Privacy Policy
Pursuant to Articles 13 and 14 of Regulation (EU) 2016/679 ("GDPR")
Last updated: Mon Sep 28 2026
1. Data Controller
- Full name: Giordano Betti
- Professional activity: freelance videomaker
- Registered address: Via Cappella 23, Sinalunga, Siena 53048
- VAT number (Partita IVA): 01520740521
- Contact email: contact@giordanobetti.com
2. Overview
This website is the professional portfolio of a freelance videomaker. It does not use analytics, profiling, advertising or behavioural tracking tools of any kind and it does not set third-party cookies for statistical or marketing purposes.
3. Types of data processed
a) Browsing data: When you visit the site, the technical infrastructure that delivers it automatically processes certain data, such as your IP address, date and time of the request, requested URL, browser and operating system (user-agent), server response code and amount of data transferred. This data is used only to deliver the website, keep it secure and prevent abuse. It is not used to identify you or build profiles.
b) Contact and enquiry data. If you contact me at contact@giordanobetti.com to ask about my services or request a quote, I process the data you provide (e.g. name, company, email address, phone number, and details of your project).
c) Client and contract data. If you become a client, I also process the data needed to perform the contract and issue invoices: name or company name, billing address, tax code and VAT number, electronic invoicing code (SDI code) or PEC, and payment-related information. This website does not process online payments.
4. Purposes and legal bases
Purpose
Delivering the website, ensuring security and preventing abuse or cyber attacks
Replying to enquiries and preparing quotes
Performing the contract and delivering the agreed services
Invoicing, accounting and tax obligations
Establishing, exercising or defending legal claims
Legal basis
Legitimate interest of the Controller (Art. 6(1)(f) GDPR)
Steps taken at your request prior to entering into a contract (Art. 6(1)(b) GDPR)
Performance of a contract (Art. 6(1)(b) GDPR)
Legal obligation (Art. 6(1)(c) GDPR)
Legitimate interest (Art. 6(1)(f) GDPR)
5. Service providers and recipients
The following providers are involved in operating the site. They process data as processors (Art. 28 GDPR) or as independent controllers for the technical data they handle:
Vercel Inc. (USA): website hosting and delivery. Processes browsing data, in particular IP addresses, in technical logs. Privacy policy
Prismic (Prismic SAS): headless CMS that stores the site's content and images. When your browser loads content or images directly from Prismic's servers, Prismic may receive your IP address. Privacy policy
Cloudflare, Inc. (USA): storage (R2) and delivery of media files, together with network security features. Cloudflare may process your IP address and technical request data to serve the files and protect against attacks. Privacy policy
For enquiries and client work, data may also be communicated to:
Project files and materials: stored exclusively on a private network-attached storage (NAS) located in my studio, which is not accessible to any third-party company. They are kept for 1 month after delivery, unless otherwise agreed with the client.
Banks and payment providers, for receiving payments.
- Public authorities, where required by law.
Your data is not sold or shared with third parties for marketing purposes.
6. Transfers outside the EU/EEA
Some of the providers above are based in the United States or operate global infrastructure. Transfers take place on the basis of the European Commission's adequacy decision (EU-US Data Privacy Framework) where the provider is certified, or on the basis of Standard Contractual Clauses (Art. 46 GDPR).
7. Cookies and similar technologies
This website does not use profiling or analytics cookies. Only strictly necessary technical mechanisms may be used, for example a CMS preview cookie reserved for editors or security features of the infrastructure providers. These do not require prior consent under Article 122 of the Italian Privacy Code and Directive 2002/58/EC.
The website does not embed third-party content that sets cookies (e.g. YouTube or Vimeo players, maps, social media widgets). All videos are served directly from Cloudflare R2.
8. Data retention
- Technical logs: retained by the hosting and CDN providers only as long as strictly necessary for security and operation, according to their own policies.
- Enquiries that do not lead to a contract: kept for up to 12 months, then deleted.
- Contract, invoicing and accounting data: kept for the duration of the contractual relationship and afterwards for 10 years, as required by Italian civil and tax law (e.g. Art. 2220 of the Italian Civil Code).
- Project files and materials: kept for 10 years, unless otherwise agreed with the client.
9. Nature of data provision
Browsing the site does not require you to provide personal data, other than the technical data processed automatically. Providing data when contacting me is optional, but necessary for me to reply. For clients, providing the data listed in section 3(c) is necessary to enter into and perform the contract and to comply with tax obligations; without it, I cannot provide the services.
10. Your rights
You may exercise at any time the rights under Articles 15-22 GDPR: access, rectification, erasure, restriction of processing, data portability, objection, and withdrawal of consent where applicable. To do so, write to contact@giordanobetti.com. Please note that erasure may not be possible for data I am legally required to retain (e.g. invoices).
You also have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali: www.garanteprivacy.it) or with the supervisory authority of your EU country of residence.
11. Changes to this policy
This policy may be updated from time to time. The current version is always the one published on this page, with the date of the last update shown at the top.