Privacy notice — processing of personal data
Last updated: 01/11/2026
Informational translation. The legally binding version of this privacy notice is the Italian one, since the data controller is established in Italy and the relevant supervisory authority is the Italian Garante per la Protezione dei Dati Personali.
1. Data controller
The controller of the data collected through the www.pantoufle.it website are Roberto D. Maggi and Marco Panella, reachable at ascolto@pantoufle.it.
2. What data we collect
We only collect the data you voluntarily provide via the contact form:
- full name (required)
- email address (required)
- phone number (optional)
- segment of interest selected from the menu (optional)
- the message you write (optional)
Along with the request we store: the submission date, your IP address, your browser's user-agent string, and — if the page was reached via a tracked link — the UTM parameters (utm_source, utm_medium, utm_campaign, gclid, fbclid). This metadata only helps us understand which channel a request came from.
3. Purpose and legal basis
We process this data to:
- reply to you and follow up with you as someone potentially interested in the Pantoufle pilot (legal basis: pre-contractual measures at your request — Art. 6(1)(b) GDPR);
- understand at an aggregate level which channels requests come from (legal basis: legitimate interest of the controller — Art. 6(1)(f) GDPR).
We do not use your data for automated profiling, we don't sell it, and we don't share it with third parties for marketing purposes.
4. Where we store the data
The data you send us is stored on a server located in Italy (Aruba S.p.A., Italian data centre), protected by authenticated access and web-level deny rules. It does not leave the European Union.
5. How long we keep it
Requests are kept as long as there is an interest in getting back to you, and in any case no longer than 24 months from the last interaction. If you don't reply to our messages or you ask us to remove the record, we delete it.
6. Your rights
Under Articles 15-22 GDPR, at any time you can:
- ask which data we hold about you (access);
- request correction of inaccurate data (rectification);
- request erasure (right to be forgotten);
- object to processing;
- request portability of the data you provided;
- lodge a complaint with the Italian data protection authority (garanteprivacy.it).
To exercise any of these rights, write to ascolto@pantoufle.it. We reply within 30 days.
7. Cookies and tracking
The site only uses:
- a PHP session cookie, technically necessary for the contact form (CSRF token and cross-page UTM tracking). It is removed when you close the browser.
- an accessibility preference cookie called
a11y, which remembers your high-contrast and text-size choice across visits. It is set when you click the toggle at the top of the page. Lifetime: 1 year, read only by the browser to apply your preferences. - GoatCounter for aggregate visit statistics: an EU-hosted analytics service, cookie-less and without persistent identifiers. It does not recognise you between visits.
We do not use Google Analytics, Meta Pixel, or any other third-party tracker. That's why the site does not show a cookie banner.
8. Security
Encrypted communication via HTTPS (TLS). Data folder protected by server-side rules. No database shared with other projects.
9. Changes to this notice
We reserve the right to update this notice. The current version is always available at this URL, with the last-updated date at the top.