Privacy notice

The controller of the data collected through this site is Ulderico Rota, whose studio is in Mozzo, in the province of Bergamo, Italy.

For any question about personal data you can write to uldericorota@gmail.com.

The site collects only the data written into the contact form: full name, email address, phone number if provided, subject of the enquiry, the text of the message and, when the enquiry starts from the page of a work, a reference to that work.

There are no profiling cookies, third party analytics or social buttons that track browsing. The choice between light and dark theme is stored in the browser and never leaves the device.

The data is used solely to read the enquiry and reply to it, and where relevant to carry on a conversation about a work, a purchase or an exhibition.

The legal basis is the consent given by ticking the box in the form, together with the performance of pre-contractual measures requested by the person concerned, under article 6 of Regulation (EU) 2016/679.

Messages are delivered by email through Resend, a provider acting as data processor, and then remain in the controller's mailbox.

The site is hosted on Vercel, which records the usual technical connection data, including the IP address, for as long as the security of the service requires. Data is never sold or handed on to anyone else.

Videos are hosted on Vimeo. Until you press play the page shows only an image served by this site and Vimeo is not contacted; after the click the player is loaded from Vimeo, which receives the visitor's IP address. The player is set to "do not track" mode, so Vimeo records no viewing statistics and stores no tracking cookies.

Resend, Vercel and Vimeo are based in the United States, so the data described above may be transferred outside the European Union. The transfer relies on the European Commission's adequacy decision for the EU-US Data Privacy Framework, to which these providers adhere, and in any case on the standard contractual clauses approved by the Commission.

Messages are kept for as long as it takes to follow up the enquiry and in any case no longer than twenty-four months, unless the conversation leads to a relationship for which the law requires longer retention.

At any time you can ask to access your data, correct it, delete it, restrict its processing, receive a copy in a readable format or object to the processing, and you can withdraw consent already given.

A message to uldericorota@gmail.com is enough. You also keep the right to lodge a complaint with the Italian data protection authority.

The form contains a hidden field that people never see and a check on how long the form took to fill in: both serve only to discard automated submissions. The number of submissions per IP address is limited over time, and the address is held in memory for a few minutes without being stored anywhere.