Privacy policy

Data Controller

Data Controller
Lorenzo Cantini
lorenzocantini@duck.com

Types of Data Collected

Types of Data Collected
We collect two categories of data:
Data directly provided by you: name and email address, used solely for contact purposes.
Browsing data: technical information that does not identify you personally (browser type, device, country, pages visited). This data is gathered automatically by Cloudflare Web Analytics.

Purpose of Processing

Purpose of Processing
• Directly provided data are processed to respond to your inquiry.
• Browsing data are processed to analyse site usage, improve performance and enhance user experience.

Legal Basis for Processing

Legal Basis for Processing
• Directly provided data – processed on the basis of your consent (GDPR Art. 6 (1)(a)). You may withdraw consent at any time.
• Browsing data – processed on the basis of our legitimate interest to monitor and improve the website (GDPR Art. 6 (1)(f)).

Analytics Tools

Analytics Tools
We use Cloudflare Web Analytics for traffic analysis. The service is privacy‑focused: it does not set cookies, does not collect personally identifiable information, and does not perform fingerprinting. Data are aggregated and cannot be linked to an individual.
For details, see the Cloudflare Privacy Policy.

Data Retention

Data Retention
• Directly provided data are retained only for the period necessary to handle your request.
• Browsing data are stored in anonymous, aggregated form for analytical purposes.

Your Rights

Your Rights
Under the GDPR you have the right to:
• Access your personal data
• Rectify inaccurate data
• Erase your data (right to be forgotten)
• Restrict or object to processing
• Receive your data in a portable format (data portability)
• Lodge a complaint with a supervisory authority

To exercise any of these rights, contact us at lorenzocantini@duck.com.

Data Security

Data Security
We implement appropriate technical and organisational measures (encryption, access controls, regular security audits) to protect personal data against unauthorised access, loss or unlawful processing.

Contact

Contact
For any privacy‑related questions, you may reach the Data Controller at:
lorenzocantini@duck.com.

Rights for Users in the United States

If you are a California resident, you have the rights granted by the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA), including the right to request disclosure of the personal information we collect, the right to request deletion, and the right to opt‑out of the sale of personal information. We do not sell or share your personal data for commercial purposes.

Rights for Users in Canada

Under Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA), you have the right to access, correct, and delete your personal information, as well as the right to withdraw consent at any time. Requests can be sent to lorenzocantini@duck.com.

Other Jurisdictions

If you reside outside the EU, United States, or Canada, your rights are governed by the privacy laws applicable in your country. We will honor any lawful request to access, correct, delete, or limit the processing of your personal data.