Privacy notice
This site is a personal photography portfolio. It collects no visit statistics, has no forms to fill in, loads no fonts, maps or content from other services, and runs no code in the visitor’s browser. What follows is everything that happens to the data.
Data controller
Nicola Zannino.
For any request concerning this notice: n.zannino@gmail.com
What data passes through, and why
To deliver a page, the provider hosting this site receives the browser's request: IP address, date and time, page requested, browser and operating system, and the outcome of the request. This is the technical minimum required for a web page to reach its destination. The photographs are served by the same provider from a different address, under the same conditions.
This data serves to keep the site working and to protect it from abuse. It is not used to recognise visitors, is not combined with any other information, and is not passed on to anyone. The legal basis is the legitimate interest in delivering and protecting the service (Art. 6(1)(f) of Regulation (EU) 2016/679).
Who processes the data
The site and the images are hosted by Cloudflare, Inc., acting as processor, which may store the logs outside the European Union on the basis of the standard contractual clauses adopted by the European Commission. The controller receives no copy of these logs and has no access to them.
For how long
For the retention period set by the provider. The controller keeps no copy.
Cookies
The site sets no cookies of its own, uses no analytics and profiles no one. There is no banner to accept because there is nothing to consent to. The provider may set a technical security cookie to tell people apart from automated programs: it lasts a few minutes, does not identify the visitor and, being strictly necessary, requires no consent.
Links leaving this site
The email address and the Instagram link lead away from this site. From that point on, the privacy notice of the destination service applies, not this one.
Visitors' rights
The Regulation (Arts. 15-22) grants the right to access your data, to have it corrected or erased, to restrict or object to its processing, and to receive it in a readable form. Requests should be sent to the controller’s address above.
It should be said plainly that the data described on this page stays with the provider and does not, on its own, allow anyone to be identified: acting on a request may require further information (Art. 11 of the Regulation). The right to lodge a complaint with a supervisory authority remains in any case.
If anything changes
Should the site add visit statistics, a contact form or embedded third-party content, this page will be updated before that happens.
Last updated: 25 August 2026.