Privacy Policy

Last updated: 30 October 2026

This policy explains what personal data fred-corr.com collects when you visit it or contact me, why, who else handles it, and what rights you have. I have kept it short because the site collects very little.

The data controller is Federico Corradi, an individual based in Milan, Italy. For anything about this policy or your data, write to info@fred-corr.com.

When you send a message I receive your full name, email address, your message and, if you choose to answer, how you heard about me. I use it only to reply to you and to follow up on a possible collaboration. The legal basis is steps taken at your request before entering into a contract, and my legitimate interest in answering enquiries (GDPR Art. 6(1)(b) and (f)).

The form is protected by Google reCAPTCHA v3 and Vercel BotID. Both analyse technical signals from your browser and device (such as IP address, browser and interaction data) to tell people from bots. reCAPTCHA may set its own cookie. The legal basis is my legitimate interest in keeping the form free of spam and abuse (Art. 6(1)(f)). Google's use of this data is covered by the Google Privacy Policy and Terms of Service.

If you accept analytics cookies in the banner, Google Analytics 4 (loaded through Google Tag Manager) records how pages are used: pages viewed, approximate location derived from your IP address, device and browser type, and referrer. It uses a pseudonymous identifier stored in a cookie. Advertising features are switched off and never enabled. If you decline, Google Analytics stores no cookies. The legal basis is your consent (Art. 6(1)(a)), which you can withdraw at any time from the Cookie settings link in the footer.

Vercel Web Analytics and Vercel Speed Insights collect aggregated page views and page-load performance. They set no cookies and do not identify you across sites or days. The legal basis is my legitimate interest in keeping the site working and fast (Art. 6(1)(f)).

Like any website, the hosting provider processes your IP address and request details to deliver pages and protect the service from attacks. These logs are kept for a short period by Vercel.

The site uses:

• cc_cookie: remembers your cookie choices. Strictly necessary, kept for about six months.
• _ga and _ga_<ID>: Google Analytics, set only if you accept analytics. Kept for up to two years.
• _GRECAPTCHA: set by Google reCAPTCHA for spam protection.
• A light or dark theme preference saved in your browser's local storage. It never leaves your device.

You can change your choice at any time with the Cookie settings link in the footer, or clear cookies in your browser.

I do not sell or share your data for marketing. These providers process it on my behalf:

• Vercel Inc. (United States): hosting, server logs, Web Analytics, Speed Insights and BotID.
• Google (Ireland and United States): Gmail, which delivers and stores contact-form messages; reCAPTCHA; and Google Analytics and Tag Manager, with your consent.
• Sanity AS (Norway): hosts the site's content. It receives no visitor data.

Where data is transferred to the United States, the transfer relies on the EU-U.S. Data Privacy Framework, under which Vercel and Google are certified, and on the European Commission's Standard Contractual Clauses.

• Contact-form messages: 24 months after our last exchange, unless they lead to a working relationship, in which case they are kept as long as needed for that relationship and any legal obligation.
• Google Analytics data: up to 14 months, then deleted automatically.
• Cookies: as listed above.

Under the GDPR you can ask to access, correct or delete your data, to restrict or object to its processing, and to receive it in a portable format. Where processing is based on consent, you can withdraw it at any time without affecting what happened before. Write to info@fred-corr.com and I will reply within one month.

You also have the right to complain to a supervisory authority. In Italy this is the Garante per la protezione dei dati personali (garanteprivacy.it), but you can contact the authority where you live or work.

Providing your details in the contact form is voluntary, but without a name and email address I cannot reply. No decisions about you are made by automated means.

If what the site collects changes, I will update this page and the date at the top.