Privacy and Cookie Policy of identistories.com

This page explains how identistories.com processes the personal data of the people who visit the site or get in touch. It is provided under Articles 13 and 14 of Regulation (EU) 2016/679 (GDPR).

Latest update: 30 September 2026.

Data Controller

Alessandra Cosso
via Tortona 10, 20144 Milano, Italy
VAT number 04851760969
Email: helloidentistories.com

What data we process and why

Browsing data

The site is hosted by Vercel Inc. Whenever a page is requested, the hosting servers automatically process some technical data: the IP address, the date and time of the request, the address of the requested page, the page that referred you, the type of browser and operating system, and the outcome of the request.

Purpose: to deliver the website, keep it secure and diagnose faults. Legal basis: legitimate interest in running a secure website (Art. 6(1)(f) GDPR). Retention: the hosting provider keeps these logs only for as long as needed for these purposes, according to its own retention schedule.

Audience statistics

The site uses Vercel Web Analytics to count visits and see which pages are read. It works without cookies and without storing anything on your device. It records, in aggregate form, the page visited, the site that referred you, the country, and the type of browser, operating system and device. Visits are told apart by a value generated on the spot that changes every day and is not linked to your identity, so you cannot be followed from one day to the next or from one website to another. We do not use these data to profile anyone. More information: how Vercel Web Analytics handles data.

Purpose: to understand how the site is used and improve it. Legal basis: legitimate interest (Art. 6(1)(f) GDPR). Because nothing is stored on your device and only aggregate statistics are produced, the site does not show a cookie banner.

When you contact us

If you write to helloidentistories.com or call, we process the data you give us: name, email address, phone number and the content of your message. The site has no contact form, newsletter or mailing list.

Purpose: to reply and, if you ask for information or a quote, to take the steps you request before a contract. Legal basis: pre-contractual measures taken at your request and legitimate interest in replying (Art. 6(1)(b) and (f) GDPR). Providing these data is voluntary, but without them we cannot reply. Retention: for the time needed to reply and, if a professional relationship begins, for its duration and for the periods required by law for accounting and tax records.

Videos

The Publications and Research page includes YouTube videos. Nothing is requested from YouTube when the page loads: each video is shown as an image stored on this site. Only when you press play is the player loaded from youtube-nocookie.com, the privacy-enhanced mode of YouTube, operated by Google. From that moment Google receives data such as your IP address and information about your device, and may use cookies or similar technologies, as described in Google's privacy policy. If you would rather not, do not press play.

Share buttons and external links

Journal articles have links to share them on Facebook, X (Twitter) and LinkedIn, and some pages link to other websites. These are plain links: nothing is sent to those services unless you click on them, and then the address of the page is passed to the service, which processes it under its own privacy policy.

Cookies and similar technologies

identistories.com does not set cookies and, unless you ask for it, does not store anything on your device, either of its own or from third parties. The site uses no profiling or advertising tools. There are two exceptions:

• the “Accessible version” switch in the menu. If you turn it on, your browser keeps a single value (“accessible”) in its local storage, only so that your choice is remembered on later visits. It is not sent to us or to anyone else, it does not identify you, and it disappears when you turn the option off or clear the site data. It is needed to provide a feature you asked for, so it does not require consent;
• the one described under “Videos”, which happens only if you press play.

Who receives the data

• Vercel Inc., which hosts the website and provides Web Analytics, as data processor;
• the provider of the email and domain services used by the Data Controller, as data processor;
• Google, only if you play a video, as an independent controller;
• professional advisers (for instance accountants or lawyers), where required.

Your data are not sold and are not disclosed in any other way, unless required by law.

Transfers outside the European Union

Vercel Inc. and Google are based in the United States. Transfers rely on the safeguards provided by Chapter V of the GDPR, such as adequacy decisions of the European Commission (including the EU-US Data Privacy Framework, for providers that are certified) or standard contractual clauses, as described in the providers' documentation. You can ask the Data Controller for more information.

Your rights

You have the right to:

• access your data and obtain a copy (Art. 15);
• have them corrected (Art. 16) or erased (Art. 17);
• restrict the processing (Art. 18);
• receive them in a structured, commonly used format, where applicable (Art. 20);
• object to the processing based on legitimate interest (Art. 21);
• withdraw your consent at any time, where the processing is based on consent;
• lodge a complaint with the Italian data protection authority, the Garante per la protezione dei dati personali.

To exercise these rights, write to helloidentistories.com. Requests are free of charge and are answered within one month.

Changes to this policy

This policy may be updated, for instance when the site changes or the law does. The date of the latest update is at the top of this page.