Legal

Privacy notice

Last updated: 17 September 2026

This notice explains how personal data is processed on tommasoprocopio.com, in accordance with the Swiss Federal Act on Data Protection (FADP) and, for visitors in the European Union and the European Economic Area, Regulation (EU) 2016/679 (GDPR).

Data controller

Tommaso Procopio, Switzerland. Contact: hello@tommasoprocopio.com.

What data is collected

• Access request: your name, email address, telephone number and, if you give it, the organisation you work for; the date and time you gave consent and the version of the consent text you accepted; the channel through which you reached the page (for example, LinkedIn); and, once a decision is taken, whether access was granted or refused and when.
• Technical data: when you visit the site, the hosting provider processes technical information such as your IP address and browser type to deliver the pages and protect the site from abuse.
• Visit statistics: aggregated, anonymous page-view statistics are collected with Cloudflare Web Analytics, which does not use cookies and does not track individual visitors across websites.

This website does not use advertising, tracking or analytics cookies. It does set one strictly necessary cookie, named tp_access, after you open the confirmation link sent to your address. It holds your email address and an expiry date, signed so that it cannot be altered, and its only purpose is to let the site recognise you as a confirmed subscriber and show you the subscriber-only pages. It lasts twelve months and you can delete it at any time in your browser settings.

Why data is processed

• Deciding on your access request — access to the reserved pages is granted individually by Tommaso Procopio, who reads each request. The details you provide are used only to make that decision and to reach you about it; they are not used to profile you, and no decision is taken by automated means. This is necessary to act on the request you made.
• Opening your access — if the request is granted, a single-use link is emailed to the address you gave, and opening it sets the cookie described above.
• Sending updates, new articles and event invitations — based on your consent (Art. 6(1)(a) GDPR, where applicable). You can withdraw consent at any time, without affecting the lawfulness of processing carried out before withdrawal.
• Operating and securing the website — based on the legitimate interest in providing a secure and reliable service (Art. 6(1)(f) GDPR, where applicable).

How long data is kept

The details of a granted request are kept until you unsubscribe or ask for them to be deleted. The details of a request that is refused, or that receives no reply, are kept for up to twelve months so that a repeated request can be recognised, and are then erased. Technical data is kept by the hosting provider only for the limited period necessary for security and operation.

Who processes the data

The website and sign-up database are hosted by Cloudflare, Inc., acting as data processor; the sign-up database is stored in the European Union. Emails are delivered by Resend (Plus Five Five, Inc.), also acting as data processor, from its European region (Ireland); open and click tracking is switched off. Both providers may process data outside Switzerland and the European Economic Area, in particular in the United States; in that case transfers rely on the safeguards required by the FADP and the GDPR, such as recognised adequacy decisions or standard contractual clauses. Your data is never sold or shared for marketing purposes. If a different newsletter service is adopted in the future, this notice will be updated before any data is transferred to it.

Your rights

You have the right to access, rectify and erase your data, to restrict or object to its processing, to data portability, and to withdraw consent at any time. To exercise these rights, write to hello@tommasoprocopio.com.

You also have the right to lodge a complaint with a supervisory authority: in Switzerland, the Federal Data Protection and Information Commissioner (FDPIC, edoeb.admin.ch); if you live in the European Union or the European Economic Area, also the data protection authority of your country.