Last updated: 21 October 2026 · Version française
This policy explains which personal data is processed when you visit giacomolangella.com, why, for how long, and what your rights are.
1. Data controller
Giacomo Langella EI (sole trader)
25 rue Baldner, 67100 Strasbourg, France
Email: hello@giacomolangella.com
No data protection officer has been appointed, as this is not mandatory for this activity.
2. Data processed, purposes and legal bases
Contact form
- Data: name, email address, message, date sent and IP address.
- Purpose: to reply to your request and follow up on our business exchanges.
- Legal basis: steps taken at your request before entering into a contract (Art. 6(1)(b) GDPR) and legitimate interest in following up the business relationship (Art. 6(1)(f) GDPR).
- Retention: 3 years from your last contact, then automatic deletion.
Messages are received by email, stored in the website database and may be added to the Brevo customer relationship management (CRM) tool for follow-up. They are not used to send you a newsletter without your consent.
Spam protection (hCaptcha)
- Data: IP address, technical information about your browser and device, interactions with the page (mouse movements, keystrokes).
- Purpose: to check that the form is submitted by a person and not a bot.
- Legal basis: legitimate interest in protecting the site against spam and abuse (Art. 6(1)(f) GDPR).
- Retention: as set out in the hCaptcha privacy policy.
Audience measurement (Google Analytics) — only with your consent
- Data: pages viewed, visit duration, traffic source, device and browser type, approximate location, cookie identifier.
- Purpose: to understand, in aggregate, how the site is used in order to improve it.
- Legal basis: consent (Art. 6(1)(a) GDPR and Article 82 of the French Data Protection Act).
- Retention: cookies up to 13 months; data kept in Google Analytics for up to 14 months.
Advertising and campaign measurement — only with your consent
- Tools: Google Ads, Google Tag Manager, PixelYourSite.
- Data: cookie identifiers, traffic source, landing page, interactions and conversions.
- Purpose: to measure the performance of advertising campaigns and show relevant content.
- Legal basis: consent (Art. 6(1)(a) GDPR and Article 82 of the French Data Protection Act).
- Retention: see the cookie table below.
The site uses Google Consent Mode v2: until you accept, no Google Analytics or Google Ads cookies are set. Google may only receive cookieless technical signals (for example, that a page was viewed).
Consent records
- Data: random consent ID, date and time, choices made, language, anonymised IP address, browser type, page.
- Purpose: to be able to demonstrate the choice you made about cookies.
- Legal basis: legal obligation (Art. 7(1) GDPR).
- Retention: 13 months, then automatic deletion.
Hosting and server logs
- Data: IP address, date and time, pages requested, browser.
- Purpose: to run the site and keep it secure.
- Legal basis: legitimate interest (Art. 6(1)(f) GDPR).
- Retention: a limited period set by the hosting provider.
3. Cookies and trackers
A cookie is a small file stored by your browser. Necessary cookies are always on; the others are only set with your consent, given through the banner shown on your first visit. Rejecting is as easy as accepting, and your choice is kept for 6 months.
You can change your choices at any time: manage my cookies, or use the round button at the bottom of the screen.
| Cookie | Provider | Purpose | Duration | Category |
|---|---|---|---|---|
gl_consent | giacomolangella.com | Stores your cookie choices and your consent ID | 6 months | Necessary |
| hCaptcha local storage | hCaptcha | Spam protection on the form | Session | Necessary |
_ga | Google Analytics | Distinguishes visitors | 13 months | Statistics |
_ga_<ID> | Google Analytics | Keeps session state | 13 months | Statistics |
_gcl_au | Google Ads | Measures ad conversions | 3 months | Marketing |
pys_first_visit, pysTrafficSource, pys_landing_page, pys_utm_* | PixelYourSite | Store the traffic source and landing page to measure campaigns | 7 days | Marketing |
last_pysTrafficSource, last_pys_landing_page, last_pys_utm_* | PixelYourSite | Same, for the latest visit | 7 days | Marketing |
pys_session_limit, pys_start_session | PixelYourSite | Define the browsing session | 1 hour / session | Marketing |
pbid | PixelYourSite | External ID for campaign measurement | 6 months | Marketing |
pys_cd | PixelYourSite | Determines the cookie domain | 12 months | Marketing |
4. Recipients and processors
Your data is never sold. It is only accessible to Giacomo Langella and to the following providers, to the extent necessary for their service:
- Web Host Most LLC (United States) — website hosting; servers located in the Netherlands (EU).
- Apple Distribution International Ltd. (Ireland) — email service (iCloud Mail) where form messages are received.
- Brevo SAS (9-17 rue Salneuve, 75017 Paris, France) — customer relationship management (CRM).
- Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) — Google Analytics, Google Ads, Google Tag Manager.
- Intuition Machines, Inc. (Miami, United States) — hCaptcha.
5. Transfers outside the European Union
Some providers are based in the United States or may transfer data there (Google, Intuition Machines, Web Host Most). These transfers are covered by the EU–U.S. Data Privacy Framework for certified companies, such as Google and Intuition Machines, and/or by the standard contractual clauses adopted by the European Commission.
6. Your rights
Under the GDPR and the French Data Protection Act, you have the following rights over your data:
- right of access and rectification;
- right to erasure;
- right to restriction of processing;
- right to object, including to direct marketing, at any time and without giving a reason;
- right to data portability;
- right to withdraw your consent at any time, without affecting processing carried out before;
- right to give instructions on what happens to your data after your death.
To exercise your rights, write to hello@giacomolangella.com. You will receive a reply within one month. If there is reasonable doubt about your identity, additional information may be requested. For a cookie-related request, please include your consent ID if possible, shown in the “Customise” panel of the banner.
If you believe your rights are not being respected, you can lodge a complaint with the French data protection authority (CNIL): 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France — www.cnil.fr.
7. Security
The site is served over HTTPS, access to the administration area is protected and restricted, and the site’s components are kept up to date. IP addresses stored in the consent records are anonymised.
8. Children
This site is intended for professionals and is not directed at children under 15.
9. Changes
This policy may be updated, in particular when a new service is added. The date of the latest update is shown at the top of the page. If there is a significant change regarding cookies, you will be asked for your consent again.