PrivacyPolicy

This Privacy Policy explains how the Mikesoft website handles personal data under Regulation (EU) 2016/679 (GDPR), the Italian Privacy Code (Legislative Decree 196/2003, as amended), and the applicable guidance of the Italian Data Protection Authority.

At a glance

• The Data Controller is Mikesoft by Michael Gasperini.
• The website processes contact details, technical browsing data, language preferences, cookie choices, and analytics data only after consent.
• Contact form data is normally retained for no longer than 24 months unless a longer period is required by law or to protect rights.
• You can exercise your privacy rights by writing to info@mikesoft.it.

1. Scope of this policy

This policy applies to mikesoft.it, including localized pages, project inquiry forms when active, email contacts, technical preferences, and the cookie banner. It does not cover third-party websites or social platforms reached through external links.

The demo pages published under /concept/ are technical project showcases: they may load third-party assets (fonts and icons) for visual fidelity and do not activate the site's collection tools.

2. Data Controller

Mikesoft by Michael Gasperini

Via San Martino 112, 55049 Viareggio (LU), Italy

VAT ID: 02693140465

Email: info@mikesoft.it

3. Data we process

3.1 Data sent through forms or direct contacts

When you contact Mikesoft, you may provide name, surname, email address, company details, subject, project information, budget indications, and message content. Data needed to manage a request is necessary; without it, Mikesoft may not be able to respond properly.

3.2 Technical browsing data

The website and its hosting provider process technical data needed to deliver pages, maintain security, diagnose errors, and prevent abuse. This may include request metadata, IP address, user agent, browser and device information, timestamps, and server logs.

Typography files are self-hosted on this website. Loading the Satoshi font does not contact external font providers or create additional third-party requests.

3.3 Local preferences and cookie choices

The site stores language preference through the technical cookie mikesoft_locale and stores cookie choices in browser localStorage under cookie_consent_preferences.

3.4 Analytics after consent

Google Analytics processes usage data only if you enable the Analytics category in the cookie banner. This may include visited pages, navigation events, browser/device information, approximate location, online identifiers, and analytics cookie identifiers. According to Google documentation, Google Analytics does not log or store individual IP addresses for users in the EU.

4. Purposes and legal bases

Personal data is processed only when a legal basis under Article 6 GDPR applies. The main purposes are:

• Responding to contact, support, or quote requests: performance of pre-contractual measures requested by the user or performance of a contract.
• Operating and securing the website: legitimate interest in keeping the site available, secure, and protected from abuse or fraud.
• Managing language preferences and cookie choices: technical necessity, legitimate interest in remembering requested preferences, and compliance with consent rules.
• Complying with legal obligations: where accounting, tax, administrative, or legal rules require processing.
• Producing aggregate website statistics through Google Analytics: user consent, which can be withdrawn at any time.

5. Recipients, providers, and transfers

Mikesoft uses technical and organizational measures designed to reduce risks of unauthorized access, loss, disclosure, or misuse. Data may be processed by providers that support website operation, hosting, security, email, and analytics.

• Vercel: website hosting and edge delivery provider. Vercel may process request data, logs, and service-generated data as described in its Data Processing Addendum.
• Google Analytics: optional analytics provider, active only after consent. The provider is Google Ireland Limited for EU services, with processing that may involve Google group infrastructure.
• Aruba: email (SMTP) provider used to send and receive contact form messages and studio communications.
• Upstash: rate limiting service used to prevent abuse of the contact form. It receives only an identifier derived from the IP address by hashing, not the plain IP address.

Where providers process data outside the European Economic Area, transfers take place under adequacy decisions, Standard Contractual Clauses, or other safeguards allowed by GDPR Articles 44-49.

6. Retention period

Contact form data is normally retained for no longer than 24 months, unless a longer period is needed to manage a specific request, comply with legal obligations, or protect Mikesoft rights. Accounting and tax data may be retained for the statutory period. Technical logs are kept for the time necessary for security and diagnostics. Cookie consent preferences are retained for up to six months unless the user clears them earlier or the policy changes. Analytics data follows the retention settings and limits described by Google and in the Cookie Policy.

7. User rights

Users may exercise the rights provided by GDPR Articles 15-22, including access, rectification, erasure, restriction, portability where applicable, objection, and withdrawal of consent. Withdrawal does not affect processing based on consent before withdrawal. Users also have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali) or another competent supervisory authority.

8. How to exercise your rights

To exercise your rights or ask questions about this policy, write to info@mikesoft.it. Mikesoft may request information needed to verify your identity and respond correctly. Mikesoft will respond within one month of receiving the request, unless an extension is allowed by GDPR because of the complexity or number of requests.

9. Cookies and analytics

The website uses technical cookies and local storage, and, only after consent, Google Analytics. More details are available in the Cookie Policy.

10. Automated decision-making, Data Protection Officer and minors

Mikesoft carries out no automated decision-making and no profiling within the meaning of Art. 22 GDPR: requests received through the website are read and assessed by a person.

Given the nature, scope and scale of the processing described in this policy, the conditions of Art. 37 GDPR for appointing a Data Protection Officer (DPO) are not met. The contact point for any matter concerning personal data remains the controller, at the details given in section 2.

The services offered through this website are aimed at businesses and professionals and are not directed at children under sixteen; Mikesoft does not knowingly collect personal data from minors. If you believe a minor has sent us personal data, write to info@mikesoft.it and we will delete it.

11. Changes to this Privacy Policy

Mikesoft may update this policy by publishing the revised version on this page. If changes materially affect cookie or analytics processing, the cookie banner may be shown again.