1. Who handles the data
The data controller is Gaetano Manuele Trefiletti. You can reach me at gaetano.trefiletti.gt@gmail.com or on +39 345 234 3065. The professional address is still to be defined.
This notice covers this portfolio and the handling of requests received through the contacts listed here, under Article 13 of Regulation (EU) 2016/679 (GDPR).
2. When you contact me
If you write by email or WhatsApp, I receive the details you choose to share: name, contact details, the message and any attachments. I use them to reply, understand the project and prepare a possible quote.
For requests about a possible collaboration, the legal basis is steps you asked for before a contract, Article 6(1)(b) GDPR. For general correspondence, the basis is the legitimate interest in answering messages I receive, Article 6(1)(f).
Writing to me is optional. Without a contact detail and the information I need, I may not be able to reply or make a proposal. A first request does not need identity documents or sensitive data. The site has no forms, newsletter sign-ups or payments.
3. Browsing and preferences
The site code does not include analytics, advertising, pixels, embedded social content or profiling tools. Images, fonts and scripts are served with the site. No automated decisions are made about visitors.
If you change the theme, the browser can keep that preference on the device. The site does not send this setting to the server. Details and the control to delete it are in the cookie policy. The language is not stored: Italian and English are two different addresses. The assistant at the bottom right runs only in the browser: messages are not saved or sent.
The site is published at gaetanotrefilettidev.it. Hosting is provided by Vercel Inc. (USA), certified under the EU-US Data Privacy Framework. Vercel acts as processor for the technical server logs (IP address, user agent, requested URL, timestamp) needed to deliver and secure the site.
4. External services and recipients
The contact mailbox uses Gmail. The WhatsApp button is an external link: the portfolio does not load a Meta widget and does not send messages automatically. When you open WhatsApp, you use that service; only if you send a message do you pass the request to me.
Communication providers process data under their own terms. See Google’s privacy policy (new tab) and the WhatsApp privacy policy for the European Economic Area (new tab).
These services may also process data outside the European Economic Area, under the conditions and safeguards in their own notices. For hosting, Vercel Inc. (USA) is certified under the EU-US Data Privacy Framework and acts as processor for the technical logs described above.
Links to projects, GitHub and LinkedIn go to external sites with their own notices. They do not turn those services on inside the portfolio.
5. How long
Messages from people who contact me are kept for 12 months from the last contact if no engagement follows. If an engagement starts, the necessary documents are kept for the related legal duties and, where needed, to protect rights.
The theme preference has no automatic expiry: it stays in the browser until it is deleted or this site’s data is removed.
6. Your rights
Where the GDPR provides for it, you can ask for access, rectification, erasure, restriction and portability, and object to processing based on legitimate interest. You can exercise these rights by writing to the controller’s email above.
You can also complain to the Italian Data Protection Authority (new tab). If a future processing activity is based on consent, you can withdraw it at any time without affecting processing already carried out.