Legal
Privacy Policy
Last updated: 16 September 2026
Data controller
This website is operated by Francesco Vigni, based in Forlì, Italy. You can reach me at [email protected].
Contact form
When you submit the contact form, I process the name, email address, optional organization, and message you provide. This data is used solely to respond to your enquiry and, where relevant, to manage it in my customer-relationship system (self-hosted on EU infrastructure). If that system is unavailable, the submission is delivered to me by email instead so your message is not lost.
The legal basis is your consent and the taking of steps at your request prior to entering into a relationship (Art. 6(1)(a) and 6(1)(b) GDPR). I keep enquiry data only as long as needed to follow up, and remove it on request.
Cookies
This site sets two functional cookies. lang remembers your language choice.
consent remembers, for six months, whether you allowed session recordings.
Both are strictly necessary for the site to work as you expect and require no consent. No
advertising or cross-site tracking cookies are used.
Analytics
This site uses a self-hosted instance of Umami to understand how it is used. Umami sets no cookies and builds no profile of you across sites. It records the page you visit, the site that referred you, your browser, operating system, device type and approximate country. Your IP address is used to derive that country and is not stored.
With your consent, Umami also records your visit as one of its session replays: the page layout, scrolling, clicks and mouse movement, so I can see where the site is hard to use. Nothing is recorded until you press Accept in the banner, and you can withdraw at any time from Privacy settings at the bottom of every page. Everything typed into a form field is masked in your browser before anything is sent, so a replay never contains your name, email address or message.
When you send the contact form, Umami records that a message was sent and in which language, and nothing about its content.
Pageview analytics and the sent-message count rest on my legitimate interest in understanding and improving this site (Art. 6(1)(f) GDPR); you can object at any time by writing to [email protected]. Session replay rests on your consent (Art. 6(1)(a) GDPR).
Separately, your approximate country may be derived from your IP address by the Cloudflare network in front of this site, solely to serve the site in Italian or English; this is transient and not stored.
Your rights
Under the GDPR you may request access to, correction of, or erasure of your data, and may object to or restrict its processing. To exercise any of these rights, email [email protected]. You also have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali).
Embedded video
The Work page lists recorded talks. Nothing is requested from YouTube when the page loads: the player appears only if you press play, and it is loaded from youtube-nocookie.com. Once you do, YouTube receives your IP address and may set its own cookies, under Google's privacy policy.
External links
This site links to third-party services (for example Google Scholar, GitHub, LinkedIn, ORCID). When you follow such a link, the third party may receive your IP address and set its own cookies according to its own privacy policy.