Privacy Policy

1. Data Controller

The data controller is Maksim Leali, reachable by email: contact@lemaks.it.

2. Personal data processed

Data provided via the contact form

Through the contact form on the site, the following data may be processed:

• first name;
• email address;
• company or project, if provided by the user;
• details about the request or service of interest;
• message content;
• any additional data the user voluntarily chooses to share.

Users are advised not to submit unnecessary personal data, special categories of personal data, or confidential information through the form.

Navigation and analytics data

The site uses Umami, a self-hosted analytics system managed by the Controller via analytics.lemaks.it.

Umami is used solely to understand, in aggregated and statistical form, how the site is used. Technical and navigation data may be processed, including:

• page visited, page title and referrer domain;
• browser type, operating system, device type, language and screen resolution;
• approximate geographic information;
• date and time of visit.

The tracker is configured not to collect search parameters or URL fragments. The IP address may be temporarily used by the system to derive geographic statistics, but is not stored by Umami.

The site does not use profiling cookies, advertising cookies, remarketing tools, or technologies designed to track the user across different sites.

Technical logs

For security, maintenance and abuse-prevention purposes, the server may log technical data such as IP address, date and time of request, requested resource, response code and browser information.

3. Purposes of processing

Personal data are processed to:

• respond to requests submitted via the contact form;
• follow up with the user regarding the received request;
• handle information requests, collaborations or quotes;
• ensure security, maintenance and proper functioning of the site;
• produce aggregated statistics on site usage and improve its content, structure and performance;
• protect the Controller's rights in case of abuse, violations or disputes.

Data are not used for newsletters, commercial communications, profiling or direct marketing without the user's specific consent.

4. Legal basis of processing

Processing takes place:

• for the execution of pre-contractual measures taken at the request of the data subject, when the user requests information, contact or a quote;
• for the legitimate interest of the Controller in ensuring site security, preventing abuse and analysing its usage in aggregate form;
• based on the user's consent, exclusively when required for additional non-necessary purposes, such as any future marketing communications.

5. Data provision

Providing the data marked as mandatory in the contact form is necessary to submit and manage the request.

Failure to provide them may make it impossible to respond to the user.

6. Processing methods

Data submitted via the contact form are not stored in a site database. They are transmitted by email to the Controller's contact inbox and used solely to handle the user's request.

Navigation statistics are stored in a separate database used exclusively by the self-hosted Umami system.

Processing is carried out through IT and electronic tools, adopting appropriate technical and organisational measures to prevent unauthorised access, loss, alteration or disclosure of data.

7. Recipients of data

Personal data may be processed by the following parties:

• Maksim Leali, as Data Controller;
• DigitalOcean, LLC, as cloud infrastructure and hosting provider for the site and the self-hosted analytics system;
• provider of the email service and/or message delivery generated by the contact form;
• any parties authorised by the Controller or technical providers strictly necessary for site management, security and maintenance.

Data are not shared, sold or communicated to third parties for advertising or marketing purposes.

8. Transfers outside the European Economic Area

The site and the Umami analytics system are hosted on DigitalOcean infrastructure located within the European Economic Area.

Should a transfer outside the European Economic Area become necessary for technical reasons related to the services provided by the listed suppliers, such transfer will comply with the safeguards set out in Articles 44 and following of EU Regulation 2016/679.

Information on the applicable safeguards can be requested by contacting the Controller.

9. Retention period

Messages received via the contact form are retained for the time necessary to handle the request and, in any case, no longer than 12 months from receipt, unless further retention is required by law or to protect the Controller's rights.

Statistical data collected via Umami are retained for a maximum period of 12 months and subsequently deleted or anonymised.

Server technical logs are retained for the time strictly necessary for security and maintenance purposes, and generally no longer than 30 days unless further retention is required due to security incidents or requests from competent authorities.

10. Rights of the data subject

Users may exercise the rights provided by Articles 15-22 of EU Regulation 2016/679, including:

• obtain confirmation of the existence of their personal data;
• request access, rectification or erasure of data;
• request restriction of processing;
• object to processing, where applicable;
• request data portability, where applicable;
• withdraw consent at any time, where processing is based on consent.

To exercise their rights, users may contact the Controller at: contact@lemaks.it.

Users also have the right to lodge a complaint with the relevant supervisory authority.

11. Automated decisions and profiling

Personal data are not used for automated decision-making processes or profiling activities.

12. Changes to this policy

This policy may be updated over time. Any changes will be published on this page with the date of the latest update.