Back to home

Privacy

Privacy notice

This notice explains how I handle the personal data of people who visit gianlucaspadadrone.it and of those who write to me to ask for a quote, under Article 13 of Regulation (EU) 2016/679 (GDPR) and Italian Legislative Decree 196/2003.

Last updated: 1 November 2026

1Data controller

Gianluca Spada, Castel Maggiore (BO), Italy. For any question about your data, you can write to me at gianlucaspadadrone@gmail.com.

2What data I process

• Browsing data: IP address, browser type, pages visited, date and time. They are collected automatically by the servers that host the website, to make it work and keep it secure.
• Data you give me: your name, email, phone number (optional), service, date, place and message in the quote form, or whatever you write to me by email or on Instagram.
• If you become a client: the details needed for the quote, contract and payment.
• Client Area: name, email, language, service, date and place of the job, username, date of first sign-in and the files I deliver to you. I don't keep your password: I only store an encrypted fingerprint used to check it.
• Images: footage may show people, buildings and number plates. When I publish an image, faces are always blurred (and number plates too, if you ask), and I only do so with your consent.

Please don't enter unnecessary information in the form, especially health data or data about other people.

3Why I process them and on what basis

• To reply to you, talk with you and prepare your quote: pre-contractual steps you have requested (Art. 6(1)(b) GDPR).
• To carry out the work and meet tax obligations: contract and legal obligations (Art. 6(1)(b) and (c)).
• To deliver your photos and videos in the Client Area and to email you your login details, reminders and the closing notice: contract (Art. 6(1)(b)).
• For anonymous visit statistics, only if you accept them: consent (Art. 6(1)(a)).
• To keep the website secure and prevent misuse of the form: legitimate interest (Art. 6(1)(f)).
• To publish images from a job on the website or on Instagram: consent of the people concerned.

I don't use the form data for newsletters or advertising.

4Do you have to provide your data?

No. Without your name, email and place, however, I can't reply to you or prepare a quote. The details for the contract and the invoice, on the other hand, are needed for us to work together.

5How long I keep them

• Requests that don't turn into a job: 12 months at most, then I delete them.
• Contracts and tax documents: 10 years, as required by law.
• Client Area files: 60 days from your first sign-in. After that, access closes and the files go to the Google Drive bin, where they are permanently deleted after 30 days.
• Browsing data: for the short period set by the provider that hosts the website.

6Who they may be shared with

I don't share or sell your data with anyone. It can only be received by the providers that run the website and the email, who process it on my behalf, and by those who help me with my work when needed:

• Google: email (Gmail), the quote form and confirmation emails (Google Sheets and Apps Script), the Client Area (Google Drive), where I keep the files to deliver to you, and the site's fonts (Google Fonts).
• Cloudflare: hosts the website (Cloudflare Pages), provides the graphics library for the 360° panorama and, only if you accept them, the anonymous visit statistics.
• My accountant and advisers, for tax and legal obligations.
• My insurer, in the event of a claim, and public authorities, when required by law.

7Transfers outside the European Union

Google and Cloudflare may also process data in the United States. The transfer takes place with the safeguards provided for by the GDPR: the EU-US Data Privacy Framework and the standard contractual clauses approved by the European Commission.

8Cookies

The website only uses technical tools it needs to work and, if you accept them, anonymous statistics. You'll find all the details in the cookie policy.

9Your rights

You can ask at any time to see, correct or delete your data, restrict its use, object to its processing, receive it in a portable format and withdraw your consent (Arts. 15–22 GDPR). Just write to me at gianlucaspadadrone@gmail.com.

If you believe your data is not being handled properly, you can lodge a complaint with the Italian Data Protection Authority, the Garante per la protezione dei dati personali (garanteprivacy.it).

10Automated decisions

I make no decisions based solely on automated processing, and I don't use your data for profiling.

11Changes

I may update this notice if the services I use change. The version published on this page, with the date of the last update, is the one that applies.