Transparency & Security

Privacy & Cookie Policy

Information on the processing of personal data and use of cookies pursuant to Art. 13 of EU Regulation 2016/679 (GDPR).

Last updated: October 2026

1. Data Controller

The Data Controller for the personal data collected through this website is:

Gabriele Pittui (Prugna Studio)

Rovereto (TN), Italy

Contact email: pittuigabriele@gmail.com

2. Types of Data Processed and Purposes

This website is designed according to the principles of privacy by design and data minimization:

Voluntarily provided data: the contact form collects your name, email address, and message content. These data are processed solely to reply to inquiries and handle initial professional requests (Legal basis: Art. 6(1)(b) GDPR - performance of a contract or pre-contractual measures).
Technical and browsing data: server systems automatically collect technical metadata (IP address, browser type, timestamp) managed by the hosting provider (Netlify) strictly for network security, diagnostics, and fraud/threat prevention (Legal basis: Art. 6(1)(f) GDPR - legitimate interest of the controller).

3. Cookies and Local Storage

This website does not use profiling cookies, advertising trackers, or invasive third-party analytics.

We only use browser local storage (localStorage) for the following essential preferences:

Key	Type	Purpose	Duration
`gp-mode`	Technical local	Stores the selected visual theme (“Creativity” or “Technique”) to prevent theme flashing on load.	Persistent until browser storage is cleared
`gp-consent`	Technical local	Records acknowledgment of the privacy notice.	Persistent until browser storage is cleared

Under GDPR and ePrivacy guidelines, purely technical storage does not require blocking consent, but complete transparency is provided.

4. Security Standards

We implement high technical standards to safeguard website integrity and data:

Full HTTPS encryption with HSTS enabled (Strict-Transport-Security).
Strict Content Security Policy (CSP) allowing only verified origins.
Defense-in-depth headers: X-Frame-Options: DENY (clickjacking prevention), X-Content-Type-Options: nosniff, and comprehensive Permissions-Policy.
Protected contact form: secure transmission via Netlify Forms with antispam honeypot.

5. Recipients and Data Transfers

Personal data is never sold or shared with commercial third parties. Technical infrastructure is provided by vetted processors (such as Netlify Inc. for hosting and form routing) bound by standard European data protection clauses.

6. Your Rights

Under Articles 15-22 of the GDPR, you have the right to:

Access your data and receive a copy.
Rectify inaccurate or incomplete information.
Request erasure of your data (“right to be forgotten”).
Restrict or object to processing on legitimate grounds.
Lodge a complaint with a supervisory data protection authority.

To exercise your rights, please contact: pittuigabriele@gmail.com.