Privacy Policy

1. Introduction

This Privacy Policy describes how the website skylerbertone.com manages the personal data of users who visit it. This information is provided pursuant to Article 13 of Regulation (EU) 2016/679 (GDPR).

2. Data Controller

The Data Controller is:

Skyler Bertone
Registered office: Milan, Italy
VAT Number: IT14479700966
Email: contact@skylerbertone.com

3. Types of Data Collected

3.1 Navigation Data

The computer systems and software procedures used to operate this website acquire, during their normal operation, certain data whose transmission is implicit in the use of Internet communication protocols.

This category includes: IP addresses, browser type, operating system, domain name and website addresses from which access or exit was made, time of request. Data relating to user interaction with the site is also collected, specifically: project interactions, contact clicks, gallery navigation and 3D model interactions.

• Purpose: To obtain anonymous statistical information and verify the correct functioning of the site
• Legal Basis: Legitimate interest of the Controller (site security and operation)

3.2 Voluntarily Provided Data

The optional sending of messages to the contact addresses published on the site involves the acquisition of the sender's address and any other personal data entered.

3.3 Data Retention Period

Data is processed for the time necessary to perform the service requested by the User, or required by the purposes described in this document. Specifically:

• Analytics event data: 2 months; Analytics user data: 14 months
• System logs (Vercel): rotating, maximum 30 days
• Email contacts: until administrative/commercial purposes are fulfilled

The User may always request the termination of Processing or the deletion of data.

4. Cookies and Tracking Tools

For complete information on cookies used, please consult our Cookie Policy.

We implement Google Consent Mode v2 to ensure that tracking tags respect your consent choices. On first access, all consent parameters are set to "DENIED".

5. Third Parties and Data Transfer

We use the following services that act as Data Processors:

• Google Analytics 4 (Google Ireland Ltd): For visit statistics. Active only upon consent.
• Firebase (Google Ireland Ltd): For backend hosting and database.
• Vercel Inc.: For website hosting and distribution.

Data may be transferred to the United States based on Standard Contractual Clauses (SCC) adopted by the European Commission, in compliance with the "Schrems II" ruling.

6. Data Subject Rights

Pursuant to Articles 15-22 of the GDPR, you have the right to:

• Request confirmation of the existence of your personal data
• Obtain information on purposes, data categories and recipients
• Request rectification or deletion of data
• Request restriction of processing
• Obtain data portability
• Object to processing at any time
• Withdraw consent: You can change your cookie preferences by clicking on "Cookie Settings" in the footer

To exercise these rights, contact the Controller at the email address indicated above.

7. Place of Processing

Data is processed at the Controller's premises and in any other place where the parties involved in processing are located (Firebase Cloud, Google Cloud, and Vercel infrastructure, located in EU and USA).

8. Changes to the Privacy Policy

The Controller reserves the right to make changes to this Privacy Policy at any time. Changes will be published on this page with an indication of the last update date.