Website information / Updated 17 October 2026
Privacy & cookies
This notice describes the processing of personal data when you visit Alessandro Mastrofini’s personal website, including its Pages address and the media subdomain media-alessandromastrofini.mastrofini.it. It is provided under Articles 13 and 14 of Regulation (EU) 2016/679 (GDPR).
Who is responsible
The data controller is Alessandro Mastrofini. For questions about this notice or to exercise your rights, write to info@alessandromastrofini.it.
Data used to deliver and protect the website
When a browser requests a page or media file, the hosting infrastructure receives technical connection information such as an IP address, request time, requested URL, browser information, response status and, when supplied by the browser, the referring page. These data are used to deliver content, diagnose errors and protect the service against misuse. The legal basis is the controller’s legitimate interest in operating a secure, functioning website, under Article 6(1)(f) GDPR.
The website is hosted on Cloudflare Pages. Large media files are delivered from a server managed by the controller through the media subdomain. Cloudflare provides delivery and security infrastructure. Authorised infrastructure providers may process connection information as needed to operate their services. See Cloudflare’s privacy notice and its Customer Data Processing Addendum.
Technical data are retained for the period necessary for delivery, operational troubleshooting and security, according to the applicable infrastructure configuration and provider retention rules. Data relevant to a specific security incident or legal obligation may need to be kept longer. This website does not maintain a visitor account database or a marketing profile.
Email enquiries
If you choose to send an email, your address and the information you include are used to read and answer your enquiry. Depending on its subject, the legal basis is taking steps at your request before entering into a contract, under Article 6(1)(b), or the legitimate interest in responding to correspondence, under Article 6(1)(f). Correspondence is kept for the time needed to handle the enquiry and any related follow-up, and longer only where required by law or necessary to establish, exercise or defend legal claims. Providing these data is voluntary, although an address is needed to reply.
Cookies and browser storage
The site’s own application does not set advertising, profiling or audience-measurement cookies. It does not include Google Analytics, advertising pixels or social-media tracking widgets. The search feature filters the site’s article index in your browser; search text is not submitted to a search provider or stored by the site.
Browser caching stores page assets to help them load efficiently. Interactive demonstrations may also use the browser’s technical cache for their application files. These mechanisms support delivery and functionality rather than advertising. Infrastructure security cookies may be issued by Cloudflare if a corresponding security feature is triggered; their presence and lifetime depend on that feature. They are not set by this site’s application. Cloudflare documents the names, purposes and lifetimes in its cookie documentation.
Consent is not requested for storage strictly necessary to provide a service you request. Optional external embeds are handled separately below. You can inspect, block or delete cookies and cached data in your browser settings. Blocking necessary storage may affect security checks or interactive features.
Optional external content and links
Some archived articles include videos, maps, publication previews or other material provided by third parties, including YouTube/Google, Amazon, Wolfram, Close-up Engineering and Our World in Data. These external frames are blocked until you choose “Allow and load this content” for the individual item. The choice is optional and is not saved as a persistent preference by this site. You can read the article without loading the frame.
By loading an external item, you authorise the connection to the named provider for that item. It receives connection data and may use cookies or other technologies under its own policy and, where applicable, its own consent controls. This optional activation is based on your consent under Article 6(1)(a) GDPR. You can stop further loading by leaving or reloading the page. To remove cookies already created by a provider, use your browser’s cookie settings; reloading this site cannot delete another domain’s cookies.
A small number of archived illustrations and scientific models are still fetched directly from the source host identified by their URL, for example Wikimedia, ResearchGate, technical suppliers or GitHub Pages. Requesting these resources discloses connection information to that host. This serves the legitimate interest in displaying the referenced technical material. Fonts and the main site assets are hosted locally. Ordinary outbound links, including LinkedIn, Instagram and GitHub, open external websites only when followed; those websites have their own privacy policies.
The photographic route map uses OpenStreetMap tiles only after you select “Load map”; the tile provider then receives connection data. See the OpenStreetMap Foundation privacy policy. Local interactive examples do not require a visitor account. Camera or augmented-reality access, when offered by an experience, requires the browser’s separate permission. The site does not provide a camera recording upload service.
Recipients and international transfers
Data may be accessible to the controller, authorised hosting and communication providers, and competent authorities where disclosure is legally required. Infrastructure providers and optional external services may process data outside the European Economic Area. Where GDPR applies, transfers must use an applicable adequacy decision or appropriate safeguards, such as the European Commission’s standard contractual clauses. The relevant provider’s privacy notice and contractual documentation describe its arrangements. Contact the controller for information about safeguards applicable to this website’s processing.
Your rights
Subject to the conditions in the GDPR, you may request access, rectification, erasure, restriction of processing and data portability, and object to processing based on legitimate interests. Where processing relies on consent, you may withdraw it at any time without affecting the lawfulness of earlier processing. Contact info@alessandromastrofini.it. You also have the right to complain to the Italian Data Protection Authority (Garante) or your competent supervisory authority.
The site does not use personal data to make automated decisions producing legal or similarly significant effects, or to build advertising profiles. This notice will be updated if the website’s services or processing change.