Privacy policy

Version 2.0 — 30 July 2026. Supersedes the May 2026 version.

1. Data controller

Aquila Corde Armoniche srl
Via Aviano 16, 36030 Caldogno (VI), Italy
VAT and tax code: IT02295710244
Email: aquila@aquilacorde.com

The Controller has not appointed a Data Protection Officer (DPO), as the conditions of Article 37 of Regulation (EU) 2016/679 do not apply. For any matter concerning personal data, please use the email address above.

2. Scope of this notice

This notice describes the processing of personal data connected with the use of ricerche.aquilacorde.com, the archive of historical and scientific research essays on harmonic strings published by Aquila Corde Armoniche srl.

The site is a read-only archive: there are no contact forms, registration areas, newsletters, comments, file uploads or server-side search functions. The archive's search box and filters run entirely in the user's browser and transmit no data to the server.

3. Data processed, purposes and legal bases

3.1 Browsing data (server logs)

  • Data processed: IP address, date and time of the request, requested URL, response code, volume of data transferred, browser and operating system type (user-agent), referring page.
  • Purposes: technical delivery of the pages, security and stability of the service, detection and prevention of abuse, unauthorised access and cyber-attacks.
  • Legal basis: Article 6(1)(f) GDPR — the Controller's legitimate interest in delivering a secure and functioning service. This interest has been balanced against data subjects' rights; the data are not used to identify visitors or for commercial purposes.
  • Retention: a maximum of 30 days, save where longer retention is required to establish liability in the event of computer offences against the site.
  • Provision: providing these data is technically unavoidable when browsing the Internet and is not a matter of user choice.

3.2 Technical cookies and local storage

  • PHPSESSID — technical PHP session cookie. Purpose: maintaining authentication in the restricted administration area. It is not installed during ordinary browsing: it is created only when visiting /admin/. Duration: browser session. Legal basis: Article 122 of Italian Legislative Decree 196/2003 — strictly necessary cookie, for which no consent is required.
  • cookie_ok — a localStorage entry, not an HTTP cookie. Purpose: remembering that the cookie notice has already been displayed, so it is not shown again on every page. It contains no identifier and cannot be used to recognise the user. Duration: 12 months, removable at any time by clearing site data in the browser. Legal basis: Article 122 of Legislative Decree 196/2003 — strictly necessary tool.

No profiling, analytics or advertising cookies and no traffic-measurement tools are used: the site does not employ Google Analytics or equivalent services and performs no profiling of any kind.

You may block or delete cookies through your browser settings: Firefox, Chrome, Safari, Edge. Blocking technical cookies may prevent the administration area from working correctly but does not affect access to the archive.

3.3 Embedded YouTube videos

  • Where: some essays contain videos hosted on YouTube.
  • How it works: the videos are not loaded when the page opens. A placeholder is shown instead. Until then, no data is sent to Google.
  • What happens if you click: only after an explicit click on the placeholder is the video loaded from the youtube-nocookie.com domain. From that moment Google receives your IP address, your browser type and the fact that you are watching that video, and may set cookies on your device. If you are signed in to a Google account, viewing may be associated with your account.
  • Purpose: access to audiovisual material supplementing the essays.
  • Legal basis: Article 6(1)(a) GDPR and Article 122 of Legislative Decree 196/2003 — consent, given by means of the informed click on the placeholder.
  • Optional nature and withdrawal: providing these data is entirely optional. Not clicking means only that you will not see the video; all textual content remains fully accessible. Consent may be withdrawn at any time by reloading the page without clicking the placeholder and deleting YouTube cookies from your browser.
  • Independent controller: processing that follows the click is carried out by Google Ireland Limited and Google LLC as independent controllers, under Google's privacy policy, over which Aquila Corde Armoniche srl has no control.

3.4 Typefaces and images

All typefaces (Manrope, Newsreader), stylesheets, images and PDF documents are hosted directly on the site's own server. No requests are made to external services such as Google Fonts or content delivery networks (CDNs). Displaying the pages — other than the videos described in 3.3 — involves no transfer of data to third parties.

4. Recipients of the data

Browsing data may be accessed by:

  • Virtual Bit di Lucio Crusca, via Isonzo 5, 10069 Villar Perosa (TO), Italy — supplier of hosting and connectivity services, appointed as processor under Article 28 GDPR, with servers located in Italy;
  • the Controller's authorised staff who manage the site's content, instructed pursuant to Article 29 GDPR.

The data are not disclosed to any other party, are not disseminated and are never sold or transferred.

5. Transfers to third countries

Browsing data and server logs are processed exclusively on servers located in Italy, and therefore within the European Union.

The only transfer to a third country may occur, subject to the user's consent, in the case described in 3.3: playing a video results in a transfer to Google LLC in the United States. That transfer relies on the European Commission's adequacy decision of 10 July 2023 concerning the EU-US Data Privacy Framework (Article 45 GDPR), to which Google LLC has self-certified.

6. Automated decision-making

The site carries out no automated decision-making and no profiling within the meaning of Article 22 GDPR.

7. Data concerning the author of the essays

The site publishes the professional biography, publications and conference activity of Mimmo Peruffo, founder and researcher at Aquila Corde Armoniche srl. This processing serves scientific documentation and dissemination purposes and is based on Article 6(1)(f) GDPR (legitimate interest in the correct attribution of scientific authorship) as well as on the data subject's consent.

8. Your rights

Under Articles 15-22 of Regulation (EU) 2016/679 you have the right to:

  • access your personal data and obtain a copy (Art. 15);
  • request rectification where the data are inaccurate or incomplete (Art. 16);
  • request erasure in the cases provided for (Art. 17);
  • request restriction of processing (Art. 18);
  • receive your data in a structured format and obtain its portability (Art. 20);
  • object to processing based on legitimate interest (Art. 21);
  • withdraw consent at any time, without affecting the lawfulness of processing carried out before withdrawal (Art. 7(3)).

To exercise these rights, write to aquila@aquilacorde.com or to Aquila Corde Armoniche srl, Via Aviano 16, 36030 Caldogno (VI), Italy. The Controller will reply without undue delay and in any event within one month of receiving the request (Art. 12(3) GDPR).

If you believe the processing of your data infringes the law, you may lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali, Piazza Venezia 11, 00187 Rome — garante@gpdp.it) under Article 77 GDPR, or bring proceedings before the courts under Article 79 GDPR.

9. Security

The Controller implements technical and organisational measures appropriate under Article 32 GDPR, including encrypted delivery of pages over HTTPS, restriction of access to the administration area to authorised staff using individual credentials, and regular updating of the site software.

10. Changes to this notice

This notice may be updated to reflect changes to the site or to the applicable law. The version number and effective date are shown at the top of the page; material changes will be prominently announced on the home page.