Privacy notice
Last updated: 25 September 2026.
This privacy notice applies to the blog “I pasticci di Nico”, available at https://www.situs.it.
1. Data controller
The data controller is Luca Farese, Augustastr. 29, 12203 Berlin, Germany. For enquiries about personal data: nlooz562@gmail.com.
Nicoletta Lozza (Nico) manages the content and decides what to publish. Luca Farese handles technical management and correspondence. The blog presents personal creations: it does not offer sales, advertising, affiliate links or sponsorships, and has no newsletter or comments open to visitors.
2. Browsing and hosting
The website uses Hosting Linux Basic from Aruba S.p.A., with servers in Italy. HTTP requests generate technical data, including the IP address, date and time, requested resource and connection information.
These data are used to provide the service, ensure security, prevent and handle abuse, and carry out diagnostics. According to confirmation from Aruba support, HTTP logs are retained for no more than six months. Aruba’s Statistics service is not active for this website.
For processing carried out under the data controller’s responsibility, the legal basis is the legitimate interest in operating and protecting the website under Article 6(1)(f) of the GDPR, while respecting visitors’ rights. The data needed to communicate with the server are essential to deliver the requested pages.
Aruba processes the data entrusted to it for hosting within the scope of its assignment and contractual appointment as a processor; for any purposes of its own, it acts in the roles described in its documents. Further information: Aruba privacy notice.
3. Searching articles
Searches are processed on the server using WordPress and Relevanssi. In the configuration used, Relevanssi does not record visitors’ searches or IP addresses.
Search terms appear in the results URL and may remain in the browser history and the server’s technical logs. Processing serves to provide the requested results, based on the legitimate interest in making the content searchable. The retention period stated above applies to HTTP logs.
4. Contact by email
The email link opens the visitor’s chosen email application. Sending an email is optional. The data controller processes the sender’s address, any name provided, the message and attachments to read and respond to the enquiry. A reply is not possible without usable contact details.
The legal basis is the legitimate interest in handling incoming correspondence under Article 6(1)(f) of the GDPR. Ordinary conversations are deleted within twelve months of the end of the exchange. Data needed to meet a legal obligation or to establish, exercise or defend a legal claim are retained only to the extent necessary and for the applicable period.
The mailbox nlooz562@gmail.com uses Google’s personal Gmail service. Messages are also processed through the provider’s systems, in accordance with Google’s terms and its privacy policy. For personal Gmail, Google states that it does not act as a processor and does not offer the agreement available for business services: information from the provider.
Google may process data on servers in different countries, including outside the European Economic Area. Depending on the transfer concerned, it refers to adequacy decisions, the EU–US Data Privacy Framework for certified organisations, and standard contractual clauses. The safeguards and ways to request information are described in Google’s international data transfer policies.
5. Cookies and browser resources
Checks carried out on 25 September 2026 as a visitor who was not logged in, covering the homepage, search, articles and photo gallery, detected no cookies or data in Local storage or Session storage. No external domains appeared in the recorded network requests. The check was repeated with the browser’s tracking protection disabled for the website, with the same result.
The theme fonts identified during the checks come from the website’s own domain. The data controller has not configured a visitor analytics service. There are currently no videos. These observations concern the pages and functions tested; new integrations will be checked and this notice updated when necessary. WordPress administration sessions may use technical cookies for authentication and preferences.
6. Backups
To restore the website in the event of a fault or data loss, backups are created with BackWPup on the Aruba hosting space, with a second copy on a private NAS in Berlin that is accessible only to the data controller.
Backups may include personal data contained in the files and database, such as data from administrator accounts or content. Their purpose is to ensure the website’s continuity and security, based on the data controller’s legitimate interest under Article 6(1)(f) of the GDPR.
The rotation is configured to retain two archives on Aruba and four on the NAS. The criterion is based on the number of copies and does not correspond to a fixed period: it depends on successful backups, synchronisation and cleanup. The copies are intended for restoring the website.
7. Rights and complaints
In the cases provided for by the GDPR, you may request access, rectification, erasure and restriction of your data, as well as data portability where the requirements are met. For reasons relating to your particular situation, you may object to processing based on legitimate interests. Any consent given may be withdrawn without affecting the lawfulness of prior processing.
Requests should be sent to nlooz562@gmail.com.
You may lodge a complaint with a supervisory authority, particularly in the country of your habitual residence, place of work or the alleged infringement. For Berlin: Berliner Beauftragte für Datenschutz und Informationsfreiheit, Alt-Moabit 59–61, 10555 Berlin; information and complaint form.