Privacy

Privacy and cookie notice

Under Articles 13 and 14 of Regulation (EU) 2016/679 (GDPR). Last updated: 25 July 2026.

This is a translation provided for convenience. The Italian version is the legally binding one: in case of any discrepancy, the Italian text prevails.

1. Who processes your data

The data controller is Ariel Samson (JakeART), Prata di Pordenone (PN), Italy; the full address is available on request.
For any question about your data you can write to jakeart.portfolio@gmail.com.

No Data Protection Officer (DPO) has been appointed: none of the mandatory cases under Article 37 GDPR applies.

2. What data I collect

Data you send — contact form. By filling in the form in the Contact section you give me your first and last name, email address, project type and the text of your message. If you write other information in the message, I will process that too: please don't include special category data (health, beliefs, judicial data), which I don't need.

Data you send — review form. If you leave a review you give me your first and last name, your business name (optional), a rating from 1 to 5 and the text of the review. Unlike the other data, this is intended for publication on this page: I process it only if you tick the relevant consent checkbox in the form, and I publish it only if I recall having actually worked with you.

Data collected automatically. The infrastructure serving the site logs IP address, browser type, date and time, and the page requested. This is used to make the site work and to protect it from abuse, not to identify you.

I don't use statistics or analytics tools, I don't track your browsing, I don't build profiles and I don't send newsletters.

3. Why I process it and on what legal basis

• Answering your request and discussing a possible project together — legal basis: performance of pre-contractual measures taken at your request (Article 6(1)(b) GDPR). I don't ask for your consent, because you are the one contacting me.
• Publishing your review on the site, with your name, business and text — legal basis: your consent (Article 6(1)(a) GDPR), given by ticking the box in the form, which you can withdraw at any time (see point 7).
• Site security and protection from automated submissions — legal basis: legitimate interest (Article 6(1)(f) GDPR).

Providing the data is optional, but without a name, email and message I am not materially able to reply to you; without consent to publication I cannot publish the review.

4. How long I keep it

Requests stay in my mailbox for 24 months from the last contact; after that, if no working relationship has started, they are deleted. If the project goes ahead, the data follows the civil-law and tax retention periods of that relationship.

Published reviews stay online for as long as the site is active or until you ask me to remove them: withdrawing consent takes effect immediately and the review disappears from the page.

The site has no database: the request is converted into an email and is not stored anywhere else. Published reviews are written by hand into the page's code. Technical logs follow the retention periods of the hosting provider.

5. Who else can see the data

The data is not shared with third parties or used for purposes other than those stated; the only case of disclosure is the publication of reviews, which happens only with your consent. It does pass through the providers that make the service possible:

• Cloudflare, Inc. — site hosting, content delivery network, security and execution of the function that forwards the form; data processor under Article 28 GDPR;
• Resend — technical delivery of the email generated by the form; data processor under Article 28 GDPR;
• Google Ireland Ltd. — provider of the mailbox where I receive requests. The mailbox is a personal Gmail account: Google processes the data passing through it under its own terms of use and privacy notice, not under an Article 28 GDPR contract entered into by me;
• Meta Platforms Ireland Ltd. — only if you choose to write to me via the WhatsApp link: in that case the conversation takes place on Meta's platform, which acts as an independent controller under its own terms.

Some of these providers are based in the United States. The transfer relies on the European Commission's adequacy decision of 10 July 2023 (EU–US Data Privacy Framework) and, where necessary, on the Standard Contractual Clauses.

6. Cookies and similar technologies

This site does not use profiling, advertising or statistics cookies, and does not load resources from third-party servers (fonts, libraries, maps or external video). That's why there's no banner: there's nothing here that requires your consent.

The only things present are:

• __cf_bm and _cfuvid — Cloudflare's technical cookies, used to tell automated traffic apart and protect the site. Duration from 30 minutes to the length of the session. They are exempt from the consent requirement under art. 122 of the D.Lgs. 196/2003 (Italian Legislative Decree 196/2003) and the cookie guidelines of the Garante (the Italian data protection authority) of 10 June 2021;
• jakeart-theme — not a cookie but a sessionStorage entry: it remembers whether you chose the light or dark theme and clears itself when you close the tab.
• jakeart-lingua-chiusa — likewise a sessionStorage entry: it remembers that you dismissed the bar suggesting the English version, so it doesn't come back in the same tab. It clears itself when you close the tab.

7. Your rights

Withdrawing consent for the review. If you left a review you can withdraw consent whenever you like, as easily as you gave it (Article 7(3) GDPR): drop me a line and I'll take it off the page. Withdrawal does not affect the lawfulness of what was published up to that point.

You can also ask me at any time for access to your data, rectification, erasure, restriction of processing, portability, and you can object to processing based on legitimate interest (Articles 15–22 GDPR). Just write to jakeart.portfolio@gmail.com: I reply within a month.

If you believe the processing breaches the GDPR, you have the right to lodge a complaint with the Garante per la protezione dei dati personali (garanteprivacy.it) or to go to court.

8. Automated decisions

I do not carry out any automated decision-making or profiling under Article 22 GDPR. I read every request myself.

← Back to the site · Terms of use