Privacy Policy

Last updated: January 2026

This Privacy Policy explains how personal data is processed when users visit enricodeleo.com.

For specific information about cookies and consent for measurement cookies, see the Cookie Policy.

1) Data controller

The data controller is:

Enrico Deleo
Email: privacy@enricodeleo.com

2) Types of data processed

2.1 Browsing data

During normal browsing, technical data may be processed, including:

IP address
request date and time
requested URL
browser, operating system, and device information
logs and diagnostic data

This data is necessary to operate the website, ensure security, and prevent abuse.

2.2 Data voluntarily provided by the user

The website may process data provided directly by the user, such as:

name, if provided
email address
phone number, if provided
content of messages sent by the user

The data is processed only for the purposes described in the "Purposes of processing" section.

2.3 Comments through third-party services

The website may use Disqus, a commenting service provided by Disqus, Inc. Use of the comment system may involve processing personal data such as IP address, usage data, browser identifiers, and interaction data.

Disqus may also install cookies and tracking technologies, including third-party technologies.

3) Purposes and legal bases

3.1 Operation, security, and abuse prevention

Purpose: ensure website operation, security, and protection from abnormal traffic, attacks, and abuse.

Legal basis: legitimate interest of the controller and/or technical necessity to provide the requested service.

3.2 User requests and follow-up contact

Purpose: respond to requests, questions, or contact requests sent through the AI chat or other channels available on the website.

Legal basis: pre-contractual measures or the user's request.

Purpose: send informational content, insights, and selected links.

Legal basis: user consent.

Commercial or promotional communications are not sent without consent.

3.4 Website measurement

Purpose: collect aggregated information about website usage to improve content and performance.

Legal basis: user consent through the banner or preferences panel.

3.5 Comment system

Purpose: allow users to comment on website content.

Legal basis: user consent expressed through the cookie preferences system.

4) AI chat

The website includes an AI chat feature. Users may choose to interact with the chat, and the conversation content may be processed to provide the requested answers.

Only when relevant, the chat may ask whether the user wants to be contacted. In that case, the user may choose to provide name, email, and/or phone number.

Providing contact data is optional.
Before sending contact details, the chat asks the user to review the Privacy Policy and explicitly confirm acceptance.
Contact data collected through the chat is used only to manage the contact request and not for profiling.

To support the conversation, the chat may use a temporary session identifier that is technically necessary.

The website includes a signup form for informational communications. Data provided through the form is collected and processed by the controller through technical automation tools and may then be shared with selected third-party providers for communication management.

Data processed: email address and any other data voluntarily entered by the user.
Purpose: sending informational content and updates.
Legal basis: user consent given at signup.
Withdrawal: users can withdraw consent and unsubscribe at any time through the links included in emails.

The website uses cookies or technologies that are:

necessary for operation and always active
measurement-related, such as Google Analytics 4, only after consent

Users can accept or reject measurement cookies through the banner and can change or withdraw their choice through the preferences panel.

For technical details about cookies used, see the Cookie Policy.

7) Recipients and providers

Data may be processed by providers acting on behalf of the controller as data processors for technical or service purposes.

7.1 Google Analytics 4

A web analytics service provided by Google, used exclusively for statistical purposes, without advertising, remarketing, or profiling, and activated only after consent.

Information: https://policies.google.com/privacy

7.2 Disqus

A commenting service provided by Disqus, Inc. Disqus acts as an independent controller for managing comments and user interactions. The service is loaded only after consent.

Information: https://disqus.com/privacy/

7.3 Brevo

An email delivery and contact management service.

Role: data processor.
Purpose: managing subscriptions and sending communications.
Brevo processes data on behalf of the controller according to instructions.

Information: https://www.brevo.com/legal/privacypolicy/

7.4 Cloudflare

The website uses Cloudflare as a proxy, security, and content delivery service. Cloudflare may process technical data, such as IP addresses and security logs, to ensure performance and protection.

Information: https://www.cloudflare.com/privacypolicy/

7.5 Additional technical providers

The website may use additional technical providers, such as hosting, network infrastructure, and technical monitoring tools, exclusively for delivery and security purposes.

8) Transfers outside the EU

Some providers may process data outside the European Economic Area. In such cases, the controller adopts appropriate safeguards required by applicable law, such as adequacy decisions or standard contractual clauses.

9) Data retention

Data is retained only for as long as necessary for the stated purposes, in the controller's technical systems and with third-party providers.

Browsing data/logs: for the time necessary to ensure security and technical management.
Contact data collected through chat: for the time necessary to handle the request and related follow-up.
Newsletter data: until consent is withdrawn, unsubscribe, or deletion is requested.
Analytics data: according to the settings of the services used and only after consent.