Information notice

Privacy Policy

Last updated: 27 May 2026

This notice describes how the personal data of users who browse the site www.sergiovento.comand use the interactive forms available on it — in particular the contact form («Let's talk») and the free-guide request form «How to tell if your processes are ready for automation» — is processed, pursuant to Articles 13 and 14 of Regulation (EU) 2016/679 («GDPR»).

1. Data controller

The data controller is Sergio Vento, based in 20125 Milano (MI), Italy.

For any request regarding the processing of your data, you can contact the controller through the contact form.

2. Types of data collected

2.1 Contact form («Let's talk»)

Through the contact form the following data, provided voluntarily by the user, is collected:

  • full name;
  • company name;
  • email address;
  • company size (optional);
  • description of the problem or request;
  • any resolution attempts already made (optional);
  • preferred reply channel (optional);
  • any further information entered in the free-text field (optional).

2.2 «Free guide» form

To access the free-guide download, only the following is collected:

  • email address.

On submission, the date and time of the submission are also recorded for internal documentation purposes.

2.3 Browsing data

During normal browsing, the site uses no profiling cookies and no third-party analytics or tracking tools. The typefaces (Inter and Playfair Display) are self-hosted and served directly from the site's own domain. The user's IP address may be temporarily processed by the security infrastructure (Cloudflare) for protection against cyber attacks, as described in §4.

3. Purposes and legal basis

3.1 Data collected via the contact form

Data collected via the contact form is processed solely to:

  • respond to the request sent and assess a possible professional collaboration (legal basis: Art. 6(1)(b) GDPR — pre-contractual measures at the data subject's request);
  • follow up on subsequent communications directly connected to the original request (legal basis: Art. 6(1)(f) GDPR — legitimate interest of the controller).

3.2 Data collected via the «Free guide» form

The email address provided to receive the free guide is processed to:

  • deliver the requested resource and handle directly related service communications (legal basis: Art. 6(1)(b) GDPR — performance of a request by the data subject);
  • occasionally send insight communications on Service Design and process automation topics, considered of interest to those who requested the guide, on the basis of the controller's legitimate interest (Art. 6(1)(f) GDPR), assessed as prevailing given the relationship already established with the data subject. The user may object to this processing at any time — see §6.

In no case is the data collected via the site's forms used for profiling, automated decision-making, or transferred to third parties for marketing purposes.

4. Processing methods and recipients

Processing is carried out using electronic tools and with measures suitable to ensure its security and confidentiality. The data is accessible only to the controller and is not disclosed to third parties except to those acting as data processors pursuant to Art. 28 GDPR.

In particular, delivery of the emails generated by the site's forms (both the contact form and the free-guide form) takes place via the Resend service (Resend, Inc., based in the United States), which acts as data processor. Resend provides infrastructure and standard contractual clauses (SCC) approved by the European Commission for the transfer of data outside the European Economic Area. More information is available in Resend's privacy policy.

The site's hosting infrastructure runs on proprietary servers and is protected by Cloudflare, Inc., which operates as a CDN and cyber-attack protection provider. Browsing data (e.g. IP address) is processed by Cloudflare for security purposes for the time strictly necessary.

5. Retention periods

Data provided via the contact form is retained for the time strictly necessary to handle the request and any professional relationship that results from it and, in any case, for no longer than 24 months from the last contact, unless legal obligations require longer retention (e.g. for accounting or tax purposes).

The email address provided via the free-guide form is retained for a maximum of 24 months from the last interaction (download, opening a communication, reply). The user may request early deletion at any time, including through the objection/unsubscribe procedure described in §6.

6. Rights of the data subject

At any time you can exercise the rights set out in Articles 15 to 22 of the GDPR, in particular:

  • access your personal data;
  • request its rectification or erasure;
  • request restriction of, or object to, the processing (including objecting to further communications);
  • request its portability to another controller;
  • withdraw at any time any consent given.

To exercise these rights, simply send a request through the contact form. The request will be handled within 30 days, subject to justified extensions pursuant to Art. 12 GDPR.

You also have the right to lodge a complaint with the supervisory authority — in Italy, the Garante per la protezione dei dati personali — if you believe your data is processed in breach of the Regulation.

7. Nature of provision and consequences of refusal

Providing the data requested by the site's forms is optional. However, failure to provide the data marked as mandatory makes it impossible to fulfil the user's request (replying to the contact message or delivering the free guide).

8. Changes to this notice

The controller reserves the right to update this notice at any time. Any changes will be published on this page with the date of the last update.

Questions? Write to me through the contact form.