Privacy policy

Draft dated 10 November 2026 — version 2026-11-10-draft-3. This describes the static website with external Google Forms links. The public form is linked; Google account and settings, hosting, locations, transfers and deletion procedures must be verified before final publication. This is not a compliance certification.

1. Controller and scope

The controller is Giorgio Pasini, 17 rue Albert Bayet, Paris, France. MAGGHIA is the name of his personal project. Privacy contact: magghia_compute@proton.me.

This notice under Article 13 of Regulation (EU) 2016/679 (GDPR) covers browsing, email enquiries and applications collected through external Google Forms. The website accepts no purchases or donations, activates no AI accounts or compute nodes and currently offers no newsletter. The demo is a browser simulation: prompts are not sent to a server and disappear on page reload.

2. Data, purposes and legal bases

Purpose	Data	GDPR legal basis
Assess applications and contact applicants	Name, email and participation option (user or provider)	Steps requested before entering a contract, Article 6(1)(b); for non-contractual participation, legitimate interest in handling requests, Article 6(1)(f)
Reply to enquiries and contribution proposals	Contact details, request content and any information you choose to send	Legitimate interest in handling requested communications, Article 6(1)(f); where relevant, steps requested before entering a contract, Article 6(1)(b)
Deliver pages and protect access	Technical connection data, such as IP addresses and request information received by hosting and network providers	Legitimate interest in website availability and security, Article 6(1)(f)

Name, email and participation option are required to handle your application and contact you. The current form does not collect organisation, technical profile or free-text messages. Any additional details provided by email are processed to answer your request. Do not send health data, identity documents, credentials or unnecessary sensitive information. Applying does not subscribe you to promotional communications.

We do not use applications for profiling, selling lists, AI training or solely automated decisions with legal or similarly significant effects.

3. How Google Forms works

The static website does not collect or submit applications directly. The link opens Google Forms in a new tab: you enter and submit data on Google. We do not embed forms, scripts or Google resources in our website; loading our pages alone does not open the form.

The controller will be able to access responses in his Google account. Any linked Google Sheet, exports or email notifications create further copies requiring separate management. The website stores no responses in an application database and has no email delivery queue. Subsequent correspondence takes place through the controller’s mailbox.

Google’s own processing is also governed by its privacy policy and service terms. Using Google Forms does not remove the controller’s responsibilities for application purposes, access and retention. The account, actual configuration and applicable agreements must be assessed before activation; we do not assume that a free account is equivalent to a Google Workspace agreement.

4. Retention and deletion

Messages and applications are retained for 12 months from receipt, subject to earlier deletion where applicable or specific documented legal requirements. In the intended configuration the controller manages deletion manually: the website performs no automatic cleanup and sends no newsletter subscription confirmations.

Deletion must separately cover Forms responses, any linked Sheets, exports and mailbox copies; removing a Forms response does not establish that other copies have been removed. Trash, backups, any historical data from earlier versions and hosting log retention must also be checked before final publication. We do not claim these procedures have already been configured.

5. Recipients, providers and transfers

The controller and any authorised collaborators access only the data necessary to handle requests. Services involved include Google Forms, any Google Sheets, the contact mailbox and website hosting/network services. Providers must be assessed according to their actual roles, with Article 28 GDPR agreements where applicable.

Production hosting has not been confirmed. The public form is available; the Google account type and response management settings still need to be verified. Contracting entities, locations, support access, subprocessors and possible transfers outside the EEA must be checked before final publication. We do not guarantee exclusively European residence or absence of transfers. The final notice must describe any transfers and safeguards actually applicable under Articles 44 onwards GDPR; these cannot be inferred from a .eu domain.

6. Cookies and browser storage

The current application code sets no cookies, uses neither localStorage nor sessionStorage and includes no analytics, advertising pixels or profiling. Language follows the URL; only entry through the root uses the browser language. Manual selection is not saved. The demo remains temporarily in page memory.

This describes our pages. Opening Google Forms takes you to an external service, which may use cookies and process technical data under its own settings and notices. Hosting and proxies must be checked on the deployed website before publication. Changes require reassessment, including Article 82 of the French Informatique et Libertés law and, where applicable, Article 122 of the Italian Privacy Code.

7. Rights and complaints

You may request access, rectification, erasure, restriction and, where applicable, portability, and object to processing based on legitimate interests under Articles 15–22 GDPR. For any consent-based processing, consent can be withdrawn without affecting earlier lawful processing; we currently collect no newsletter subscriptions.

Write to magghia_compute@proton.me. We normally respond within one month; extensions and proportionate identity checks follow Article 12 GDPR. You may complain to the CNIL or the competent authority, including the Italian Garante, under Article 77 GDPR.

8. References and revisions

References: GDPR, French law no. 78-17 Informatique et Libertés and, where applicable, Italian Legislative Decree 196/2003. New features require updates to this notice and the tools actually used. Earlier collections are not retrospectively attributed to new notices or consents.