Privacy & Cookie Policy – datawiring.tech
Last updated: October 22, 2026
This Privacy Policy explains what personal data is collected when you visit datawiring.tech or subscribe to the newsletter, why it is collected, and what rights you have. It is written to comply with the EU General Data Protection Regulation (GDPR – Regulation (EU) 2016/679) and applicable Italian data protection laws.
1. Who is responsible for your data
The Data Controller is:
Valentina Porcu – Rome, Italy
Email: privacy@datawiring.tech
For any questions about this policy or to exercise your rights regarding your personal data, you can write to privacy@datawiring.tech.
2. What data is collected
- Newsletter subscription and proof of consent. When you subscribe, the only data requested is your email address. To prove that you validly subscribed (double opt-in), the system also logs the date, time, and IP address of your confirmation. Providing your email address is optional, but without it, you cannot receive the newsletter.
- Newsletter engagement data. When you receive the newsletter, information may be collected on whether you opened an email and which links you clicked, together with related technical data (such as date and time, device or email client type, and approximate location derived from your IP address).
- Technical and security data. When you visit the website, the server and security tools automatically process technical data such as your IP address, browser type and version, operating system, the pages requested, and the date and time of the request.
- Emails you send. If you contact me via email, I will process your email address, any contact details you provide, and the content of your message.
This website does not use analytics tools, advertising cookies, or social media tracking pixels.
3. Why the data is used and on what legal basis
| Purpose | Data processed | Legal basis (GDPR) |
|---|---|---|
| Sending the newsletter | Email address | Your consent – Art. 6(1)(a) |
| Measuring newsletter opens and clicks, to understand which content is useful | Engagement data | Your consent, given when subscribing – Art. 6(1)(a) |
| Recording proof of subscription and managing unsubscribes (suppression list) | Email address, confirmation timestamp and IP | Legal obligation to demonstrate compliance and Legitimate interest in respecting opt-out requests – Art. 6(1)(c) and Art. 6(1)(f) |
| Keeping the website secure and working (e.g., delivering pages, blocking attacks, malware, and spam) | Technical and security data | Legitimate interest in protecting and operating the website – Art. 6(1)(f) |
| Replying to your messages | Email address, message content | Performance of a request by the user and Legitimate interest in answering inquiries – Art. 6(1)(b) and Art. 6(1)(f) |
You can withdraw your consent at any time. Withdrawing consent does not affect the lawfulness of processing carried out before the withdrawal.
4. How the newsletter works
- Double opt-in: After submitting your email, you will receive an email asking you to confirm your subscription. Your subscription is only active after you click the confirmation link.
- Unsubscribe anytime: Every newsletter contains an unsubscribe link in the footer. You can also unsubscribe at any time by writing to privacy@datawiring.tech.
- Open and click tracking: Newsletters may contain a small invisible tracking pixel (image) and tracked links that register whether an email was opened and which links were clicked. If you prefer not to be tracked, you can disable automatic image loading in your email client, or unsubscribe from the newsletter.
5. Who else processes your data
Your data is never sold or rented to third parties. It is shared only with technical service providers who help run the website and the newsletter, acting as Data Processors under GDPR-compliant Data Processing Agreements (Art. 28 GDPR):
- EmailOctopus (Three Hearts Digital Ltd, London, United Kingdom) – newsletter management and delivery. According to EmailOctopus, subscriber data is stored and processed on servers located in Ireland (EU).
- Namecheap, Inc. (United States) – domain, website hosting, and email services.
- Wordfence / Defiant, Inc. (United States) – website security, firewall, and intrusion prevention.
Data may also be disclosed to public authorities if strictly required by law.
6. Transfers outside the European Economic Area (EEA)
Some service providers are established outside the EEA:
- United Kingdom (EmailOctopus): Transfers to the UK are covered by an Adequacy Decision adopted by the European Commission (Art. 45 GDPR), recognizing an equivalent level of data protection.
- United States (Namecheap, Defiant/Wordfence): Where personal data is transferred to the United States, it is protected by appropriate safeguards under Art. 46 GDPR, specifically the Standard Contractual Clauses (SCCs) approved by the European Commission, and/or certification under the EU-U.S. Data Privacy Framework where applicable.
7. How long the data is kept
- Newsletter data: Kept for as long as your subscription remains active. If you unsubscribe, your email address ceases to receive newsletters immediately and may be retained on a secure suppression list solely to ensure you do not receive future emails by mistake (unless you explicitly request full erasure). Unconfirmed double opt-in addresses are periodically deleted.
- Technical and security data: Server logs and Wordfence security logs (including IP addresses of blocked requests) are normally retained for up to 30–90 days, unless a longer retention is necessary to investigate a specific security incident.
- Emails you send: Kept for the time necessary to handle and resolve your request, and ordinarily deleted within 12 months of the last correspondence.
8. Cookies
This website only uses strictly necessary technical and security cookies (for example, to protect the website from malicious login attempts or bot traffic via Wordfence, and to ensure basic page delivery).
- No profiling, marketing, or analytics cookies are used.
- Because strictly necessary cookies only allow the website to function safely, they do not require prior consent under Art. 122 of the Italian Privacy Code and the EU ePrivacy Directive.
- You can still block or delete cookies at any time through your browser settings.
9. Your rights
Under Articles 15–22 of the GDPR, you have the right to:
- Access your personal data and receive a copy of it;
- Rectify inaccurate or incomplete data;
- Erase your data (“right to be forgotten”);
- Restrict the processing of your data under certain conditions;
- Data portability (receive the data you provided in a structured, commonly used, machine-readable format);
- Object at any time to processing based on legitimate interest;
- Withdraw your consent at any time (for example, via the unsubscribe link in every email).
To exercise your rights, write to privacy@datawiring.tech. You will receive a reply within one month of your request (as required by Art. 12(3) GDPR).
You also have the right to lodge a complaint with a data protection supervisory authority. In Italy, this is the Garante per la protezione dei dati personali (https://www.garanteprivacy.it). You may also contact the supervisory authority of the EU country where you habitually reside or work.
10. Other information
- No automated decision-making: Your data is not used for automated decision-making or individual profiling within the meaning of Art. 22 GDPR.
- Children: This website and the newsletter are not intended for individuals under the age of 16. If I learn that data from a child under 16 has been collected without parental consent, I will delete it promptly.
- Changes to this policy: This policy may be updated from time to time to reflect technical or legal changes. The “Last updated” date at the top indicates the latest revision.