Privacy notice

This notice explains how personal data is processed when you browse Creaitivo, use the contact form, or request a reading through the AI audit. It is written in line with Regulation (EU) 2016/679 (GDPR) and applicable Italian privacy rules.

[ In short ]

The data controller is Dussin Nicola, operating the Creaitivo project.
The site does not use marketing cookies, advertising profiling or newsletters.
The contact form sends an email to the controller: no account is created and no proprietary contact database is stored.
The AI audit analyzes the public URL submitted by the user and may use external services to generate the technical reading.

Data controller

The data controller is Dussin Nicola, with registered office at Via Lattuada Serviliano 26, 20135 Milan, Italy, Italian Tax Code DSSNCL76P10A471G and VAT number 13922200962, represented by Dussin Nicola, operating the Creaitivo project.

For privacy requests, you can write directly to the email address below. A Data Protection Officer (DPO) has not been appointed because the current processing activities of the site do not require one.

Privacy email: nicola.creaitivo@gmail.com
Registered office: Via Lattuada Serviliano 26, 20135 Milan, Italy
Relevant websites: creaitivo.com, www.creaitivo.com and domains connected to the Creaitivo project

Data processed

The site is designed to collect only the data needed to respond to requests, run the audit, and keep the service secure.

Navigation and technical data: IP address, user agent, requested URLs, request time, technical logs and information needed for operation, security and abuse prevention.
Contact form data: name, email, optional website and free-text message.
AI audit data: submitted URL or domain, selected language, public content retrieved from the indicated website, scan result, technical score and contact request if submitted.
Language preference: the technical cookie creaitivo_lang, used to remember the selected language.
Audit local storage: creaitivo_audit_scans, used in the browser to limit repeated use of the automatic preview.

Purposes and legal bases

Data is processed for specific purposes and with legal bases aligned with the GDPR.

Replying to requests sent through the form or by email and evaluating a possible professional relationship: pre-contractual or contractual measures requested by the data subject, Article 6(1)(b) GDPR.
Providing the AI audit preview, preventing abuse, protecting the site and maintaining technical continuity: legitimate interest of the controller, Article 6(1)(f) GDPR.
Keeping communications when needed for tax, accounting, legal obligations or the protection of rights: legal obligation or legitimate interest, Articles 6(1)(c) and 6(1)(f) GDPR.
Remembering the selected language and keeping navigation consistent between Italian and English: technical functionality and legitimate interest in improving the site experience.

How the contact form works

When you submit the form, the data is sent to the controller by email and arrives in the personal Gmail account nicola.creaitivo@gmail.com. No account is created, no automated newsletter is activated, and the contact is not sold or shared with third parties for marketing.

The message field is free text: avoid entering sensitive data, third-party data, or confidential information that is not needed to receive an initial reply.

How the AI audit works

When you submit a URL to the audit, the server normalizes the address, verifies that it is public, reads the page and sitemap where possible, and calculates a technical AI readability score. The system blocks local, private or unsafe URLs.

If the AI function is active, a summary of the public content retrieved may be sent to Google Gemini API to generate a technical reading. No voluntary dataset sharing or feedback options have been activated toward Google. The audit does not make automated decisions with legal or similarly significant effects on a person: it only produces a diagnostic preview.

Cookies and localStorage

No marketing cookies, advertising profiling tools or third-party analytics are used. For this reason the site does not display a consent banner for marketing cookies. If non-technical or profiling tools are added in the future, consent management will be updated.

creaitivo_lang

Technical cookie

Remembers the selected language and helps the site serve the correct version.

12 months

creaitivo_audit_scans

Technical localStorage

Limits repeated use of the automatic audit preview in the same browser.

In the browser, until updated or deleted

Providers and recipients

Data may be processed by technical providers that help deliver the site, receive email or generate the AI reading. They are involved only to the extent necessary for the requested service.

Vercel

Hosting, edge network and serverless functions for the site.

Technical email delivery provider

Only if configured, delivers contact form messages to the controller's Gmail account without creating newsletters or proprietary contact databases.

Google Gemini API

Possible technical analysis of the public content from the URL submitted to the audit.

Google / Gmail

Receipt and management of emails sent to the controller's personal Gmail account.

Transfers outside the European Economic Area

Some providers may process data outside the European Economic Area. Where this happens, processing must rely on the applicable GDPR safeguards, such as adequacy decisions, Standard Contractual Clauses, data processing addenda or other measures provided by law.

Retention

Data is kept only for as long as necessary for the purposes for which it was collected.

Emails and contact requests: for the time needed to reply and manage the relationship, unless legal obligations or rights protection require longer retention.
Automatic audit: the site does not store a proprietary database of scans; server limits are held in temporary memory and may reset with the infrastructure.
Language cookie: up to 12 months.
Audit localStorage: remains in the user's browser until updated or deleted by the user through browser settings.
Technical logs and data handled by providers: according to the technical and security retention periods applied by the respective services.

Data subject rights

You may exercise the rights set out in Articles 15-22 of the GDPR by writing to nicola.creaitivo@gmail.com. A reply is normally provided within one month, unless an extension applies in complex cases as provided by law.

Access to personal data.
Rectification or update.
Erasure, where the conditions apply.
Restriction of processing.
Portability, where applicable.
Objection to processing based on legitimate interest.
Withdrawal of consent, if any future processing is based on consent.
Complaint to the Italian Data Protection Authority.

Sensitive data and minors

The site is not directed to minors and does not request special categories of personal data. Do not enter health information, political opinions, racial or ethnic origin, religious beliefs, biometric data, judicial data or other unnecessary sensitive information in the form.

Changes to this notice

This notice may be updated if services, providers, analytics tools, contact methods or legal obligations change. The date at the top indicates the latest published version.

For privacy information or requests, write to nicola.creaitivo@gmail.com. If you believe the processing breaches privacy law, you may lodge a complaint with the Italian Data Protection Authority. Italian Data Protection Authority

Back home