Last updated: 3 August 2026
1. Scope and data controller
This Privacy Policy explains how personal data is handled when you visit federicovergagni.com, contact Federico Vergagni, or interact with services embedded in the website.
The data controller is Federico Vergagni. Privacy requests may be sent to [email protected].
2. Personal data collected
Information you provide
When you use the contact form or send an email, the website may process your name, email address, subject, message and any other information you voluntarily include.
Technical and security information
Hosting, delivery and security providers may process limited technical information such as IP address, browser and device information, request date and time, requested pages, diagnostic data and security events. This information is used to deliver the website, prevent abuse and maintain its availability and security.
Local browser storage
The website stores a theme preference in your browser and uses session storage to remember whether the introductory screen has already been shown during the current browser session. These settings are functional and are not used to create advertising profiles.
3. Purposes and legal bases
Personal data may be processed to:
- reply to messages and collaboration or service enquiries;
- take steps requested before entering into a contract and manage professional relationships;
- operate, secure, maintain and improve the website;
- comply with legal, accounting or regulatory obligations;
- establish, exercise or defend legal claims where necessary.
The relevant legal bases may include performance of a contract or pre-contractual measures, compliance with legal obligations, and legitimate interests in communicating with visitors, protecting the website and managing professional activity. Where consent is specifically requested, processing is based on that consent and it may be withdrawn at any time.
4. Service providers and recipients
The website uses external providers that may process data on behalf of, or independently from, the controller:
- Cloudflare, for hosting, content delivery, DNS, security and email routing;
- FormSubmit, which receives contact-form submissions and forwards them by email;
- Google/Gmail, used to receive and manage professional email;
- YouTube and SoundCloud, whose embedded media players may receive technical information when their content loads or when you interact with it.
These providers operate under their own contractual and privacy terms. Depending on the provider and the service used, information may be processed outside the European Economic Area under the safeguards described in the provider’s documentation.
Provider information: Cloudflare Privacy Policy · FormSubmit Privacy Policy · Google Privacy Policy · SoundCloud Privacy Policy.
5. Embedded media and external websites
The website includes YouTube videos and SoundCloud players and contains links to external platforms such as Bandcamp, Pond5, PayPal, Spotify, Facebook, SoundBetter and Upwork. When you load embedded content, play media or follow an external link, the relevant third party may process data according to its own privacy and cookie policies. Federico Vergagni does not control those external services.
6. Data retention
Contact messages and related correspondence are retained only for as long as reasonably necessary to answer the request, manage a professional relationship, meet legal or accounting requirements, or protect legal rights. As a general operational guideline, correspondence that is no longer needed is reviewed for deletion within 24 months, unless a longer period is justified by an ongoing relationship or legal obligation.
7. Data security
Reasonable technical and organisational measures are used to protect personal data. No method of transmission or storage can, however, be guaranteed as completely secure.
8. Your rights
Subject to the conditions of the GDPR, you may request access to your personal data, rectification, erasure, restriction of processing, data portability, or object to processing based on legitimate interests. Where processing relies on consent, you may withdraw it without affecting processing carried out before withdrawal.
Requests may be sent to [email protected]. You also have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali).
9. Children
This website is not directed specifically at children and does not knowingly request personal data from anyone under the age of 16. A parent or guardian who believes that a child has submitted personal data may request its deletion.
10. Website analytics
Cloudflare Web Analytics is enabled to measure website usage and real-world performance. Its browser-based RUM beacon may collect information relating to the page being viewed, the referring page, page-load and resource timings, and performance measurements such as Core Web Vitals. These measurements are used to understand which pages are visited and to monitor and improve the website’s performance.
Cloudflare states that the Web Analytics beacon does not store data in, or read data from, browser cookies, local storage, session storage or IndexedDB. Cloudflare also states that the source IP address received during normal HTTP request handling is discarded at the nearest Cloudflare data centre and is not stored in the service’s core databases or logs. Further details are provided on the Cookies & Analytics page and in Cloudflare’s Web Analytics documentation.
If direct payments, newsletters or other data-processing functions are introduced, this policy will be updated before or when those functions become active.
11. Policy updates
This policy may be updated to reflect changes in the website, service providers or applicable law. The date at the top of the page indicates the latest revision.