Contact

Privacy

Information on the processing of personal data of visitors to massimocanducci.eu, under Articles 13 and 14 of Regulation (EU) 2016/679 (GDPR).

Last updated: 3 October 2026

In short

  • The site uses no cookies, neither its own nor third-party ones, and does no profiling.
  • Visit statistics are collected with the site's own tool, without cookies and without storing IP addresses.
  • Fonts and images are hosted on the site: opening a page sends no data to Google or other external services.
  • The contact form is used only to reply to your request.
  • The assistant at the bottom of the page uses an artificial intelligence model by Mistral AI, a European company: questions are not used to train models. Please do not include personal data in your questions.

1. Data controller

The data controller is Massimo Canducci, who can be reached at privacy@canducci.eu for any question about this notice and to exercise your rights. No data protection officer (DPO) has been appointed, as one is not required for this site.

2. Browsing data

Like any website, the servers hosting massimocanducci.eu automatically record some technical data with each request: IP address, date and time, page or file requested, response code, browser and operating system, referring page.

Purpose: running the site, keeping it secure, preventing abuse and attacks. Legal basis: the controller's legitimate interest (Article 6(1)(f) GDPR). Retention: logs are kept by the hosting provider for no longer than these purposes require, according to its own procedures, and are not used to identify visitors unless requested by judicial authorities.

3. Visit statistics

To understand which content is of interest, the site uses a purpose-built counter that uses no cookies, does not store IP addresses and builds no profiles. When you open a page, the browser sends the site a short message with:

  • the page viewed, the language and the time spent on the page;
  • the type of device (smartphone, tablet or computer), derived from the screen width;
  • only the name of the referring site (for example linkedin.com) and any campaign parameter present in the address;
  • the name of the external site when you follow a link to another site, the opening of a book page or of the assistant, the sending of the contact form (without its content);
  • a random code that ties together the pages of a single visit: it lives only in the page's memory, is not stored on your device and changes every time you reload the site.

These data do not make it possible to identify you. Purpose: aggregate statistics on the use of the site. Legal basis: the controller's legitimate interest in knowing how its content is used (Article 6(1)(f) GDPR). Retention: 25 months, after which the data are deleted automatically. Statistics can be viewed only by the controller.

4. Contact form

If you use the form on the Contact page, the site sends the controller an email with the data you enter (full name, email, organisation if given, topic and message), together with the IP address and browser the form was sent from, which are used only to detect abuse. To limit automated submissions, the server keeps, in a temporary file, a cryptographic fingerprint of the IP address with the submission times of the last hour.

Purpose: replying to your request (speaking invitations, interviews, collaborations, training) and handling any follow-up. Legal basis: steps taken at your request (Article 6(1)(b) GDPR) and, for abuse prevention, the controller's legitimate interest (point (f)). Retention: up to 24 months from the last exchange, unless the relationship continues or retention is needed to comply with the law or to protect a right. Please do not include data that are not needed for your request, in particular health data or other special categories of data.

5. Site assistant

The assistant at the bottom of the pages answers questions about Massimo Canducci's work using the site's content. Answers are generated by an artificial intelligence system and may contain errors.

When you ask a question, the text of the question and of the latest exchanges in the conversation, together with the page and language, is sent to the site's server and from there to Mistral AI SAS (15 rue des Halles, 75001 Paris, France), which provides the language model as a processor. Under its service terms, Mistral AI keeps questions and answers for 30 days to monitor abuse and then deletes them; the use of questions to train models is disabled.

The site keeps a log of questions and answers, with date, page, language, outcome and a random conversation code generated by the browser. The log does not contain the IP address or any other data identifying the person writing, unless you include them in the question. To prevent abuse, the server counts questions per IP address using a cryptographic fingerprint that changes every day, cannot be traced back to the address and is deleted automatically after two days.

Purpose: giving you the answer you ask for, preventing abuse and improving the site's content and the assistant. Legal basis: the controller's legitimate interest (Article 6(1)(f) GDPR); using the assistant is optional. Retention: 12 months for the log, then automatic deletion. Please do not include personal data about yourself or others in your questions. The assistant takes no decisions producing legal effects on you.

6. Cookies and other storage technologies

The site sets no cookies. The only storage on a device is a technical setting the controller uses in his own browser to exclude his visits from the statistics: it is activated only by opening the site with a specific parameter and does not concern visitors. For this reason no consent banner is required, in line with the Italian Data Protection Authority's cookie guidelines of 10 June 2021.

7. External links and services

The site contains links to external services (LinkedIn, Substack, Telegram, WhatsApp, YouTube, Amazon, publishers' and newspapers' sites). None of these services is embedded in the pages: they receive data only if you follow the link, and from then on their own privacy notice applies. Newsletter subscription takes place on Substack, which acts as an independent controller.

8. Recipients

Data are processed by the controller and, on his behalf, by the following providers appointed as processors:

  • Hostinger, for hosting the site and sending the contact form emails;
  • Mistral AI SAS, for running the assistant;
  • the controller's email provider, for receiving emails.

Data are not sold or disclosed to anyone else, except where required by law or by the authorities.

9. Transfers outside the European Union

The controller chooses providers based in the European Union. Some of their technical sub-processors may be located outside the European Economic Area: in those cases transfers rely on a European Commission adequacy decision or on standard contractual clauses (Articles 45 and 46 GDPR).

10. Security

The site runs over HTTPS only. Assistant logs and statistics are stored in a server folder that cannot be reached from the web and can be viewed only by the controller with an access key. Keys for external services are never sent to the browser.

11. Your rights

You may at any time request access to your data, rectification, erasure, restriction of processing and portability, and you may object to processing based on legitimate interest (Articles 15 to 22 GDPR). To do so, write to privacy@canducci.eu: you will receive a reply within one month. Statistics and the assistant log contain no data that make it possible to recognise you: in those cases the controller may be unable to identify your data unless you provide useful details, for example the exact text of a question and the day you asked it (Article 11 GDPR).

If you believe the processing breaches the law, you can lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali) or with the supervisory authority of the country where you live or work.

12. Minors

The site is not aimed at children under 14 and does not knowingly collect their data.

13. Changes

This notice may be updated, for example if the services used by the site change. The date of the latest update is shown at the top of the page.

Legal references: Regulation (EU) 2016/679 (GDPR); Italian Legislative Decree no. 196 of 30 June 2003, as amended by Legislative Decree no. 101 of 10 August 2018; Italian Data Protection Authority guidelines on cookies and other tracking tools of 10 June 2021; Regulation (EU) 2024/1689 on artificial intelligence, Article 50.

Future Scouting & Innovation

Every week, a considered reading of the technology signals that are changing the world.