Privacy notice

LucaCarbone OÜ, Päevalille 4-48, 13517 Tallinn, Estonia. Responsible person: Luca Carbone. For any privacy question: digitiamo@lucacarbone.ch.

The site runs its own statistics system, with no Google Analytics or other external analytics service. For each page you view, we record:

• the page, date and time
• the site or link you came from, including any campaign parameters (UTM)
• device type, operating system, browser and their versions
• IP address and, derived from it, country and city
• a random session identifier stored in your browser's session storage (sessionStorage). Your browser deletes it when you close the tab

The statistics use no cookies. We build no advertising profiles and sell no data.

Purpose: to understand which articles are read and where readers come from, so the content can improve. Legal basis: legitimate interest (Art. 6(1)(f) GDPR).

If you write through the contact form, I keep your name, email, subject and message. The message is linked to the session identifier, so I can see which pages you read before writing. The message also reaches me by email.

If you fill in the consulting request form, I also keep company, role, phone, team size and request type.

If you pitch a project from the Startups & Investment page, I also keep the startup or company name, website, stage, sector, what you are looking for and the pitch deck link.

Purpose: to answer your request. Legal basis: steps taken at your request before a contract and legitimate interest in replying (Art. 6(1)(b) and (f) GDPR).

If you offer a contribution at the end of an article, you pay on Stripe's secure page. Stripe handles your card details: I never see or store them.

On the site I keep the amount, currency, date, article, your choice (espresso, beer, aperitivo, dinner or custom amount), your first name and country. Your email and full name stay with Stripe, for the receipt and accounting.

Purpose: to collect the contribution and keep the accounts of LucaCarbone OÜ. Legal basis: performance of a contract and legal accounting obligation (Art. 6(1)(b) and (c) GDPR).

Some providers are based or host servers outside Switzerland and the European Economic Area, in particular in the United States. In those cases the transfer relies on the safeguards required by law, such as standard contractual clauses or Data Privacy Framework certification.

You can ask at any time for access, rectification, erasure, restriction and portability of your data. You can object to processing based on legitimate interest. Write to digitiamo@lucacarbone.ch: I reply within 30 days.

You can also lodge a complaint with a supervisory authority. In Estonia: Andmekaitse Inspektsioon (aki.ee). In Switzerland: Federal Data Protection and Information Commissioner (FDPIC, edoeb.admin.ch).

I update this notice when the processing changes. The date at the top shows the latest version.