Privacy and cookies
This notice explains how samuelezoncada.dev processes the personal data of visitors and which cookies the site uses.
1. Data controller
The data controller is Samuele Zoncada, reachable at me@samuelezoncada.dev.
2. What data is processed
This is a personal blog. There is no visitor registration, commenting, newsletter or
public contact form. The /admin area is reserved for the author.
Like most websites, the server may record technical data about requests in its logs: IP address, date and time, requested page, response code, user agent and, when present, referrer. This data is used only for operation, security, diagnostics and abuse prevention.
No special categories of personal data (such as health, religious or political data) are requested or processed, and no profiling is carried out.
3. Cookies
The site uses a single technical cookie, required for the session to work:
-
PHPSESSID — a session cookie set by PHP. It keeps the session
state, handles access to the admin area, CSRF tokens and temporary messages. It is
configured with
HttpOnly,SameSite=LaxandSecurewhen the site runs over HTTPS.
It is a session cookie: it is deleted when the browser closes, unless the server is configured otherwise. It contains no profiling data and is not used to track visitors.
The site does not set analytics, profiling or marketing cookies, does not use advertising pixels and does not load third-party scripts or fonts. Technical cookies do not require prior consent.
4. Legal basis and retention
Technical data and logs are processed on the basis of the controller's legitimate interest in keeping the site secure and working correctly (Article 6(1)(f) GDPR). Technical cookies are necessary to provide the requested service and do not require consent.
Server logs are kept for a maximum of 14 days, unless required for security or by law. Session data remains on the server until the session expires or is deleted.
5. Recipients and transfers
Data may be processed by the hosting provider IONOS, acting as a processor under Article 28 GDPR, and disclosed to authorities only where required by law. Data is not sold or shared with third parties for commercial purposes.
If the hosting provider or a sub-processor is located outside the European Economic Area, the transfer relies on the safeguards required by the GDPR, such as standard contractual clauses.
6. Your rights
You may exercise the rights set out in Articles 15–22 GDPR: access, rectification, erasure, restriction of processing, objection, data portability and withdrawal of consent where applicable.
To exercise these rights, write to me@samuelezoncada.dev. You also have the right to lodge a complaint with the Italian data protection authority (garanteprivacy.it).
7. Changes
This notice may be updated to reflect changes to the site or to applicable law. The last update date is shown at the top of this page.