Privacy policy

Last updated:

This policy explains what personal data volcanicminds.com processes, for what purposes, on what legal basis and for how long, as required by Article 13 of Regulation (EU) 2016/679, the GDPR.

Data controller

The data controller is Volcanic Minds S.r.l., a single-member limited liability company, with registered office at Corso Vinzaglio 24, 10121 Torino, VAT number 12754330012, REA TO-1313745.

For any question about this policy or about your data you can write to or, by certified email (PEC), to .

What data we process

Browsing data

Like every site, this one receives from your browser some technical information needed to deliver the pages: IP address, date and time of the request, page requested, browser type and operating system. The site is hosted by Cloudflare, which uses them to deliver the pages and to protect them from abuse and attacks. We keep no visit logs of our own.

Visit statistics

To understand which pages are useful we use Plausible Analytics in its self-hosted version, installed by us and not at Plausible, reached from the same domain as the site through the /v-stats address. Plausible uses no cookies and does not store the IP address: to count a visitor only once it derives from the address and the browser type a code that changes every day and cannot be traced back to the address. It counts visits in aggregate form, such as page views, referrer, device type and country, and a few actions on the pages, such as opening a question or sending the form, without their content.

Contact form and email

If you write to us from the contact form we process your first and last name, business email, the company name if you give it and the text of the message. If you write to us directly by email we process the address you write from and what you tell us.

The form is handled by a function that runs on the site's infrastructure: it receives the data, checks it and forwards it to our mailbox through Resend, the service that sends the email. The function keeps no copy, so the message only exists in our mail. To stop repeated automated submissions the function counts the messages that came from each IP address in the last hour: the count deletes itself when the hour is over and is not linked to the content of the messages.

Theme and animation preferences

If you choose the light or the dark theme, or stop the automatic animations, that choice is saved in your browser so that you find it again on the next pages and visits. It stays on your device, it is not sent to us and it does not serve to recognize you.

  • Replying to your requests with the data from the form or the email. The legal basis is the performance of pre-contractual measures taken at your request (Art. 6(1)(b) GDPR). We keep the data for as long as it takes to handle the request and, if no working relationship follows, for no more than 24 months from the last contact.
  • Running and protecting the site with browsing data and with the count of form submissions. The legal basis is our legitimate interest in the security of the service (Art. 6(1)(f)). The submission count lasts one hour at most; the technical data of the requests stays with Cloudflare for the periods stated in its privacy policy, which uses it only for the security and operation of the service.
  • Measuring use of the site with aggregate statistics that contain no personal data. The aggregate data stays available for as long as it serves to compare how the site performs over time.
  • Complying with legal obligations or requests from the authorities, should any arise (Art. 6(1)(c)), for the time provided by the applicable rule.

We do not use your data for profiling, advertising or automated decisions, and we neither sell it nor pass it to third parties for their own purposes.

Cookies

The site installs no cookies, neither technical nor profiling ones, and embeds no third-party content or scripts that could do so. That is why you find no consent banner.

Who can access the data

The data is processed by authorized Volcanic Minds people and by suppliers acting as data processors, on the basis of a contract pursuant to Art. 28 GDPR:

  • Cloudflare, Inc., which hosts the site and runs the contact form function and the forwarding of the statistics;
  • Resend, the service that forwards contact form messages to our mailbox;
  • the provider of the company email.

The up-to-date list of the processors is available on request.

Transfers outside the European Union

Cloudflare and Resend are US companies and may process data outside the European Union as well. In that case the transfer only takes place towards countries covered by an adequacy decision of the European Commission, such as the United States for companies that adhere to the Data Privacy Framework, or on the basis of the standard contractual clauses approved by the Commission.

The site contains links to external services, such as LinkedIn, GitHub, our Playbook at playbook.volcanicminds.com and Calendly for booking a call. When you open them you leave volcanicminds.com: the data you provide on those services is processed according to their own policies.

Your rights

At any time you can ask us, for the data concerning you:

  • access to and a copy of the data (Art. 15);
  • rectification of inaccurate or incomplete data (Art. 16);
  • erasure (Art. 17);
  • restriction of processing (Art. 18);
  • portability of the data you provided to us (Art. 20);
  • to object to processing based on legitimate interest (Art. 21).

To exercise them write to or to . We reply without undue delay and in any case within one month, as provided by Art. 12 GDPR.

If you believe that the processing infringes the rules you can lodge a complaint with the Garante per la protezione dei dati personali, on the site garanteprivacy.it, or with the supervisory authority of the European country where you live or work.

Providing your data

Browsing the site does not require you to provide data. In the contact form, name and email are necessary in order to reply to you: without them, we cannot follow up on the request.

Changes to this policy

We update this policy when the way we process data changes, for example if we add a service. The date at the top of the page indicates the last revision.