Effective Date: July 8, 2026 | GDPR 2026 Compliant
Non-Commercial Portfolio Website: This is a personal portfolio website operated from the European Union for non-commercial purposes. All data processing complies with EU GDPR and Italian data protection regulations.
Overview
This Cookie & Privacy Policy explains how I, Salvatore Arena (“I”, “me”, or “my”), use cookies and process personal data when you visit this portfolio website. It has been prepared in accordance with the latest requirements of the General Data Protection Regulation (EU GDPR), including the 2025 amendments, the European Data Protection Board (EDPB) guidelines, and other applicable data protection regulations.
By using this website, you acknowledge that you've read this policy and understand your rights regarding your personal data and how I process it.
Lawful Basis for Processing
In compliance with Article 6 of the GDPR, I only process your data when I have a lawful basis to do so:
Consent: When you explicitly agree to the processing of your personal data for one or more specific purposes, such as analytics.
Legitimate Interest: When processing is necessary for my legitimate interests, such as securing my website and preventing fraud, unless your interests or fundamental rights override these interests.
Contract Performance: When processing is necessary to respond to your inquiries via the contact form.
Cookies & Similar Technologies
Cookies are small text files that are stored on your device when you visit a website. I use different types of cookies for different purposes:
Essential Cookies
Purpose: These cookies are technically necessary for my website to function properly.
Storage Period: Session duration or up to 2 years for cookie preference memory.
Data Shared: No personal data is shared with third parties.
Analytics Cookies (Google Analytics 4)
Purpose: To analyze website traffic and understand user behavior in an anonymized way.
Legal Basis: Your explicit consent (Art. 6(1)(a) GDPR).
Storage Period: 14 months maximum, as configured in my GA4 settings.
Data Controller: Google Ireland Limited acts as a data processor. I am the data controller.
International Transfers: Data may be processed in the United States under EU-approved data transfer mechanisms (EU-U.S. Data Privacy Framework) and supplementary measures in compliance with Schrems II requirements.
Purpose: To understand how visitors interact with this portfolio website through anonymized session recordings and behavioral analytics.
Legal Basis: Your explicit consent (Art. 6(1)(a) GDPR).
Storage Period: 13 months maximum for user identifiers; session data expires after 30 minutes of inactivity.
Data Controller: Contentsquare SAS (France) acts as a data processor. I am the data controller.
Data Collected: Mouse movements, clicks, scrolling behavior, page views, viewport size, device type (all anonymized). No PII is collected.
Privacy-First Approach: All form inputs, email addresses, phone numbers, and sensitive data are automatically masked. Session replays are anonymized. IP addresses are anonymized.
Data Location: All data is processed and stored within the European Union. Contentsquare operates EU-based data centers and is fully GDPR compliant.
When you submit the contact form, I process the following personal data:
Name
Email address
Any personal information you include in your message
Purpose: To respond to your inquiry.
Legal Basis: Pre-contractual measures at your request (Art. 6(1)(b) GDPR) and legitimate interest in responding to your inquiry (Art. 6(1)(f) GDPR).
Processor: This website uses EmailJS as an email transmission service. EmailJS acts as a data processor.
Data Retention: Your contact information is retained for a maximum of 2 years after our last communication, after which it is securely deleted unless there is a legal obligation to retain it longer.
Your Data Protection Rights
Under the GDPR and the 2025 amendments, you have the following enhanced rights:
Right to Access: You can request a copy of your personal data.
Right to Rectification: You can request correction of inaccurate data.
Right to Erasure: You can request deletion of your data (“right to be forgotten”).
Right to Restriction: You can request restriction of processing your data.
Right to Object: You can object to processing based on legitimate interest.
Right to Data Portability: You can request your data in a structured, commonly used, machine-readable format.
Right to Withdraw Consent: You can withdraw consent at any time for processing based on consent.
Right to Algorithmic Transparency: Information about automated decision-making.
Right Not to Be Subject to Automated Decision-Making.
To exercise any of these rights, please contact me through the contact form on this website.
Managing Your Preferences
You can manage your cookie preferences at any time by clicking the button below. This will reset your preferences and show the cookie consent banner again.
Detailed Cookie List
Below is a comprehensive list of all cookies that may be set on your device when you use this website.
Children's Privacy
This website is not intended for children under 16 years of age. I do not knowingly collect personal data from children under 16.
Data Protection Contact
If you have any questions about this Cookie & Privacy Policy or my data practices, please contact me through the contact form on this website.
Supervisory Authority - Italy
Name: Garante per la protezione dei dati personali