This Privacy Policy explains how the Mikesoft website handles personal data under Regulation (EU) 2016/679 (GDPR), the Italian Privacy Code (Legislative Decree 196/2003, as amended), and the applicable guidance of the Italian Data Protection Authority.
At a glance
- The Data Controller is Mikesoft by Michael Gasperini.
- The website processes contact details, technical browsing data, language preferences, cookie choices, and analytics data only after consent.
- Contact form data is normally retained for no longer than 24 months unless a longer period is required by law or to protect rights.
- You can exercise your privacy rights by writing to info@mikesoft.it.
1. Scope of this policy
This policy applies to mikesoft.it, including localized pages, project inquiry forms when active, email contacts, technical preferences, and the cookie banner. It does not cover third-party websites or social platforms reached through external links.
2. Data Controller
Mikesoft by Michael Gasperini
Via San Martino 112, 55049 Viareggio (LU), Italy
VAT ID: 02693140465
Email: info@mikesoft.it
3. Data we process
3.1 Data sent through forms or direct contacts
When you contact Mikesoft, you may provide name, surname, email address, company details, subject, project information, budget indications, and message content. Data needed to manage a request is necessary; without it, Mikesoft may not be able to respond properly.
3.2 Technical browsing data
The website and its hosting provider process technical data needed to deliver pages, maintain security, diagnose errors, and prevent abuse. This may include request metadata, IP address, user agent, browser and device information, timestamps, and server logs.
Typography files are self-hosted on this website. Loading the Satoshi font does not contact external font providers or create additional third-party requests.
3.3 Local preferences and cookie choices
The site stores language preference through the technical cookie mikesoft_locale and stores cookie choices in browser localStorage under cookie_consent_preferences.
3.4 Analytics after consent
Google Analytics processes usage data only if you enable the Analytics category in the cookie banner. This may include visited pages, navigation events, browser/device information, approximate location, online identifiers, and analytics cookie identifiers. According to Google documentation, Google Analytics does not log or store individual IP addresses for users in the EU.
4. Purposes and legal bases
Personal data is processed only when a legal basis under Article 6 GDPR applies. The main purposes are:
- Responding to contact, support, or quote requests: performance of pre-contractual measures requested by the user or performance of a contract.
- Operating and securing the website: legitimate interest in keeping the site available, secure, and protected from abuse or fraud.
- Managing language preferences and cookie choices: technical necessity, legitimate interest in remembering requested preferences, and compliance with consent rules.
- Complying with legal obligations: where accounting, tax, administrative, or legal rules require processing.
- Producing aggregate website statistics through Google Analytics: user consent, which can be withdrawn at any time.
5. Recipients, providers, and transfers
Mikesoft uses technical and organizational measures designed to reduce risks of unauthorized access, loss, disclosure, or misuse. Data may be processed by providers that support website operation, hosting, security, email, and analytics.
- Vercel: website hosting and edge delivery provider. Vercel may process request data, logs, and service-generated data as described in its Data Processing Addendum.
- Google Analytics: optional analytics provider, active only after consent. The provider is Google Ireland Limited for EU services, with processing that may involve Google group infrastructure.
- Email and communication providers: used to receive and manage messages sent to Mikesoft.
Where providers process data outside the European Economic Area, transfers take place under adequacy decisions, Standard Contractual Clauses, or other safeguards allowed by GDPR Articles 44-49.
6. Retention period
Contact form data is normally retained for no longer than 24 months, unless a longer period is needed to manage a specific request, comply with legal obligations, or protect Mikesoft rights. Accounting and tax data may be retained for the statutory period. Technical logs are kept for the time necessary for security and diagnostics. Cookie consent preferences are retained for up to six months unless the user clears them earlier or the policy changes. Analytics data follows the retention settings and limits described by Google and in the Cookie Policy.
7. User rights
Users may exercise the rights provided by GDPR Articles 15-22, including access, rectification, erasure, restriction, portability where applicable, objection, and withdrawal of consent. Withdrawal does not affect processing based on consent before withdrawal. Users also have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali) or another competent supervisory authority.
8. How to exercise your rights
To exercise your rights or ask questions about this policy, write to info@mikesoft.it. Mikesoft may request information needed to verify your identity and respond correctly. Mikesoft will respond within one month of receiving the request, unless an extension is allowed by GDPR because of the complexity or number of requests.
9. Cookies and analytics
The website uses technical cookies and local storage, and, only after consent, Google Analytics. More details are available in the Cookie Policy.
10. Changes to this Privacy Policy
Mikesoft may update this policy by publishing the revised version on this page. If changes materially affect cookie or analytics processing, the cookie banner may be shown again.