. Information about IP logging is available in the GitHub Pages documentation.

3. Contacting me

If you email me, I receive your email address, any name you provide, and the contents and attachments of your message. I use these only to handle your enquiry and any related professional conversation, including employment opportunities.

For general professional correspondence, the legal basis is my legitimate interest in receiving and responding to relevant enquiries (Article 6(1)(f) GDPR). Where you request steps towards a contract with you, the basis is Article 6(1)(b) GDPR.

Providing information is voluntary. Without a return address and sufficient details, I may be unable to respond. Messages are received and stored in my Proton Mail mailbox; I do not add them to a marketing list or CRM.

The email button on the portfolio only copies my address to your clipboard when you activate it. It does not send a message or collect your email address.

4. How long information is kept

Completed email conversations that are no longer needed are deleted within 12 months of the last exchange. Correspondence relating to an ongoing relationship is kept while needed for that relationship. Relevant records may be retained longer where necessary to meet legal obligations or establish, exercise or defend legal claims.

GitHub’s technical logs and providers’ operational records and backups follow their respective retention policies; the 12-month period above concerns my correspondence, not those providers’ records.

5. Service providers and international processing

GitHub provides website hosting and Proton AG provides my email service. Information is handled by these providers as necessary to operate their services. It may also be disclosed where required by law. I do not sell contact information or publish private correspondence.

GitHub describes international processing, including in the United States, and safeguards such as the EU–US Data Privacy Framework and standard contractual clauses in its privacy statement. Details of the applicable safeguards and how to obtain further information are available there.

Proton states that Proton Mail server data is stored in Switzerland, Germany or Norway. Switzerland is outside the EEA and benefits from an EU adequacy decision. See the Proton Mail Privacy Policy for information about email processing, security and backups.

6. Cookies and external links

This portfolio does not set cookies or use analytics, advertising pixels, profiling or tracking storage. Fonts and project images are served with the website. No cookie consent banner is used for this configuration.

Social profiles and project destinations are ordinary external links, not embedded social widgets. If you follow a link, the destination website’s own privacy and cookie policies apply.

7. Your rights

Subject to the conditions of the GDPR, you can request access to, correction or deletion of your personal data, restriction of processing, and portability where applicable. You may object, on grounds relating to your particular situation, to processing based on legitimate interests. This portfolio does not use your data for automated decision-making or profiling.

To exercise your rights in relation to my processing, contact vinrusso.dev@proton.me. For processing carried out independently by a provider, its privacy statement explains how to contact it.

You can lodge a complaint with the Italian Data Protection Authority (Garante) or the competent supervisory authority in your country.

8. Updates to this notice

This notice will be updated if the website or the way enquiries are handled changes. The date above identifies the latest revision.