Last updated: 4 September 2026
This page says what I collect on this site, why, where it goes and how to have it deleted. It is written in plain English: if anything is unclear, write to me and I will explain it.
Who handles the data
The data controller is Bulb Mode SRLS — Via Ancona 15, 60035 Jesi (AN), Italy. VAT number IT02730980428. The person you deal with is Alessio Andreani. For anything to do with your data: alessio@alessioandreani.com.
What I collect, and only when you give it
If you write to me — from the contact form, the prints form or a workshop page: your name, email address, the message, the page you wrote from and, on a workshop page, which workshop. I need them to reply and to handle the request.
If you sign up for the dates — from the checkbox inside the forms or the strip at the foot of the pages: your email address, nothing else. It is used only to send you the dates of the next workshops. Signing up takes two steps: after you leave your address you get a confirmation email, and until you confirm I do not write to you.
Your IP address, for two minutes, only to stop an automated program from sending the same form hundreds of times. After two minutes it is deleted.
Server logs, kept by the host as on any website: IP address, time of the visit, page requested. They are there for security and for working out what broke.
Why I am allowed to
For enquiries: answering someone who contacts me and, if it goes that way, preparing an agreement. For the workshop dates: your consent, which you can withdraw whenever you like. For the server logs: my legitimate interest in keeping the site up and secure.
Where it goes
Brevo, the service I use for email and for the list of dates, with the data on servers in the European Union. SiteGround, which hosts the site. Google (Google Ireland Limited) for visit statistics, but only if you accepted the banner: if you did not, Google receives nothing. Nobody else: I do not sell your data, I do not pass it on, and I do not use it to profile you.
How long I keep it
Enquiries: as long as it takes to answer you and follow up on whatever comes of it, and in any case no longer than 24 months from the last contact. The dates list: until you unsubscribe. The IP address used against automated sending: two minutes.
Cookies
Two always, because the site needs them to work, and two more only if you allow it.
Always: pll_language, which remembers the language you picked and lasts a year; and aa_consenso, which remembers the choice you made on the banner so I do not ask again on every page — a year if you accept, six months if you decline.
Only if you accept: _ga and _ga_99948VVRMR, from Google Analytics, used to count how many people visit and where they come from. They last six months: I shortened them from Google’s default of two years.
Until you accept, the site does not contact Google in any way: no request, no cookie. If you decline, nothing happens and the site works exactly the same. You can change your mind at any time from the Cookies link at the foot of every page.
Statistics stay statistics: advertising and profiling are switched off even after you accept, and Google Analytics does not record your IP address. The data goes through Google’s European collection endpoint.
Nothing else: no social buttons that follow you, and no typeface or script loaded from another server.
Your rights
You can ask to see the data I hold about you, to correct it, to delete it, to limit how it is used, to receive it in a readable file, and you can object to it being processed. If you signed up for the dates you can withdraw your consent at any time: there is an unsubscribe link at the foot of every email, or write to me and I will do it.
To exercise any of these, an email to alessio@alessioandreani.com is enough: I reply within a month. If you think something is wrong you can go to your national data protection authority — in Italy, the Garante per la protezione dei dati personali.
If this page changes
The date at the top says when I last updated it. If I change anything that matters, I will say so here.