Privacy Policy

1. Data Controller

The Data Controller for personal data collected through this site is:

Marco Sanna
Via Medaglia d'Oro G. De Martini 25, 07047 Thiesi (SS), Italy
Email: marcosannafotografia@gmail.com

2. Types of Data Collected

This site functions exclusively as a portfolio and does not collect personal data via forms or registration tools. No traffic analytics systems (e.g. Google Analytics) or third-party marketing trackers are used.

The only personal data processed are visitors' IP addresses, collected automatically and transiently by the technical infrastructure used to deliver the service:

• Vercel Inc.(hosting and server-side rendering) — 1190 N. Mathilda Ave, Sunnyvale, CA 94089, USA. Server logs may contain IP address, timestamp and browser user-agent. Data is processed on Vercel servers and is subject to Vercel's privacy policy (vercel.com/legal/privacy-policy).
• Cloudflare Inc.(image delivery via R2 and network protection) — 101 Townsend St., San Francisco, CA 94107, USA. The visitor's IP address is processed by Cloudflare for security purposes (DDoS protection) and service stability. Privacy policy: cloudflare.com/privacypolicy.

Such data is not linked to any personal identifier, is not used for profiling, and is not shared with third parties for commercial or marketing purposes.

To contact the photographer, a direct email link (mailto:) is available. Any email communication takes place outside any system managed by this site, and data transmitted is processed exclusively by the recipient.

3. Purposes of Processing

• Delivery of the service and distribution of site content (photographs and text).
• IT security: detection and mitigation of cyber attacks, abuse and anomalous traffic (DDoS protection).
• Technical stability of the network infrastructure.

4. Legal Basis for Processing

The processing of IP addresses for the above purposes is based on the legitimate interest of the Controller pursuant to Article 6(1)(f) of EU Regulation 2016/679 (GDPR), consisting in ensuring the security, integrity and proper functioning of the site.

The balance between the Controller's interest and the data subject's rights favours processing, given the transient nature of the data, the absence of profiling, and the proportionality of the measure to the purpose pursued.

5. Use of Cookies

The site uses exclusively strictly necessary technical cookies required for the operation of the infrastructure (e.g. server-side session management). No profiling cookies, analytical cookies or third-party advertising cookies are set.

Strictly necessary cookies do not require prior consent from the user. For this reason the site does not display a cookie consent banner.

6. Your Rights

As a data subject, under Articles 15–22 of the GDPR you have the right to:

• Art. 15obtain confirmation as to whether personal data concerning you is being processed, and if so, access to it (right of access);
• Art. 16obtain rectification of inaccurate data concerning you (right of rectification);
• Art. 17obtain erasure of personal data concerning you (right to be forgotten);
• Art. 18obtain restriction of processing in certain cases (right to restriction);
• Art. 20receive your data in a structured, machine-readable format (right to data portability);
• Art. 21object to processing based on the Controller's legitimate interest (right to object).

To exercise your rights, write to the Controller at the email address in section 1. You also have the right to lodge a complaint with the supervisory authority in your country of residence.

7. Changes to This Policy

The Controller reserves the right to amend this policy at any time by publishing an updated version on this page. You are invited to consult it periodically. This policy was last revised on 11 July 2026.