1. Data Controller

The data controller for this website is:

Giovanni Maria Occhipinti
Email: giovanni.maria.occhipinti@gmail.com
Organization: I²SAI — Italian Initiative for Safe AI

2. Data We Collect

We collect the following personal data through forms on this website:

  • Contact Form: Name, email address, subject, message content
  • Event Registration: Name, email address, university/affiliation, event name

We do not use cookies for tracking purposes. We use browser localStorage to remember your language preference (Italian or English), which does not constitute a cookie under EU regulation.

3. Purpose and Legal Basis

Your personal data is processed for the following purposes:

  • Contact requests: To respond to your inquiries and facilitate communication (Legal basis: consent, Art. 6(1)(a) GDPR)
  • Event registration: To manage your registration for our seminars and events (Legal basis: consent, Art. 6(1)(a) GDPR)

4. Data Processors

We use the following third-party services to process your data:

  • Airtable Inc. (222 Broadway, New York, NY 10038, USA) — Form data storage and management. Airtable complies with GDPR and the EU-US Data Privacy Framework. Airtable Privacy Policy
  • Substack Inc. (USA) — Newsletter subscription management (if you subscribe to our newsletter via Substack). Substack Privacy Policy
  • Netlify Inc. (USA) — Website hosting. Netlify Privacy Policy

5. Data Retention

We retain your personal data for as long as necessary to fulfill the purposes described above. Specifically:

  • Contact form data: Retained for up to 2 years after your last interaction, then deleted
  • Event registration data: Retained for 1 year after the event, then deleted

6. Your Rights

Under the GDPR, you have the following rights regarding your personal data:

  • Right of access (Art. 15) — You may request a copy of the data we hold about you
  • Right to rectification (Art. 16) — You may request correction of inaccurate data
  • Right to erasure (Art. 17) — You may request deletion of your data ("right to be forgotten")
  • Right to restriction (Art. 18) — You may request limitation of processing
  • Right to data portability (Art. 20) — You may request your data in a machine-readable format
  • Right to withdraw consent (Art. 7) — You may withdraw your consent at any time

To exercise any of these rights, please contact us at giovanni.maria.occhipinti@gmail.com.

7. Complaints

If you believe your data protection rights have been violated, you have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali):

Garante per la protezione dei dati personali
Piazza Venezia, 11 - 00187 Roma
Website: www.garanteprivacy.it
Email: protocollo@gpdp.it

8. Changes to This Policy

We may update this privacy policy from time to time. Any changes will be published on this page with an updated revision date.