privacy — how paolobarbolini.it handles your personal data

No cookies, no JavaScript, no analytics, no third-party resources. The server logs each request, including your IP address, and deletes the logs within 14 days.

This is the privacy notice of paolobarbolini.it and paolo565.org, and their subdomains, under Article 13 of the GDPR. For private services behind a login on these domains, this notice covers only their request logs.

Paolo Barbolini, Reggio Emilia, Italy.

Email

paolo@paolobarbolini.it

PEC/REM

paolo.barbolini@pec.it

Request logs

For every request, the server logs your IP address and port, the date and time, the request's method, path (with any query string) and protocol, the response's status code and size, and technical timing details. It doesn't log your browser's user agent or the referrer.

Email

If you email me, I receive your address, your message and the usual email headers.

I use the request logs to debug faults and to prevent and investigate abuse and attacks. They can also be used to establish, exercise or defend legal claims. The legal basis is my legitimate interest in keeping the site and its server working and safe (Article 6(1)(f) GDPR). Emails are used only to read and answer them. The legal basis is my legitimate interest in replying to people who write to me (Article 6(1)(f)).

Providing this data isn't required by law or by a contract, but the server can't send you a page without your IP address, and I can't reply to an email without your address.

Request logs aren't backed up, and are deleted automatically within 14 days, unless specific entries are needed to investigate an attack or for a legal claim, which I keep until the matter is closed. Emails stay in my mailbox like any other personal correspondence.

Three providers process data on my behalf:

Scaleway

Scaleway SAS (France) hosts the server, in its Milan data center. The logs are stored only on that server, in Italy.

Fastmail

Fastmail Pty Ltd (Australia) hosts my email. Emails are stored in the EU, with copies in the United States, and Fastmail processes them from Australia. These transfers are covered by the European Commission's standard contractual clauses (Decision (EU) 2021/914), part of Fastmail's data processing agreement.

Aruba

Aruba PEC S.p.A. (Italy) hosts my PEC mailbox.

When it's needed to stop an attack or for a legal claim, I may share the relevant log lines with the abuse contact of the network the attack came from, a lawyer, the police or a court.

Under Articles 15 to 18 GDPR you can ask for access to your data, for it to be corrected or erased, or for its processing to be restricted. Write to paolo@paolobarbolini.it. To find your requests in the logs I need your IP address and the approximate time of your visit, and I may ask you to show the address was yours at the time.

Right to object. You can object at any time, on grounds relating to your particular situation, to the processing of your data (Article 21 GDPR). I'll then stop processing it, unless I have compelling legitimate grounds that override your interests, rights and freedoms, or need the data for a legal claim.

You also have the right to lodge a complaint with the Garante per la protezione dei dati personali, or with the supervisory authority of the EU or EEA country where you live or work.

Last updated on 25 October 2026.

paolo(8)