Privacy
What happens to the data of anyone passing through. In short: almost nothing — and that little is spelled out below.
In short
No profiling cookies. There is no banner because there is nothing to ask: the site’s statistics use no cookies and follow nobody from one site to the next.
The videos are on my own Cloudflare account. Not on YouTube, Google or similar platforms. When a video comes close to the screen a silent preview starts on its own; the video with sound only starts if you start it.
If you write from the form, your details are used to answer you. They end up on no list, and nobody sells them.
Who processes the data
Data controllerBarbara Novara
ActivityIdeazione di campagne pubblicitarie
Registered address14100 Asti (AT), Italia
VAT number01670310059
For any question about this page, or to exercise the rights listed further down, write to the address above.
The contact form
If you fill in the form on Contact, what reaches me is your name, your email address, the type of request and the message you wrote. Nothing else: there is no hidden field collecting anything more.
To read your request and reply to it. The legal basis is article 6.1.b of the GDPR: steps taken at your request before entering into a contract. No marketing consent is needed because there is no marketing.
The message stays in the mailbox for 24 months, then it is deleted. If that conversation turns into a job, the documents that come out of it follow the tax retention terms set by law, which are ten years.
The message travels from the site to the mailbox through two providers, listed below. It ends up in no archive, no spreadsheet and no contact management tool.
The check that stops automated submissions is done here, with no outside provider: the form looks at how long you took to fill it in and asks your browser for a small calculation. So that the same submission cannot be repeated, the site keeps an encrypted fingerprint of your IP address — not the address itself — for fifteen minutes, and the fingerprint of the check for two hours. Then they disappear on their own.
What the site relies on
These are the only outside parties involved. Each processes data on my behalf, appointed as a processor under article 28 of the GDPR.
Hosts the site
Cloudflare
Delivers the pages and protects them. It records technical access logs, IP address included, for a few days and for security reasons only. The visit statistics I use are its Web Analytics, which uses no cookies and builds no profiles.
Cloudflare, Inc. · standard contractual clauses for transfers outside the Union
Delivers the message
Resend
Turns the form into an email and delivers it to my mailbox. It therefore sees the content of the message for as long as it takes to deliver it.
Resend, Inc. · standard contractual clauses
The videos
Cloudflare Stream
The videos in the Portfolio are uploaded to my own Cloudflare account, not to YouTube, Google or similar platforms: they are delivered by Cloudflare Stream, the video service of the same network that hosts the site. When a video comes close to the screen a moving preview starts on its own, without sound; the full video, with sound, only starts when you press play. In both cases Cloudflare receives the technical data needed to deliver the video, such as your IP address.
Cloudflare, Inc. · standard contractual clauses for transfers outside the Union
Cookies
This site installs no profiling or analytics cookies. There is nothing to accept and nothing to refuse: that is why you don’t find the box that pops up nearly everywhere else.
Only one technical thing remains, which the law does not require consent for because the service would not work without it: a preference saved in your browser if you choose the language, which stays on your device and is never sent anywhere.
The guides
The guides reachable through a private link are static pages: they have no forms, they do not record who opens them, they ask for nothing. The link arrives by private message on Instagram; that message, and the data Instagram attaches to it, follow Meta’s own privacy policy, over which I have no say.
Your rights
Articles 15 to 22 of the GDPR give you the right to request access to the data concerning you, its rectification, its erasure, the restriction of processing, portability, and to object to the processing.
Simply write to the address given above. I reply within a month, as required. If the reply does not satisfy you, you can turn to the Italian data protection authority, the Garante per la protezione dei dati personali (garanteprivacy.it), or to the authority of the country you live in.
Updates
This page changes when the site changes. The version in force is always the one you are reading; the date it was last modified is 23 August 2026.