Legal
Privacy Policy
Last updated July 2026 · Regulation (EU) 2016/679 (GDPR), Article 13
01The short version
This is a static informational website. It has no contact form, no newsletter, no user accounts, no analytics and no tracking. It does not ask you for personal data and does not collect any beyond the technical server records described below. If you choose to write to us by email, we process that correspondence in order to answer it.
02Data controller
Alessandro Crocco
875 Mamaroneck Avenue, Suite 301
Mamaroneck, NY 10543, USA
press@alessandrocrocco.com
03What the site collects automatically
The site is delivered through Cloudflare, which keeps technical records necessary to serve pages and protect against attack. These may include your IP address, browser type, operating system, the page requested and the time of the request. They are used only for delivery and security, are not linked to any identity, and are not used to build a profile of you.
Typefaces are loaded from Google Fonts, which means your IP address is transmitted to Google in order to deliver the font files. Nothing else about your visit is shared.
04If you write to us
The site publishes an email address. If you use it, we receive whatever you send — your name, your address, and the content of your message — and we process it in order to reply and, where relevant, to take the matter forward. We do not add correspondents to any mailing list, and we do not use these addresses for anything you did not write to us about.
05Legal basis
- Article 6(1)(f) — legitimate interest, for the technical and security records needed to deliver the site safely.
- Article 6(1)(b) — steps taken at your request prior to entering into a relationship, where you write to us about possible work together.
- Article 6(1)(f) — legitimate interest, for correspondence of any other kind.
06How long data is kept
Technical records are retained by Cloudflare for a limited period under its own retention schedule. Correspondence is kept for as long as needed to deal with the matter it concerns, and afterwards where a professional or institutional relationship continues, or where a record must be kept for legal or accounting reasons.
07Who else is involved
Personal data may be handled by external providers supplying the technical services behind the site and our email, acting as processors under Article 28 GDPR:
- Cloudflare, Inc. — hosting, content delivery and security
- Aruba S.p.A. — email hosting
- Google LLC — delivery of typefaces only
Data is never sold, and is never disclosed to third parties for marketing purposes.
08Transfers outside the EU
The data controller is established in the United States, and the technical providers above may process data in the United States or other countries outside the European Economic Area. Such transfers take place under Chapter V of the GDPR, on the basis of the Standard Contractual Clauses approved by the European Commission and any additional safeguards required. You may request further information and a copy of the safeguards applied by writing to the address above.
09Your rights
You have the right to:
- confirm whether your data is being processed, and access it (Art. 15)
- have inaccurate data corrected or incomplete data completed (Art. 16)
- have your data erased (Art. 17)
- restrict processing (Art. 18)
- receive your data in a structured, machine-readable format (Art. 20)
- object to processing in the cases provided for (Art. 21)
- withdraw consent at any time, without affecting processing carried out beforehand
To exercise any of these rights, write to press@alessandrocrocco.com.
10Complaints
If you believe your data protection rights have been breached, you may lodge a complaint with the Italian supervisory authority, the Garante per la protezione dei dati personali, at