Last updated: September 2026
1. Who handles your data
The data controller is:
Dimensione 4 di Dario Marco Bellini
VAT: IT04678930167 · REA: BG-480932
Registered office: Via Don Giovanni Albani Rocchetti 87B, 24050 Bariano (BG), Italy
Email: dariomarcobellini@dimensione4.it
PEC (certified email): dario.marco.bellini@spidmail.it
I work alone: your data is read and handled by me, not by an office or a call center.
2. What data I collect, why, and for how long
Contact form
When you write to me through the form, I collect what you enter: first name, last name, email, company, website, message, project details (service, budget, timeline, stage, how you found me) and any attachments.
- Why: to reply and, if you ask, to prepare a proposal.
- Legal basis: pre-contractual steps taken at your request (Art. 6(1)(b) GDPR).
- How long: 24 months from our last contact, then deleted. If you become a client, data tied to the contract and invoices is kept for the period required by law (10 years).
Booking a call
If you book a call through the TidyCal calendar, you enter your name, email and any notes there. I use them only to set up the meeting. Same legal basis and retention as the contact form.
Spam protection
The contact form uses Cloudflare Turnstile to tell people from bots. To do this, Cloudflare analyzes some technical browser data and your IP address. Legal basis: my legitimate interest in protecting the site from spam (Art. 6(1)(f) GDPR). It is not used to profile you.
Visit statistics
To know how many people visit the site and which pages they read, I use Plausible, installed on my own server in the European Union. Plausible uses no cookies, does not store your IP address and does not follow you across other sites: I only see aggregate numbers that cannot be traced back to you. Legal basis: legitimate interest (Art. 6(1)(f) GDPR).
Technical logs
Like any website, the server automatically records some technical request data: IP address, browser, requested page, time. It is needed to run the site and to spot errors or abuse. Legal basis: legitimate interest (Art. 6(1)(f) GDPR). The hosting provider keeps it for a short period, then deletes it.
3. Do you have to give me your data?
No. But without at least an email and a message I cannot reply.
4. Who I share data with
I do not sell your data or use it for advertising. To run the site I rely on these providers, who process data on my behalf as data processors:
- Vercel Inc. (USA): website hosting and technical logs
- Neon Inc. (USA): database storing contact form messages
- Cloudflare Inc. (USA): Turnstile spam protection and attachment storage
- Resend (USA): sending notification emails when you write to me
- TidyCal (USA): call booking calendar
- IONOS SE (Germany): server hosting the Plausible statistics
Data may also be disclosed to authorities where required by law.
5. Transfers outside the European Union
Some providers are based in the United States. Transfers rely on the European Commission adequacy decision on the EU-US Data Privacy Framework, for certified companies, or on the Standard Contractual Clauses approved by the Commission (Arts. 45 and 46 GDPR).
6. Your rights
At any time you can ask me to:
- access your data and get a copy
- correct or update it
- delete it
- restrict its use
- receive it in a readable format to take it elsewhere (data portability)
- object to processing based on legitimate interest
Write to dariomarcobellini@dimensione4.it. I reply within 30 days, usually much sooner.
7. Complaints
If you believe I process your data in breach of the GDPR, you can lodge a complaint with the Italian Data Protection Authority, Garante per la protezione dei dati personali (www.garanteprivacy.it), or with the supervisory authority of the EU country where you live or work (Art. 77 GDPR). If you like, write to me first: an email is often enough to sort it out.
8. No automated decisions
I do not make decisions based solely on automated processing and I do not profile you.
9. Cookies
Cookies and similar tools are described in the Cookie Policy.
10. Changes
If I change anything in this policy, I update the date at the top.