Privacy policy.
Last updated: October 2026
Who handles your data
The data controller is Massimiliano Milani (Grafico6), acting in a personal capacity. For any request about your data you can write to me at m.milani@grafico6.com.
This notice is provided under articles 13 and 14 of Regulation (EU) 2016/679 (GDPR) and only concerns the grafico6.com website.
What data I collect and why
The site has no sign-up and no private areas. Personal data is only processed if you write to me through the “Write to me” form.
- Your name, email address and the text of your message, which you enter yourself: I use them to read your request and reply.
- The topic you choose in the form and the language of the page: to better understand your request.
- The date and time of sending and your IP address, which arrive with the message: they help recognise and limit automated submissions (spam).
Legal basis
Replying to your request, including with a view to a possible engagement, is processing necessary to take steps at your request before entering into a contract (art. 6(1)(b) GDPR).
Protecting the site from spam rests on my legitimate interest in keeping it safe and working (art. 6(1)(f) GDPR).
Providing the form data is optional, but without it I cannot receive or reply to your message.
How sending works and where the data goes
The form does not store anything on the site: your message is sent by email to my mailbox on the grafico6.com domain. To limit repeated submissions, the server keeps an anonymous reference for about a minute (a code derived from the IP address, not the address itself) in a temporary file.
The site and the mailbox are hosted by Aruba S.p.A. (Italy), which processes data on my behalf as a service provider. I do not sell or pass your data to third parties and I do not use it for newsletters or advertising. The data is not disseminated and is not transferred outside the European Economic Area.
How long I keep it
I keep your message in my mailbox for as long as needed to reply and to manage any relationship that follows, and in any case no longer than 24 months after the last contact, unless the law requires otherwise. If a working relationship begins, the data needed will follow the retention periods for accounting and tax obligations.
Cookies and third-party tools
The site uses no tracking cookies and no analytics or advertising tools, and it loads no fonts or scripts from external services: the typefaces are hosted on the site itself.
Your browser’s storage (localStorage) only keeps your choice to pause animations. It is technical information that stays on your device, contains no personal data and is not sent to anyone.
Links to LinkedIn and Instagram open external sites with their own policies: from that point your data is handled by those services.
Your rights
At any time you can ask me, by writing to m.milani@grafico6.com:
- to access your data and get a copy;
- to correct or update it;
- to delete it or restrict its processing;
- to object to processing based on legitimate interest;
- to receive the data in a readable format (portability).
Complaints
If you believe the processing breaches the law, you can lodge a complaint with the Italian data protection authority (Garante per la protezione dei dati personali, www.garanteprivacy.it) or with the authority of your country.
Changes
I will update this page if the site or the way I handle data changes. The date of the last update is shown at the top.