Privacy policy
Last updated: 14 October 2026
This page explains what personal data I collect through davidedidonato.com, why I collect it and what you can do about it.
Who I am
I am Davide Di Donato, a self-employed professional based in Bologna, Italy (VAT no. 02349920682), and the data controller for the data described here. You can reach me at davidedidonato@outlook.com.
When you visit this site
The server that hosts this site records your IP address, your browser and device type, the pages you request and when you request them. I use these server logs only to run the site and keep it secure, which is my legitimate interest (Article 6(1)(f) GDPR).
The site sets no cookies, uses no analytics or tracking, and loads nothing from other websites.
When you email me
When you write to davidedidonato@outlook.com, I receive your name, your email address and whatever you write. I use them to reply and to discuss possible work: these are steps you ask for before a contract (Article 6(1)(b) GDPR) or, otherwise, my legitimate interest in answering business enquiries (Article 6(1)(f)).
When you book a call
The “Book a free 30-minute call” button takes you to my page on Cal.com. To book, you give your name, your email address, the time you choose, your time zone and any notes you add. I use them to arrange and hold the call, which can take place on Cal Video: these are steps you ask for before a contract (Article 6(1)(b) GDPR). On its own pages, Cal.com also applies its own privacy policy.
If we work together
I use the contact, contract and invoicing details needed to carry out our contract and to meet my tax and accounting obligations (Article 6(1)(b) and (c) GDPR).
Who receives your data
- Register S.p.A. (register.it), in Italy, which hosts this site.
- Microsoft, which provides my email and calendar (Outlook.com).
- Cal.com, Inc., in the United States, which handles call bookings and Cal Video.
- If we work together, my accountant and the Italian electronic invoicing system (Sistema di Interscambio of the Revenue Agency).
I do not sell your data or use it for marketing.
Data outside the European Union
Microsoft and Cal.com may process data in the United States. Both are certified under the EU-U.S. Data Privacy Framework, which the European Commission recognised as providing adequate protection on 10 July 2023. Where the framework does not apply, Cal.com uses the European Commission’s Standard Contractual Clauses.
How long I keep your data
- Server logs: the hosting provider deletes them on a rolling basis.
- Emails and bookings: for as long as they are needed for your request and for any work that follows. I delete them when you ask me to, or when they are no longer needed.
- Contract and invoicing records: 10 years, as Italian law requires (Article 2220 of the Civil Code).
Do you have to give me your data?
No. But without your email address I cannot reply to you, and without your name and email address Cal.com cannot book the call.
Your rights
You can ask me to access, correct or delete your data, to restrict its use and to receive it in a portable format. You can also object at any time to uses based on my legitimate interest. Write to davidedidonato@outlook.com: I reply within one month.
If you think I have handled your data wrongly, you can complain to the Italian data protection authority, the Garante per la protezione dei dati personali (garanteprivacy.it), or to the authority where you live or work.
Automated decisions
I do not make decisions about you by automated means alone.
Children
This site is meant for businesses and is not aimed at children.
Other websites
The links to Cal.com and LinkedIn take you to websites with their own privacy policies.
Changes to this policy
If this policy changes, I will update this page and the date at the top.