Privacy policy
I am Livia Serracchi, and I work on my own, reading how AI assistants describe the workshops of Florence — leather benches, goldsmiths, restorers, bookbinders, the small ateliers of the Oltrarno. This page is short on purpose, because the practice is small: a single form, a single inbox, a single purpose. What follows is exactly what that form delivers to me, what becomes of it, and what you may ask me about your own data.
Who is responsible for your data
Whatever data this page concerns sits with one person — me. I run geoflorence.com alone, as an independent editor: no team and no department, only the same person who opens every message that arrives. In the language of the General Data Protection Regulation (GDPR), that makes me the data controller. To ask anything, or to act on one of your rights, write to hello@geoflorence.com.
What the form asks for
There is exactly one route to me, and it is the form. It requests three things, and never anything beyond them —
- Your name, so that my answer can address you properly.
- An email address, so that the answer has somewhere to go.
- A message, in your own words, setting out the case — the AI answer that troubles you, the query that produced it, the workshop or listing it concerns, the bilingual page whose Italian and English no longer agree.
Nothing else. No account to create, no password, no payment details typed in here, no quiet profile assembled in the background. A message reaches an inbox and stays a message. To hold back automated abuse, the moment of sending is stored alongside a salted SHA-256 fingerprint of the originating IP address; the plain IP, browser fingerprints, and device traits are never kept.
What is refused on purpose
A few things are worth stating plainly, because the site turns them down by design:
- No tracking cookies, of any kind. Visits are tallied with self-hosted, cookieless analytics that respect privacy, delivered through a first-party proxy on this very domain; nothing crosses between sites, and no single visitor is ever picked out.
- No advertising pixels, no remarketing tags, no marketing-automation beacons.
- No automated profiling, and no automated decision that would carry a legal effect for you.
- Nothing sold, rented, or handed on: there is simply no commercial engine here that would want it.
The legal basis
Once you submit the form, handling your name, email, and message stands on Article 6(1)(b) GDPR — measures taken at your own request ahead of any agreement. The IP fingerprint that shields the form from misuse rests on a different ground, the legitimate interest of Article 6(1)(f). Were payment-status data ever to arise from a paid project, the contractual basis would account for it.
Retention
- Messages from the form, and the email thread they begin: held while the project runs, then for a further 24 months as a record of the exchange, and deleted thereafter. A message that never becomes a project is held 12 months and then removed.
- IP fingerprints: retained for 90 days — long enough to spot a pattern of abuse — and then erased.
- Payment records, if any: where a paid project creates them, they remain only as long as tax and accounting law demands, and are deleted after that.
The rights you keep
Over everything you send me, the GDPR gives you rights of access, rectification, erasure, portability, restriction, and objection. A single email to hello@geoflorence.com sets any of them in motion, and you will hear back within a month. And if you think your data has been handled badly, you are free to take it to the data-protection supervisory authority of the country where you live.
Where it is stored
The servers behind geoflorence.com stand in European Union (Germany). In the uncommon event that a further processor (email provider) were to operate beyond the European Union, the transfer would lean on standard contractual clauses and on whatever additional safeguards that party publishes.
When this policy changes
Should the handling of data shift in any way that matters, this page is updated to say as much, and the "Updated" date above moves with it. A change of genuine weight stays marked on the home page for 30 days, so that anyone returning will see it.