Privacy notice

Privacy Policy

Last updated: April 27, 2026

1. Data Controller

The data controller for personal data collected via pallanca.info is Angelo Pallanca (“Pan”), reachable at angelo@pallanca.info. For operational delivery of some services the controller also operates through PiirZ Digital Limited; in such cases a specific data processing agreement is activated.

2. Data Collected and Purposes

Data collected on the site is limited to what is strictly necessary for the services offered:

  • Proposal request form (/proposal): full name, work email, role, company, website (optional), sector, indicative revenue, employees, problem, timing, indicative budget, free notes. Purpose: respond to the request with a written mini-proposal within 24 working hours.
  • EU AI Act checklist download form (/eu-ai-act-checklist): full name, work email, role, company. Purpose: send the requested PDF and, occasionally, related updates on the specific topic, only if the user manually responds to the initial email.
  • Server technical logs: IP address, user agent, request timestamps. Purpose: security, abuse prevention, technical diagnosis. Retention: 30 days.

The site does not use profiling cookies or third-party analytics. No advertising platforms are used. Data collected via forms is not shared with third parties or used for automated marketing.

3. Legal Basis for Processing

Processing is based on the explicit consent of the data subject (Art. 6.1.a GDPR), given at the time of form submission. Without consent, data is not processed. For technical logs the legitimate interest of the controller in site security applies (Art. 6.1.f GDPR).

4. Data Retention

Form data is stored exclusively in the controller's personal mailbox (pan@piirz.com) and in the email delivery service Resend (provider with EU servers). Data is deleted after 24 months of inactivity, or earlier upon request of the data subject.

5. Extra-EU Transfers

Data is processed on European infrastructure (Resend EU servers, Vercel). In case of extra-EU transfers necessary for service operation, EU Commission Standard Contractual Clauses apply (Decision 2021/914).

6. Data Subject Rights

The data subject has the right to:

  • access their data (Art. 15 GDPR);
  • request rectification or erasure (Art. 16-17 GDPR);
  • request restriction of processing (Art. 18 GDPR);
  • data portability (Art. 20 GDPR);
  • object to processing based on legitimate interest (Art. 21 GDPR);
  • withdraw consent at any time.

To exercise these rights, write to angelo@pallanca.info. Response guaranteed within 30 days.

7. Complaint to Supervisory Authority

In case of GDPR violation, you can lodge a complaint with the Italian Garante per la protezione dei dati personali (garanteprivacy.it) or with the supervisory authority of the EU Member State where the data subject habitually resides.

8. Changes

This notice may be updated in case of changes to data processing. The date of last modification is shown at the top of this page. Periodic verification is recommended.