Privacy Policy of lightweb.it

This policy applies to the lightweb.it domain and all services hosted therein.

1. Data Controller

Paolo Tanzi — Partita IVA IT 02611230349 Contact: privacy@lightweb.it

2. Scope of Application

This policy applies to the lightweb.it domain and the following currently available areas and services: General site pages and product presentation pages; Visitor GeoInfo — internal visit logging system; SmartCV — AI query interface for the owner's curriculum vitae; ExploreCv — navigable curriculum with controlled access. Services hosted on separate domains (noema.tools, lares.talk) are governed by their respective privacy policies available on those domains. Areas for exclusively internal use (license management, statistics, operational tools) are not accessible to the public and are not subject to this policy.

3. Collected Data and Purposes

3.1 Visitor GeoInfo

For all pages on the lightweb.it domain, the system automatically records the following data for each visit: IP address; Country and approximate geographic area (IP-based geolocation); Date and time of the visit; Visited page; Browser User Agent. This data is collected and stored exclusively for access monitoring, aggregate traffic analysis, and abuse prevention. It is not used for individual profiling or marketing purposes. Legal basis: Art. 6(1)(f) GDPR — legitimate interest of the controller in site management and security. Retention: Visit logs are kept for a maximum of 90 days, then automatically deleted.

3.2 SmartCV

SmartCV is an interface that allows visitors to ask natural language questions about the owner's professional curriculum. Responses are generated by an AI model (Anthropic Claude) based on the CV content. The data collected in this area includes: Visitor's IP address; Text of the questions submitted; Date and time of the interaction. This data is stored exclusively for access monitoring, detection of anomalous or abusive use, and investigation in case of incidents. It is not used for any other purpose. The CV content present in SmartCV is public by definition and does not constitute sensitive personal data under the GDPR. Legal basis: Art. 6(1)(f) GDPR — legitimate interest of the controller in the secure management of the service. Retention: Interaction logs are kept for a maximum of 90 days, then deleted. Questions entered by the visitor are transmitted to Anthropic (USA) to generate the response. This transmission is carried out at the visitor's initiative, pursuant to Art. 49(1)(b) GDPR. Data processing by Anthropic is governed by their policy: anthropic.com/privacy.

3.3 ExploreCv

ExploreCv is the owner's professional curriculum in a navigable format. Access is controlled: visitors can log in by entering an access code provided directly by the owner, or by providing their email address to receive a code via email. Data collected in this area includes: Email address (if provided to receive the access code); Date and time of the access request; IP address. The email address is collected solely to send the access code and to keep track of who has accessed the CV. It is not used for subsequent communications, newsletters, or marketing. Legal basis: Art. 6(1)(f) GDPR — legitimate interest of the controller in controlling access to their curriculum. Retention: Email addresses and access logs are kept for a maximum of 12 months, then deleted.

3.4 General Pages and Product Presentation Pages

General site pages and pages describing the owner's products or services do not require registration nor do they collect specific personal data, with the exception of navigation data recorded by the Visitor GeoInfo system described in section 3.1.

4. Google Analytics and Google Ads

The site may use Google Analytics (EU-compliant configuration with IP anonymization) and Google Ads for traffic analysis and advertising activities. If active, these tools collect aggregate browsing data. In case of active use, consent will be requested via a cookie banner before these tools are activated. Google's policy is available at: policies.google.com/privacy. Currently, these tools are not active. This section will be updated upon activation.

5. Cookies

The site exclusively uses technical cookies necessary for session operation and access control (ExploreCv). No third-party profiling or tracking cookies are used, except as indicated in section 4 regarding Google Analytics and Google Ads. Technical cookies do not require consent under the Italian Privacy Guarantor's Provision and the ePrivacy Directive.

6. International Data Transfers

Data transmitted to Anthropic for the operation of SmartCV is transferred to the United States. The transfer occurs at the user's initiative pursuant to Art. 49(1)(b) GDPR. No other international transfer of personal data is carried out by the controller within the scope of the services described in this policy.

7. Data Security

All communications between the visitor's browser and lightweb.it servers occur via HTTPS/TLS protocol. Data is stored on infrastructure directly managed by the controller.

8. Rights of the Data Subject (GDPR)

As a data subject under the GDPR, you have the right to: Access your personal data held by us; Request rectification of inaccurate data; Request erasure of your data; Request restriction of processing; Object to processing based on legitimate interest. To exercise these rights, write to: privacy@lightweb.it. We will respond within 30 days. You also have the right to lodge a complaint with the Data Protection Authority (Garante per la Protezione dei Dati Personali - gpdp.it).

9. Changes to This Policy

This policy may be updated in the event of changes to the services offered or applicable regulations. The updated version is always available at lightweb.it/privacy. Continued use of the site after the publication of changes constitutes acceptance of the same.

10. Future Services

New areas or services added to the lightweb.it domain will be governed by an update to this policy, published before the service is activated.

11. Contact

For any questions regarding this policy: Paolo Tanzi — privacy@lightweb.it Partita IVA IT 02611230349 lightweb.it Privacy Policy v1.0