Privacy policy
This policy explains what data is processed when you visit ricardoarrigoni.com and why. It follows the EU General Data Protection Regulation (GDPR) and the Swiss Federal Act on Data Protection (FADP).
Who is responsible
This website is run by Ricardo Arrigoni. For anything about this policy or your data, email contact@ricardoarrigoni.com. You can also reach me through LinkedIn.
What this site does not do
- It has no contact form, newsletter sign-up or comment section.
- It sets no cookies unless you accept analytics cookies in the banner (see Google Analytics below).
- It does not use advertising pixels or advertising features.
Hosting
The site is hosted on Cloudflare. When you request a page, Cloudflare processes technical data such as your IP address, browser type and the requested URL to deliver the page and protect the site against abuse. Cloudflare acts as a processor on my behalf, under its data processing terms. It keeps this data only as long as it needs it for these purposes and then deletes it; its privacy policy does not set a fixed period.
Analytics
Cloudflare Web Analytics
I use Cloudflare Web Analytics to count visits and see which pages are read. It does not use cookies or local storage, does not fingerprint visitors by IP address, browser or any other data, and does not record query strings. It records aggregated data such as page views, referrers, country and device type. Cloudflare keeps the full data for 7 days, then keeps a sample of about 10% of it, which I can see for six months.
Google Analytics
If you accept analytics cookies in the banner, I use Google Analytics 4 to understand how visitors find and use the site. It loads only after you accept. If you reject or ignore the banner, it does not load and nothing is sent to Google.
Google Analytics sets two cookies: _ga, which distinguishes visitors, and _ga_<ID>, which keeps track of the session. Both last up to two years. It records data such as the pages you view, how you arrived, your approximate location and your device type. Google says it does not log or store the IP addresses of visitors in the EU, Switzerland or the UK, and uses them only to work out approximate location before discarding them. Google Signals and advertising features are turned off. Google keeps this data for 14 months.
Google provides Google Analytics as a processor on my behalf, under its data processing terms. You can change your choice at any time with "Cookie settings" at the bottom of every page. Withdrawing consent deletes the Google Analytics cookies.
Google Search Console
I use Google Search Console to see how the site appears in Google Search: which searches show it and how often people click. These reports come from Google's own search data. Search Console adds no script and no cookie to this site.
Bing Webmaster Tools
I use Bing Webmaster Tools in the same way, to see how the site appears in Bing search. Its reports come from Bing's own search data. It adds no script and no cookie to this site.
Legal basis
Hosting, security and Cloudflare Web Analytics are based on my legitimate interest in running a secure, working website and knowing which pages are read (Article 6(1)(f) GDPR). Google Analytics is based on your consent (Article 6(1)(a) GDPR). You can withdraw it at any time with "Cookie settings"; this does not affect processing that happened before.
Transfers outside the EU and Switzerland
Cloudflare is based in the United States and processes data across its global network. These transfers rely on Cloudflare's certification under the EU-U.S. and Swiss-U.S. Data Privacy Frameworks, with standard contractual clauses as a fallback. Google may process Google Analytics data in the United States. Google LLC is certified under the same frameworks.
Links to other sites
Pages link to other sites, including LinkedIn and X. When you follow a link, the other site's privacy policy applies.
Your rights
Under the GDPR and the FADP, you have the right to access, correct or delete personal data about you, to restrict or object to its processing, to data portability, and to withdraw consent at any time. To exercise these rights, email contact@ricardoarrigoni.com.
You can also complain to a data protection supervisory authority, in particular in the EU or EEA country where you live or work, or where you think an infringement took place. In Switzerland, the authority is the Federal Data Protection and Information Commissioner (FDPIC).
Changes
I'll update this page if the way the site handles data changes. The date at the top shows the latest version.