Privacy Policy

Controller

Riccardo Busetti, Vienna, Austria, is responsible for the processing described here. Privacy questions and requests can be sent to hello@riccardobusetti.me.

At a glance

This is a static personal portfolio hosted on Vercel. It uses Vercel Web Analytics and Vercel Speed Insights, but has no advertising, marketing pixels, contact form, user accounts, or error-monitoring service. The site and these analytics tools do not set cookies. The application stores only a theme choice and a session-only interface flag in your browser.

Hosting and request logs

The site is hosted by Vercel Inc. When you request a page or asset, Vercel may process technical request and log data such as your IP address, request time, requested URL, HTTP method and status, referrer, browser or user-agent information, approximate location derived from the IP address, and routing, diagnostic, or security metadata.

This processing is necessary to deliver the requested content, maintain availability, prevent abuse, and diagnose technical problems. The legal basis is Article 6(1)(f) GDPR: my legitimate interest in providing a secure and reliable website.

Vercel may process data in the United States and other countries. Its privacy notice describes its handling of website traffic and the safeguards it uses for international transfers, including the EU-U.S. Data Privacy Framework, Standard Contractual Clauses, or other appropriate mechanisms. See the Vercel Privacy Notice.

Analytics and performance

Vercel Web Analytics records anonymous, aggregated page-view information such as the visited path, referrer, filtered query parameters, approximate location, browser, operating system, and device type. This site does not send custom analytics events. Vercel states that Web Analytics does not use cookies, does not associate reporting data with an individual or IP address, and discards its request-derived visitor identification after 24 hours.

Vercel Speed Insights reports real-world performance measurements such as the route, page URL, connection type, browser, device type, operating system, country, Web Vitals, and technical attribution information. Vercel states that these data points are not tied to an individual visitor or IP address and cannot reconstruct a browsing session.

I use these measurements only to understand aggregate readership and improve site performance and reliability. To the extent this processing involves personal data, the legal basis is Article 6(1)(f) GDPR. The relevant interests are maintaining and improving this portfolio without behavioral advertising or cross-site profiling. More detail is available in Vercel’s Web Analytics privacy documentation and Speed Insights privacy documentation.

Browser storage and cookies

The site uses local storage only to remember whether you selected a light or dark theme. It uses session storage only to avoid replaying the opening animation during the same browser session. These interface values stay in your browser and are not transmitted as application data.

The site does not set cookies or use browser storage for advertising, cross-site tracking, or analytics. Because it has no non-essential cookies or comparable tracking storage, it does not display a cookie-consent banner.

Contact

There is no contact form. Selecting the email link opens your own email application and does not send information through this website. If you email me, I process your address, message, and any information you include so I can respond. The legal basis is Article 6(1)(f) GDPR, or Article 6(1)(b) GDPR where the exchange is necessary to take steps at your request before entering into an agreement.

Fonts, media, RSS, and external links

Fonts, photographs, article images, the downloadable CV, and other site assets are served from this website rather than fetched from Google Fonts or another asset host. The currently published articles do not load third-party embedded media.

The RSS link serves a static feed. This website does not operate an RSS subscription service or collect subscriber details.

The site links to external services including GitHub, LinkedIn, X, YouTube, Substack, Supabase, Sentry, and other referenced websites. Displaying a link does not contact those services. If you follow one, your browser connects to that provider and its own privacy policy applies.

Recipients and automated decisions

Vercel and its subprocessors receive the technical data needed to host, secure, analyze, and measure the site as described above. Email providers process correspondence if you choose to contact me. I do not sell personal data or share it for advertising.

The site does not use personal data for profiling or automated decisions that produce legal or similarly significant effects.

Retention

I keep correspondence only for as long as it is needed to answer the request, maintain necessary records, establish or defend legal claims, or meet legal obligations. Vercel retains hosting, analytics, and performance data according to the account configuration and its applicable retention rules. Web Analytics discards its visitor identification after 24 hours; the availability of aggregated reports depends on the Vercel plan.

Your rights

Subject to the conditions and limits in the GDPR, you may request access to your personal data, correction, deletion, restriction of processing, and data portability where applicable. You may also object to processing based on legitimate interests.

Requests can be sent to the contact address above. I may ask for information needed to verify your identity and will respond within the period required by applicable law. You also have the right to lodge a complaint with the Austrian Data Protection Authority. Please use the contact address above if you want to exercise a right or ask a question about this policy.

Updates

I will update this page when the site’s data processing changes. The date above identifies the current version.