Privacy Policy
Last updated: 29 October 2026
This policy explains how personal data is handled when you visit this website (the “Site”). It is written to meet the information duties of Articles 12 to 14 of the EU General Data Protection Regulation (GDPR) and of Article 19 of the Swiss Federal Act on Data Protection (FADP), and it takes into account the other laws listed at the end.
In short: the Site is a portfolio. It has a contact form, no accounts, comments or advertising, and it measures visits with Google Analytics only if you accept. Without your consent it does not set cookies. See also our Cookies Policy.
1. Who is responsible
The data controller is modolab di Andrea Mangiantini, Via Benvenuto Cellini, 21, 10126 Torino, Italy, VAT number IT10694270017 (“MODOLAB”, “we”, “us”).
Privacy contact: info@modolab.net.
Data Protection Officer: not appointed.
2. What we process, why, and on what legal basis
Technical data of your visit
- Data:
- IP address, date and time of the request, pages and files requested, browser, device and operating system information, referring page.
- Purpose:
- Deliver the Site to your device, keep it secure, prevent abuse and fix errors.
- Legal basis:
- Our legitimate interest in running and securing the Site (Article 6(1)(f) GDPR).
- Recipient:
- Our hosting provider, with data centres in Europe, acting as processor.
- Kept for:
- We do not keep server logs; the only data retained is by Google, as described below.
Messages you send us
- Data:
- Your name, contact details and the content of your message, if you write to us or call us.
- Purpose:
- Reply to you, handle your request, prepare or perform a contract.
- Legal basis:
- Steps taken at your request before a contract, or the contract itself (Article 6(1)(b) GDPR); otherwise our legitimate interest in answering enquiries (Article 6(1)(f)).
- Kept for:
- As long as needed to handle your request, then as long as the law requires (for example accounting and tax rules) or as needed to establish, exercise or defend legal claims.
Audience measurement (Google Analytics)
- Data:
- Only if you accept: pages viewed, time on the site, approximate location derived from your IP address, browser, device and operating system, referring page, and a random identifier stored in a cookie.
- Purpose:
- Understand how the Site is used, in aggregate, in order to improve it.
- Legal basis:
- Your consent (Article 6(1)(a) GDPR and the ePrivacy rules on cookies). You can decline, and you can withdraw consent at any time, as explained in the Cookies Policy.
- Recipient:
- Google Ireland Limited (and Google LLC in the United States), which provides Google Analytics 4 and acts as our processor.
- Kept for:
- Up to 14 months in Google Analytics; the cookies last up to 2 years unless you delete them earlier.
You are not obliged to give us any data. Without the technical data in the first block, however, the Site cannot be delivered to you.
3. What we do not do
- We do not set analytics cookies and do not load Google’s scripts unless you accept. The only thing the Site stores on your device before that is your choice (accept or decline).
- We do not load fonts or other content from third-party servers. The typefaces are part of the page, so your browser does not contact Google or any other third party when it shows the Site, until you accept analytics.
- We do not use advertising, retargeting or social media plugins, and we do not enable Google’s advertising features or share the data with Google for its own purposes.
- We do not profile you or take automated decisions that affect you.
- We do not sell your personal data.
4. Who receives your data
Our hosting provider, Google (for analytics, only if you accept) and the e-mail and IT providers we use, as processors bound by a data processing agreement under Article 28 GDPR; our professional advisers and public authorities, where the law requires or allows it.
5. Transfers outside the EEA, the UK and Switzerland
Our website is hosted in European data centres. If you accept analytics, Google may process data in the United States; this relies on the EU–U.S. Data Privacy Framework or on Standard Contractual Clauses. If a provider processes data outside the EEA, the UK or Switzerland, the transfer relies on an adequacy decision (for example the EU–U.S. Data Privacy Framework, for certified recipients) or on Standard Contractual Clauses. You can ask us for a copy of the safeguards.
6. Your rights
Under the GDPR, the UK GDPR and the FADP you have the right to:
- access your data and receive a copy;
- have inaccurate data corrected;
- have your data erased;
- restrict the processing;
- receive your data in a structured, commonly used format (data portability);
- object at any time to processing based on our legitimate interest;
- withdraw a consent you have given, at any time and as easily as you gave it (see the Cookies Policy), without affecting what was done before.
To use these rights, write to info@modolab.net. We reply within one month (30 days under the FADP) and may ask you to prove your identity first.
You may also complain to a data protection authority. In Italy: Garante per la protezione dei dati personali. In Switzerland: Federal Data Protection and Information Commissioner (FDPIC). In the United Kingdom: Information Commissioner’s Office (ICO). In another EU country: your national authority.
7. Other places
United Kingdom: the UK GDPR and the Data Protection Act 2018 apply in the same way. California: we do not sell or share personal information for cross-context behavioural advertising and we do not use sensitive personal information; the California Consumer Privacy Act applies only to businesses above certain thresholds, but we handle requests from California residents in the same way as those above. Elsewhere (for example Brazil’s LGPD): write to us and we will honour the rights your law gives you.
8. Children
The Site is not aimed at children. We do not knowingly collect data from anyone under 14, or under the higher age set by local law.
9. Security
We use technical and organisational measures suited to the risk, including access control and encrypted connections.
10. Links to other sites
Project pages link to the websites of our clients. Their own privacy and cookie policies apply there.
11. Changes
We update this policy when the Site or the law changes. The date at the top shows the current version.
12. Laws this policy takes into account
- Regulation (EU) 2016/679 (GDPR)
- Directive 2002/58/EC (ePrivacy) and, in Italy, the Personal Data Protection Code (Legislative Decree 196/2003, as amended)
- Swiss Federal Act on Data Protection of 25 September 2020, in force since 1 September 2023
- UK GDPR and Data Protection Act 2018, as amended by the Data (Use and Access) Act 2025
- California Consumer Privacy Act, as amended by the California Privacy Rights Act
