EN IT

Privacy & Cookie Policy

Last updated: August 23, 2025
Version: 1.5
Language: en-US


Introduction

This policy combines in a single document the Privacy Policy and Cookie Policy for the website synthetici.com and its subdomains, in compliance with:

The objective is to provide users with clear and transparent information regarding:


Scope of Application

This policy applies to all sites and subdomains related to synthetici.com.


1. Data Controller

No Data Protection Officer (DPO) has been appointed, as the conditions set forth in Article 37 GDPR do not apply.


2. Processing Principles

The Controller processes personal data in accordance with the principles set out in Article 5 GDPR:


3. Categories of Data Processed

3.1 Data voluntarily provided by the user

If you contact us via email or through any forms, we collect the information you choose to share with us, such as:

3.2 Data collected automatically

During navigation, the following data is collected:

3.3 Cookies and tracking tools

Cookies can be categorized as follows:

Current situation

Not all subdomains of synthetici.com use cookies:

Should additional subdomains be activated with the use of cookies or third-party services, this policy will be updated with the necessary clarifications.


4. Purposes, Legal Bases and Retention

Purpose Legal basis Data processed Retention
Site operation and security Art. 6(1)(f) – legitimate interest Technical logs 7 days (up to 6 months for security needs)
Cookie preference storage Art. 6(1)(f) – legitimate interest Consent status 6 months
Response to email inquiries Art. 6(1)(b) – pre-contractual measures Email, name, message content 12 months from response
Statistical analysis (if activated) Art. 6(1)(a) – consent Anonymized browsing data max 14 months
Marketing/Profiling (Substack) Art. 6(1)(a) – consent Substack cookies variable duration, managed by Substack

5. Third-Party Content and Services

Some external content or services are integrated via iframe or scripts:


6. Extra-EEA Transfers

Some technical data may be transferred to servers located in the United States.
Such transfers occur only when supported by GDPR-compliant legal instruments, such as Standard Contractual Clauses (SCCs) and, where applicable, the EU-US Data Privacy Framework.


7. Security

The Controller adopts appropriate technical and organizational measures to protect personal data, in accordance with Article 32 GDPR, including:


8. Retention Periods

Personal data is retained only for the time strictly necessary for the purposes for which it is collected, in accordance with the storage limitation principle (Art. 5(1)(e) GDPR).

Data type Indicative period Notes
Contabo server logs normally 7 days, extendable up to 6 months for security needs or investigations compliant with Italian DPA guidelines
Cloudflare logs normally 7 days, extendable for security needs
Consent cookie 6 months new consent will be requested upon expiration
Contact emails up to 12 months from request closure unless further retention for legal obligations
Encrypted backups up to 30 days exclusively for disaster recovery purposes
Consent records (UUID, timestamp) up to 24 months for GDPR accountability

9. Data Subject Rights

Under Articles 15-22 GDPR, users have the right to:

How to exercise your rights

Send an email to [email protected] with subject "Exercise of privacy rights".
The Controller will respond within 30 days (extendable to 60 for complex cases).

Complaints

You may lodge a complaint with the Italian Data Protection Authority: garanteprivacy.it.


10. Minors

In Italy, consent to online data processing is valid from 14 years of age (Art. 2-quinquies Legislative Decree 196/2003).
For users under this age, parental or guardian consent is required.


11. Cookie Policy (Details)

11.1 General principle

No non-technical (i.e., non-necessary) cookies are installed before explicit user consent.

11.2 Cookie categories

11.3 Active cookies list

Name Purpose Duration Category Domain
cookie-consent Storage of cookie preferences 6 months Necessary blog.synthetici.com
cookie-consent Stores the user’s selected language preference 1 year Necessary blog.synthetici.com

cookie-consent-lang remembers the user’s choice of the site language and is only used to:

The synthetici.com site does not use cookies and therefore no user consent is required for browsing. Should cookies or tracking tools be introduced in the future, this policy will be updated and explicit consent will be requested via an appropriate banner.

Third-party cookies (Substack)

Substack iframes may install preference, analytics, or marketing cookies on Substack domains.
These cookies are managed directly by Substack Inc. and activated only upon user consent.
For more information: Substack Privacy Policy.


12. Consent Management and Withdrawal


13. Versioning and Modifications


14. Quick Contacts


15. Appendix: Substack Cookies

The subdomain blog.synthetici.com integrates Substack Inc. iframes for newsletter subscription.
Iframe activation occurs only upon explicit consent, as Substack may install Necessary, Preferences, Analytics, and Marketing/Profiling cookies on its own domains.

These cookies are managed directly by Substack and not by the synthetici.com site Controller. For more information, please consult the Substack Privacy Policy.

You may withdraw consent to Marketing cookies at any time via the "Cookie" icon at the bottom right: without consent, the Substack iframe will not be loaded.

← Back to Home