Privacy Policy

1. Data controller

The data controller for this personal portfolio is Davide XYZ, based in Milan, Italy. Privacy enquiries can be sent to davidedotxyz[at]gmail.com.

2. Data processed

Davide XYZ does not maintain a visitor database or use analytics, advertising trackers, profiling tools, or embedded third-party widgets.

When you visit the site, Vercel may process limited technical data needed to deliver and protect it, such as IP address, request time, requested resource, browser information, and security events. Davide XYZ does not use this information to build visitor profiles.

If you contact Davide XYZ by email, Davide XYZ receives and stores your email address, message, and any information or attachments you choose to provide in order to reply.

3. Purposes and legal bases

Delivering and protecting the website is based on the legitimate interests in providing a secure portfolio under Article 6(1)(f) of the GDPR.

Replying to enquiries is based on steps taken at your request and the legitimate interests in managing correspondence under Articles 6(1)(b) and 6(1)(f) of the GDPR, as applicable.

4. Hosting and third parties

The site is hosted and delivered by Vercel. Email correspondence is handled through Gmail, provided by Google. These providers may process data outside the European Economic Area under the safeguards described in their privacy documentation.

5. Cookies and tracking

This site does not set its own cookies and does not use local storage or similar technologies to identify, profile, or track visitors. For this reason, no cookie consent banner is displayed.

6. External links

The website contains links to Cardanoscan, Redbubble, and the author's website. These are simple external links: no content from those services is embedded or loaded by Neon Rebels. Data is sent to a destination service only when you choose to follow its link. After leaving Neon Rebels, the privacy terms of the destination website apply.

7. Retention

Davide XYZ does not maintain an independent visitor log or analytics database. Any technical data retained by the hosting provider is governed by its service and security settings. Email correspondence remains in Davide XYZ's Gmail account only for as long as reasonably necessary to handle the enquiry and related follow-up, unless longer retention is needed to establish, exercise, or defend legal claims.

8. Your rights

You may ask what personal data is held about you and, where legally applicable, request its correction, deletion, restriction, portability, or object to its use. Other GDPR rights apply when their legal conditions are met. Requests can be sent to davidedotxyz[at]gmail.com. You may also lodge a complaint with the Italian Data Protection Authority.

9. Changes to this policy

This notice will be updated if analytics, forms, embedded services, cookies, or other data-processing technologies are introduced in the future.