Privacy and cookies

The data controller is Andrea Melloni, Italy. For personal data requests and art enquiries: andrea.melloni.75@gmail.com.

Connecting to the website involves technical data such as IP address, date and time, requested page, browser information and server responses. These data support page delivery and protection against abuse. The legal basis is the legitimate interest in website availability and security, Article 6(1)(f) GDPR. These data are needed for the connection; the website code does not create an application database of visitors.

Sending an email voluntarily provides your email address, your name if included, message content and any attachments. These data are used to respond to and handle your enquiry: Article 6(1)(b) GDPR for pre-contractual enquiries and Article 6(1)(f) for ordinary correspondence, based on the legitimate interest in responding to people contacting the artist. Providing these data is optional, but a reply requires contact details. Enquiries do not subscribe you to a newsletter or marketing list.

The website is hosted through OpenAI ChatGPT Sites and uses Cloudflare infrastructure for delivery and security. Data hosted on behalf of the controller are subject to the applicable service data processing agreement; the Sites DPA for individual users in the EEA identifies OpenAI Ireland Ltd. The contact mailbox uses Google Gmail. Providers may process data to deliver their respective services; disclosures to authorities occur where required by law.

Storage exclusively within the European Economic Area is not guaranteed. The Sites DPA provides for adequacy decisions or standard contractual clauses for relevant transfers outside the EEA. Google’s terms separately describe transfers relating to Gmail. You may contact the controller for information about applicable safeguards and to request a copy.

For ordinary email enquiries, the adopted criterion is deletion within 12 months after the conversation closes, unless there is an ongoing relationship or a specific need to retain data for legal obligations or the protection of rights. This is a correspondence management criterion, not automatic deletion performed by the website. Hosting log retention is managed by the provider: the documentation reviewed does not specify a single period for this website. Hosting log retention periods remain to be confirmed with the provider.

The website code does not set cookies, localStorage or sessionStorage. It does not integrate advertising tools, analytics, data collection forms, login or embedded video. Language switching uses ordinary links. An HTTP check on 23 September 2026 detected the __cf_bm cookie, set by Cloudflare for bot protection on cubificio.org. According to Cloudflare, it expires after 30 minutes of continuous inactivity. The check received a security response and does not constitute a complete scan of all browsing conditions.

The security cookie described has a technical function. Strictly necessary cookies do not require prior consent. No banner authorising advertising tools has been added, as such tools are not configured in the website. You can manage or delete cookies in your browser settings; blocking security cookies may prevent access. The notice and preference controls will be updated before introducing features requiring consent.

Where provided by the GDPR, you may request access, rectification, erasure, restriction and portability, and object to processing based on legitimate interests. You may withdraw any consent without affecting prior lawful processing. Write to andrea.melloni.75@gmail.com. You may complain to the Italian data protection authority or the competent authority in your country. The website does not perform automated decisions or visitor profiling through its own code.

Links to archives, institutions and other websites open only when you choose to follow them. Subsequent browsing is subject to their own notices. Artwork images are served by this website and do not automatically open archive pages.