Privacy &
Cookie Policy

Last updated: June 2026

1. Data Controller

Demy Publishing — Demetrio Triglia
Via Pietro Custodi 3, 20136 Milano (MI), Italy
VAT IT12538520961
Email: [email protected]

2. Types of Data collected

Among the Personal Data collected by this Application, either directly or via third parties, are:

• Tracking tools and cookies
• Usage data (IP addresses, pages visited, sessions)
• Email address (for the newsletter and contact forms)
• Name and message (contact forms)

Personal Data may be freely provided by the User or, in the case of Usage Data, collected automatically during use of this website. Unless otherwise specified, all Data requested by this Application is mandatory in order to provide the requested service.

3. Processing method and place

Method

The Data Controller adopts appropriate security measures to prevent unauthorised access, disclosure, modification or destruction of Personal Data. Processing is carried out using IT and telematic tools, with organisational procedures closely related to the purposes stated.

Place

The site is hosted on the Data Controller's servers managed via Plesk. Data may also be processed at the premises of the service providers listed in this policy (Italy and/or the European Union, unless otherwise indicated for specific providers).

Retention period

Data is processed and retained for as long as required by the purpose for which it was collected, and in any case no longer than the limits provided by law or until consent is withdrawn.

4. Purposes of processing

• Traffic management and optimisation (Cloudflare CDN)
• Statistical analysis of website use (Google Analytics 4 via Google Tag Manager)
• Display of content from external platforms (Google Fonts)
• Centralised management of tags and scripts (Google Tag Manager)
• Newsletter distribution (MailerLite)
• Handling contact forms and responding to enquiries
• Spam and abuse prevention on forms (Google reCAPTCHA v3)

5. Detailed information on the processing of Personal Data

5.1 Google Tag Manager

Tag management service provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland). It enables the Data Controller to manage all scripts on the site in a unified way. The Data Controller uses Google Tag Manager with Consent Mode v2: measurement and marketing tags are only activated after the User has given their consent via the cookie banner.

Data processed: usage data, tracking tools.
Legal basis: consent (Art. 6(1)(a) GDPR).
Google Privacy Policy

5.2 Google Analytics 4

Statistics service provided by Google Ireland Limited. Google Analytics collects data on website usage (pages visited, session duration, geographic origin) to produce aggregated reports. IP addresses are anonymised before being logged. Data is only collected after the User has given consent (Consent Mode v2).

Data processed: usage data, user counts, session statistics, tracking tools.
Legal basis: consent (Art. 6(1)(a) GDPR).
Google Privacy Policy — Opt-out

5.3 Cloudflare

Traffic optimisation and distribution service provided by Cloudflare, Inc. (101 Townsend St., San Francisco CA 94107, USA). Cloudflare filters network traffic and may collect statistical data (IP addresses, technical data) to ensure the security and performance of the site.

Data processed: tracking tools, various technical data types.
Legal basis: legitimate interest (Art. 6(1)(f) GDPR) in ensuring site security and performance.
Cloudflare Privacy Policy

5.4 Google Fonts

Font display service managed by Google Ireland Limited. When a browser loads the fonts, it may transmit the User's IP address to Google.

Data processed: usage data, tracking tools.
Legal basis: legitimate interest (Art. 6(1)(f) GDPR) in the correct display of the site.
Google Privacy Policy

5.5 Newsletter — MailerLite

The newsletter is managed via MailerLite (UAB "MailerLite", Paupio g. 28, Vilnius LT-11341, Lithuania), acting as a Data Processor under Art. 28 GDPR. Email addresses are collected using a double opt-in procedure: the subscription is confirmed only after the User clicks the verification link received by email.

Data processed: email address, technical sending and open data.
Purpose: sending updates, previews and publishing news.
Legal basis: consent (Art. 6(1)(a) GDPR).
The User may unsubscribe at any time by clicking the unsubscribe link in any email or by writing to [email protected].
MailerLite Privacy Policy

5.6 Contact forms

Via the contact forms on the site (general enquiries, editorial proposals, press) the User may submit their name, email address and message. Data is delivered by email to [email protected], [email protected] or [email protected] depending on the type of enquiry, and is retained only for as long as necessary to handle the request.

Data processed: name, email, message.
Purpose: responding to Users' enquiries.
Legal basis: consent of the data subject (Art. 6(1)(a) GDPR) and legitimate interest of the Data Controller in responding to received enquiries (Art. 6(1)(f) GDPR).

5.7 Google reCAPTCHA v3

The newsletter and contact forms on this site use Google reCAPTCHA v3, an anti-spam service provided by Google Ireland Limited. reCAPTCHA collects hardware and software information (such as device and application data) and sends it to Google for analysis, in order to distinguish human interactions from automated ones and prevent abuse. The service operates in the background — no visual challenge is presented to the User.

Data processed: usage data, hardware and software information from the device.
Purpose: technical security and spam prevention on site forms.
Legal basis: legitimate interest (Art. 6(1)(f) GDPR) in ensuring site security and preventing abuse.
Google Privacy Policy — Google Terms of Service

6. Cookie Policy

This website uses cookies and other tracking tools. Below is a description of the categories in use.

Non-essential cookies are activated only after the User has given their consent via the banner displayed on first visit. Consent can be withdrawn or modified at any time by clicking the "Manage cookies" link in the site footer.

7. Legal basis for processing (EU users)

The Data Controller processes the User's Personal Data where one of the following conditions applies:

• The User has given consent for one or more specific purposes (Art. 6(1)(a) GDPR).
• Processing is necessary for compliance with a legal obligation (Art. 6(1)(c) GDPR).
• Processing is necessary for the purposes of the legitimate interests pursued by the Data Controller (Art. 6(1)(f) GDPR), to the extent that the data subject's fundamental rights do not override those interests.

8. User rights (GDPR)

Within the limits provided by law, the User has the right to:

• Access their Personal Data and obtain a copy.
• Rectify inaccurate or incomplete Data.
• Obtain erasure ("right to be forgotten") of their Data.
• Restrict processing in certain cases provided by law.
• Object to processing based on legitimate interest or for direct marketing purposes.
• Request data portability in a structured, commonly used, machine-readable format.
• Withdraw consent at any time, without prejudice to the lawfulness of processing prior to withdrawal.
• Lodge a complaint with the Italian Data Protection Authority (garanteprivacy.it) or the supervisory authority of your country of residence.

To exercise any of these rights, the User may send a free-of-charge request to [email protected]. The Data Controller will respond within 30 days.

9. International data transfers

Some providers (Cloudflare, Google, MailerLite) may process Data outside the European Economic Area. Such transfers take place under appropriate safeguards in accordance with the GDPR (e.g. Standard Contractual Clauses adopted by the European Commission). For further information on individual transfers, please refer to the privacy policies of the respective providers.

10. Further information on processing

Legal defence

The User's Personal Data may be used by the Data Controller in legal proceedings or in preparatory stages for defence against misuse of this Application. The User acknowledges that the Data Controller may be required to disclose Data upon order of public authorities.

System logs and maintenance

For operational and maintenance purposes, the systems may collect logs recording interactions that may contain Personal Data (e.g. IP address).

Changes to this policy

The Data Controller reserves the right to modify this policy at any time, notifying Users on this page. Users are encouraged to check this page periodically, referring to the date of last update shown at the top.

Definitions

Personal Data

Any information that, directly or indirectly, makes an individual identified or identifiable.

Usage Data

Information collected automatically (IP addresses, pages visited, access times, browser type, etc.).

Tracking tool

Any technology (e.g. cookies, pixels, scripts) that enables Users to be tracked.

Data Controller

The natural or legal person who determines the purposes and means of processing Personal Data.

Data Processor

The party that processes Personal Data on behalf of the Data Controller (e.g. MailerLite).