Privacy notice
How this site handles your personal data
This notice sets out how Ivan Nozzi, an Italian-registered civil engineer with a studio in Torrevecchia Teatina (CH), Abruzzo, handles the personal data collected on ivannozzi.it. The site collects personal data in one place only, the contact form: there is no analytics, no advertising, no profiling and no third-party content.
Controller
Who processes your data, and how to reach them
The controller of the personal data collected on ivannozzi.it is Ivan Nozzi, an Ingegnere — the Italian professional title for an engineer entered on a provincial register — practising in civil and environmental engineering from a studio at Via Torre 168, 66010 Torrevecchia Teatina (CH), Italy, Italian VAT number 02717680694, registered with the Ordine degli Ingegneri della Provincia di Chieti, Sezione A, settore civile e ambientale, under number 2489.
On anything concerning personal data, write to ivannozzi38@gmail.com, send a PEC to ivan.nozzi@ingpec.eu, or call +39 320 930 6853. PEC is the Italian certified email system: it produces a legally recognised record of when a message was sent and delivered, which makes it the better channel for a request to exercise a right.
No data protection officer has been appointed, and none is required. Article 37 of Regulation (EU) 2016/679 imposes that duty on public authorities, on organisations whose core activity involves regular and systematic monitoring of people on a large scale, and on those processing special-category or criminal-offence data on a large scale. A sole practitioner answering enquiries about buildings falls outside all three.
This notice covers the website. Personal data processed in the course of an engagement already accepted — permit filings, surveys, technical reports, accounting obligations — is covered by a separate notice handed over when the engagement is agreed.
The processing
What is collected, why, and for how long
There is a single processing operation on ivannozzi.it: the data you type into the contact form and send to the studio of Ivan Nozzi. The entries below describe it in full, without referring you to another document.
- Data collected
- Your name, your email address and the free text of your message, which are the only required fields. Your phone number, the subject chosen from the list and the town where the property is located are optional: leave them blank and they stay blank, and nothing is inferred to fill them. On submission the server also sees the originating IP address and how long the form took to fill in — technical data used solely to stop automated submissions. Nothing else is collected: there is no analytics, no tag manager, no embedded third-party content, and the typefaces are served from this domain, so simply reading a page sends no request to any outside service.
- Purpose
- To answer your enquiry and to carry out the preliminary assessment needed to put a proposal to you if one is appropriate: which property is involved, what work is needed, what stage you are at, and whether the matter falls within what I may take on. The town tells me which local building regulations apply. Separately, the IP address and the fill time serve only to block automated submissions and keep the form working. No data is used for marketing, for a mailing list or for behavioural analysis.
- Lawful basis
- Article 6(1)(b) of Regulation (EU) 2016/679: steps taken at the request of the data subject prior to entering into a contract. Someone writing for a professional answer is, by that act, asking for the preparatory work that precedes a possible engagement. No consent is asked for, none is collected, and there is therefore no consent to withdraw. The anti-abuse measures — the hidden field, the minimum fill time, the per-IP submission limit — rest instead on article 6(1)(f), the legitimate interest in keeping the form usable and the mailbox free of automated traffic. Correspondence that becomes part of an accepted engagement is also retained under article 6(1)(c), to meet statutory obligations.
- Retention period
- Your message stays in the mailbox for as long as it takes to handle the enquiry and whatever follows from it. Where no engagement results, the correspondence is deleted within twenty-four months of the last exchange, and sooner if you ask. Where an engagement is agreed, the data becomes part of the professional and accounting file and follows the statutory periods, in particular the ten years that article 2220 of the Italian Civil Code sets for accounting records and business correspondence. The technical anti-abuse data is held only for the short window over which the submission limit is calculated; it is not archived and is not attached to the message.
- Recipients
- The transactional email provider that delivers the message, the provider that hosts the site, and the provider of the studio mailbox. All three act as processors under article 28 of the Regulation and may handle the data only to perform that service, never for purposes of their own. There are no other recipients: nothing is sold, nothing is passed on for commercial purposes, nothing is published. Disclosure remains possible only where the law requires it or a judicial authority orders it.
Recipients
Where your message physically ends up
A message sent from the form on ivannozzi.it is delivered by a transactional email provider and lands in the mailbox of the studio of Ivan Nozzi. That is the whole route: no customer relationship system, no marketing platform, no intermediate archive.
The published mailbox is currently ivannozzi38@gmail.com, a service operated by Google. That means personal data is transferred to the United States. The transfer takes place under the adequacy decision adopted by the European Commission on 10 July 2023 for the EU-U.S. Data Privacy Framework and, in addition, under the standard contractual clauses adopted by the Commission pursuant to article 46 of the Regulation. You may ask for a copy of the safeguards in place by writing to either address above.
This is stated plainly because it matters: a technical enquiry can describe the planning or cadastral position of a specific building. If you would rather not use that channel, write to the PEC address ivan.nozzi@ingpec.eu, which is operated by an accredited Italian provider. Should the mailbox later move to an address on the ivannozzi.it domain, this notice will be updated and the date at the foot of the page will change with it.
Your rights
The rights you hold, and how to use them
Regulation (EU) 2016/679 gives you, over the data you send through ivannozzi.it, the right of access (article 15), rectification (article 16), erasure (article 17), restriction of processing (article 18) and data portability (article 20), together with the right to be told which recipients any rectification or erasure has been passed to (article 19).
The right to object under article 21 applies to processing based on legitimate interest, which here means the anti-abuse measures only, not the reply to your enquiry, which rests on a different basis. And because no consent is requested, there is no consent to withdraw: if you want the processing to stop, asking for the correspondence to be deleted is enough.
To exercise any of these rights, a written request to ivannozzi38@gmail.com or to the PEC address ivan.nozzi@ingpec.eu is all that is needed. No form, no fee. I answer within one month of receipt; that period can be extended by two months where the request is particularly complex, and if it is, I tell you so within the first month, as article 12 of the Regulation requires.
If you consider that the processing of your data breaches the Regulation, you may lodge a complaint with the Garante per la protezione dei dati personali, the Italian supervisory authority, at www.garanteprivacy.it, or with the supervisory authority of the country where you habitually reside. The right to bring proceedings before a court is unaffected.
Security
Security measures, optional fields, and no automated decisions
The site ivannozzi.it protects form data with measures proportionate to what is at stake: an encrypted connection on every page, a hidden field that automated scripts tend to complete and which causes the submission to be discarded, a minimum time before a submission is accepted, and a cap on submissions from any one IP address. These are security measures, not measurement tools: they do not reconstruct anyone's visit.
Supplying your data is voluntary. Your name, email address and message are nevertheless necessary for a reply to be possible; without them the enquiry cannot be taken up. Phone number, subject and the town of the property remain optional and serve only to make the first reply more precise.
The form is not the right channel for confidential documents, nor for what the Regulation calls special categories of data, such as health data. If you have deeds, cadastral plans or building permits to send, wait for the first reply: I will say which channel to use and which documents actually matter.
No decision concerning you is taken by automated means within the meaning of article 22 of the Regulation, and no profiling is carried out. There is no mailing list and no marketing is sent: the address you give receives the answer to your enquiry and nothing else.
This notice is current as at 6 August 2026. Any substantive change — a new recipient, a different mailbox, an additional purpose — is published on this page together with the new date.