Privacy notice

Controller: John J. Flynn, a natural person, author of Tornare da Lei / Back to Her.

Email: info@tornaredalei.it. Site: https://tornaredalei.it

No data protection officer (DPO) is appointed: the activity is not on a large scale and does not fall under Article 37 GDPR.

Browsing: the host may keep technical logs (IP address, date, page, user agent) to run and protect the site. They are not used to profile you.

Language: the language you pick (IT, EN, ES) is stored in the browser (localStorage) so the next visit stays in Italian, English or Spanish.

Letter and excerpt: email and, if you leave it, your name. They open the first chapter and let me write when Victoria is out, or when there is news about the book. No third-party ads.

Dedication: email, name (optional) and the text to copy on the first page. Each month I choose one request and send a copy. It is not a draw. If it is yours, I ask for a shipping address from that same email: the address is not on the form.

Music: starts only if you press Music. It collects nothing.

Measures: on each visit the site reads IP, page, link source, time zone, country and city. It does not keep a copy on the site: it queues a short line and emails it to the controller’s Gmail. As soon as the mail leaves, the line is deleted. No cookies, no profiling, no online stats page. Art. 6.1.f.

Readers’ board: quotes and votes on a stop, with no email. The dedication gallery is text only, if you ask. The reading diary stays in your browser.

Art. 6.1.a — consent: the three forms (letter, excerpt, dedication). Consent is free, specific and informed. You give it by ticking the checkbox on the form, before sending. You withdraw it whenever you want, by writing to info@tornaredalei.it.

Art. 6.1.b — performance of pre-contractual steps or of the relationship: if the dedicated copy is yours, using mail and address to write to you and ship it.

Art. 6.1.f — legitimate interest: site security, spam prevention (honeypot field), seeing whether the site works (visits, with IP, only in mail to the controller), possible legal defence.

Art. 6.1.c — legal obligation, if an authority requires it.

Emails and form texts: until you withdraw, and in any case no longer than 24 months after the last useful contact, then deletion or anonymisation.

Postal address: only to ship that copy; deleted after delivery, unless the law requires otherwise (courier, any fiscal document).

localStorage: stays on your device until you clear this site’s data in the browser settings.

Host logs: according to the hosting provider’s policy, usually a few weeks.

John J. Flynn, as controller.

FormSubmit (formsubmit.co) — form provider: it receives what you send and forwards it to info@tornaredalei.it. It acts as processor for that step.

Vercel Inc. — hosting and delivery of the site.

Amazon Europe Core / Amazon.com: only if you click Buy. There Amazon is an independent controller, under its own notice.

The courier, only if a dedicated copy is shipped.

I do not sell lists. I do not hand data to ad profilers. There is no advertising partner on this site.

FormSubmit and Vercel have seats or servers also in the United States. Sending a form may therefore involve a transfer outside the EU.

Bases: Article 49.1.b GDPR (the transfer is necessary to handle your request) and, where they apply, the EU-US Data Privacy Framework or the European Commission’s standard contractual clauses.

If you do not want that step, do not use the forms: write directly to info@tornaredalei.it.

You may ask for: access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), portability (Art. 20), objection (Art. 21), withdrawal of consent (Art. 7.3). Withdrawal does not affect what was already done lawfully.

To exercise them: email info@tornaredalei.it. Reply within 30 days, extendable by 60 in the cases the law allows.

If you think the processing harms you, you may lodge a complaint with the Garante per la protezione dei dati personali, Piazza Venezia 11, 00187 Rome, Italy. www.garanteprivacy.it — protocollo@gpdp.it — PEC protocollo@pec.gpdp.it. You may also contact the authority of your EU country of residence.

This site does not use profiling cookies, third-party analytics or advertising. There is no cookie banner because that kind of consent is not required (Italian DPA guidelines, 10 June 2021).

I only use technical browser storage (localStorage): chosen language, result of a send, unlocking the excerpt, a vote, the diary, the purchase bar. It serves the feature you asked for. You can clear it in the browser settings.

First-party measures are daily aggregates (page, event, language, link source, time zone, country and city). The IP is used only to derive place and is not saved. They do not profile.

If you go to Amazon, Amazon may set its own cookies. Their notice applies.

The site is meant for adults. I do not knowingly collect data from anyone under 16. If you are a parent and think a minor sent data, write to me: I will delete it.

This notice may change if the site or the law changes. The date at the top is the current one. Using the forms after an update counts as having seen the published version.