Skip to content
ITEN

Privacy Policy

This notice explains what data may be processed when you visit the website, send an email or a social media message, or book a call. It reflects the tools actually used on the website as of the date shown at the bottom of this page.

Data controller

The data controller is Komorebi Studio di Di Roberto Diego, Italian VAT number 03322920608. For requests concerning your data, write to diego@diegodiroberto.com.

Data you choose to provide

The website does not require an account. Most personal data is provided directly by you when you choose to contact me:

  • Direct email: sender address, message content, attachments, and standard email metadata.
  • Call booking: the data you enter on the Google Calendar booking page, together with the time slot you select.
  • LinkedIn or Instagram messages: profile details visible to the recipient and the content you choose to share.

Why this data is used

I use this data to review and respond to your request, assess whether and how I can help, arrange the call, and handle any steps you ask me to take before an engagement. If a professional relationship begins, later processing is also governed by the agreements and obligations that apply to that relationship.

Technical data and website statistics

The website is hosted on Vercel and uses Vercel Web Analytics and Vercel Speed Insights. The hosting provider may process technical data needed to deliver and protect the website, such as IP addresses and request data. According to Vercel’s documentation, Web Analytics does not use cookies and records aggregated data that is not associated with a person or IP address; Speed Insights records anonymous performance data points and does not reconstruct an individual visitor’s browsing session.

  • Web Analytics may include the page visited, referrer, country, browser, operating system, and device type.
  • Speed Insights may include page or route, browser, device, country, network speed, and Web Vitals metrics.
  • The website does not send the content of emails or messages to these tools.

Service providers involved

Some functions are provided by external services. Each provider processes the data needed to perform its role under its current terms and privacy notice:

  • Tally, a company based in Belgium, was used for the previous contact form, which is no longer linked from the website. Any responses already collected remain subject to the provider’s terms and the retention periods below. Tally states that form data is encrypted in transit and at rest and stored in Europe. It may use the subprocessors listed in its documentation; some, such as the service used for email notifications, may operate in the United States when that feature is enabled.
  • Vercel hosts the website and provides Web Analytics and Speed Insights.
  • Google provides the external booking page, the video-call service, and the Preferred Sources button embedded in the footer. The button loads resources from Google’s servers; Google handles adding preferred sources and any sign-in steps. The data processed depends on the service actually loaded or used and its privacy notice.
  • LinkedIn and Instagram are accessible through external links, with no content embedded in the website. When you open them, data processing follows their respective privacy notices.

Processing outside the European Economic Area

Vercel, Google, and some subprocessors used by these providers are based outside the European Economic Area or operate infrastructure there. This may involve processing in other countries. The safeguards that apply depend on the provider, the active service, and the agreements in force; the providers’ current privacy notices and data-processing terms contain the authoritative details.

Retention

Inquiries, correspondence, and booking data are kept for as long as needed to handle your request and any related professional follow-up, plus any additional period required to meet applicable obligations or manage disputes. Any responses collected through the previous form remain in the Tally account until the controller deletes them; technical deletion from systems and backups follows the provider’s own timelines. Vercel’s aggregated data follows the periods described in the service documentation and the active plan.

Your rights

Where applicable, you may request access, rectification, erasure, restriction of processing, or data portability, or object to processing. You may also withdraw consent where processing relies on consent. To exercise any of these rights, write to diego@diegodiroberto.com. If you believe the processing is improper, you may complain to the Italian Data Protection Authority or the competent authority in your country.

Security

I use services that state they apply technical and organizational measures to protect data, and I limit collection to what is needed for the functions described. No online transmission or storage can be considered entirely risk-free.

Updates

This notice is updated when the website, its providers, or the processing changes. The version published on this page is the current one. Last updated: October 24, 2026.