Privacy policy
Last updated: 24 October 2026
1. Who processes your data
The data controller is Angelo Campione, resident in Venezuela, with no establishment in the European Union. For any question about this policy, or to exercise your rights, use the data rights request form. No account needed, and no email address is published anywhere.
This policy covers angelocampione.com and en.angelocampione.com. They are two independent installations of the same editorial project, and they process the same kinds of data for the same purposes.
2. What data I process and why
| Purpose | Data | Legal basis | Retention |
|---|---|---|---|
| Serving the site and keeping it secure | IP address, date and time, requested page, browser and operating system (server logs) | Legitimate interest in a working, protected site (Art. 6(1)(f) GDPR) | Up to 30 days |
| Measuring audience (statistics) | Cookie or device identifier, pages viewed, reading time, audio plays. Not used to identify you personally. | Your consent (Art. 6(1)(a) GDPR) | Per the analytics property setting: 2 or 14 months |
| Measuring social campaigns (marketing) | Cookie identifier, pages visited, actions taken on the site | Your consent (Art. 6(1)(a) GDPR) | Per each platform (see cookie table) |
| Sending the newsletter | Name and email address, date and source of subscription, confirmation status | Your consent (Art. 6(1)(a) GDPR), double opt-in | Until you unsubscribe or ask for erasure |
| Publishing your comments | Name, email address, IP address, browser and the comment text | Your consent when submitting it (Art. 6(1)(a) GDPR) | While the comment is published; email and IP are removed on request |
| User account and contact form | Name, email address, username and the content of your message | Performance of the relationship you start (Art. 6(1)(b) GDPR) | While the account exists and, after the last contact, up to 1 year |
I do not make automated decisions with legal effects on you, and I do not build profiles for that purpose. I never sell or rent personal data.
3. Cookies and local storage
I use first-party cookies that are strictly necessary for the site to work and, only if you accept them, third-party cookies for statistics and marketing. On your first visit you will see a notice with three options: Only necessary, Accept all, and a link to this page. Your choice is stored for 180 days and you can change it at any time with the Cookies button in the bottom-left corner.
Necessary cookies (always on)
| Name | Purpose | Duration | Set by |
|---|---|---|---|
wordpress_logged_in_* |
Keeping you signed in | 1 year | This site |
wordpress_sec_* |
Secure session in the private area | 1 year | This site |
wp-settings-*, wp-settings-time-* |
Remembering interface preferences | 1 year | This site |
comment_author_*, comment_author_email_*, comment_author_url_* |
Not asking for your details again when commenting | 1 year | This site |
brutal_consent (local storage, not a cookie) |
Storing your cookie choice | 180 days | This site |
Statistics cookies (only with your consent)
| Name | Purpose | Duration | Set by |
|---|---|---|---|
_ga |
Distinguishing users in aggregate | 2 years | Google (Google Analytics 4) |
_ga_SY23NJ0411 |
Keeping the analytics session state | 2 years | Google (Google Analytics 4) |
Until you accept, Google Analytics runs in cookieless mode: it receives a denied consent signal and sets no identifiers in your browser.
Marketing cookies (only with your consent)
| Name | Purpose | Duration | Set by |
|---|---|---|---|
bcookie, lidc, li_sugr, UserMatchHistory, AnalyticsSyncHistory, li_gc |
Measuring LinkedIn campaign performance | Between 24 hours and 2 years, per cookie | LinkedIn Ireland Unlimited Company |
guest_id, personalization_id, muc_ads, twclid |
Measuring X campaign performance | Up to 2 years, per cookie | X Corp. |
These cookies are not loaded until you accept marketing. If you decline or do not decide, the site runs no LinkedIn or X script at all.
Turning them off in your browser
You can delete or block cookies in your browser settings: Chrome, Firefox, Safari and Edge all allow it per site. Blocking everything may break parts of the site (comments, sign-in, newsletter). You can also use the site’s Cookies button to withdraw consent without touching your browser.
4. Who else is involved
Some providers process data on my behalf as processors:
- Contabo Inc. (United States, St. Louis) — hosting for the server that runs both sites, the database and the mail manager.
- Google Ireland Limited (Ireland) — web analytics (Google Analytics 4) and site fonts (Google Fonts).
- LinkedIn Ireland Unlimited Company (Ireland) — campaign measurement, only with marketing consent.
- X Corp. (United States) — campaign measurement, only with marketing consent.
- Amazon Web Services EMEA SARL (Luxembourg) — transactional and newsletter email delivery, once enabled.
The newsletter manager and the automation tool run on my own server, not on an external service. I share no data with anyone else except where legally required.
Almost all of these providers are outside the European Economic Area: the server is in the United States, and so are Google, LinkedIn and X. In those cases the transfer relies on a European Commission adequacy decision (EU-US Data Privacy Framework) or on standard contractual clauses. You can ask me for details through the data rights request form.
5. Your rights
You can exercise your rights of access, rectification, erasure, restriction of processing, portability and objection at any time, and withdraw any consent you have given without affecting the lawfulness of prior processing. Write through the data rights request form stating which right you want to exercise. I will answer within one month at the latest.
If you believe I have not handled your request properly, you can lodge a complaint with the data protection authority of your country of residence. If you live in Spain, that is the Spanish Data Protection Agency (www.aepd.es).
6. Minors
This site is not aimed at children under 14 and I do not knowingly collect their data. If I find a subscription or comment from a child under that age without parental authorisation, I delete it.
7. Security
The site runs over HTTPS, the databases are not exposed to the internet, and server access is restricted to a cryptographic key. Secrets and credentials are kept outside the code and outside the repository. I make regular backups of content and databases.
8. Changes to this policy
If the stack, the providers or the purposes change, I update this page and change the date at the top. Significant changes are also announced in the newsletter.
9. Contact
For data protection, the data rights request form. For everything else, the usual contact form.