Privacy notice

This notice explains which personal data the libertymilano.com website processes, why and how, under Regulation (EU) 2016/679 (GDPR).

Data controller

Aurelio Merenda. For any privacy request you can write to info@libertymilano.com.

Browsing the website

The website is static and uses no profiling cookies or analytics tools. While you browse:

• the hosting service (Cloudflare) receives, like any web server, your IP address and the technical details of each request, used only to serve the website and protect it from abuse;
• the map loads its images from OpenFreeMap's servers, which therefore receive your device's IP address;
• if you switch language manually, the website saves your choice in a technical cookie (lm-lang) and in the browser's local storage, to remember it on later visits. No consent is needed because it is required for the feature you asked for.

The "Contribute" form

If you use the form on the place pages, we process:

• your email address (required), in case we need to ask you about your message;
• your name and Instagram profile (optional), used as the credit if we publish your photos;
• the message and the files you send. Photos may contain metadata (such as when and where they were taken): we remove it before any publication;
• the page you send the form from, the language and the date.

To block spam the form uses Cloudflare Turnstile, which analyses your IP address and some browser characteristics to check that the submission does not come from an automated program.

Purposes and legal basis. We use this data to review your message, contact you if needed and update the pages of the website, at your request (Art. 6(1)(b) GDPR). For photos, the basis is the licence you grant us when you send them. Spam protection is based on our legitimate interest in keeping the website secure (Art. 6(1)(f)).

What we publish. Never your email. If we publish one of your photos, we credit it with your name and, if you gave it, your Instagram profile.

Who processes the data for us

The data is processed by providers acting as data processors:

• Supabase, for the database and the storage of attachments (servers in the European Union, in Frankfurt);
• Cloudflare, for hosting the website, the anti-spam check and sending submission notifications to info@libertymilano.com;
• the provider of the controller's personal mailbox, to which info@libertymilano.com forwards messages through Cloudflare Email Routing.

Some of these providers are based in the United States. In those cases the transfer relies on the EU-U.S. Data Privacy Framework or on the standard contractual clauses approved by the European Commission.

How long we keep it

• Submissions and email addresses: 24 months after the submission is closed.
• Unpublished photos: deleted within 12 months of submission.
• Published photos, with name and Instagram profile: as long as they stay on the website, or until you ask us to remove them.

Your rights

You can ask at any time to access, correct or delete your data, restrict or object to its processing, or receive it in a portable format (Arts. 15–22 GDPR), by writing to info@libertymilano.com. You can also ask us to remove one of your published photos. If you believe the processing breaks the law, you can lodge a complaint with the Italian Data Protection Authority (garanteprivacy.it).