Privacy Policy

1. Who we are

This website is operated by Luca di Filippo, trading as LdF Strategic Design, a strategic design consultancy based in Skåne County, Sweden.

Data Controller: Luca di Filippo
Contact: hi@lucadifilippo.com
Website: lucadifilippo.com

2. What data we collect and why

2.1 Contact form

When you submit the contact form, we collect your name and email address, together with any message content you choose to include. This data is used solely to respond to your enquiry.

Legal basis: Legitimate interest (Article 6(1)(f) GDPR) — responding to a direct enquiry from you.
Retention: Contact enquiries are retained for up to 24 months or until the matter is resolved, whichever is sooner. You may request deletion at any time.

2.2 Analytics — Statcounter

This site uses Statcounter to collect anonymous traffic statistics, including pages visited, approximate geographic region, browser type, and referring URL. Statcounter may set a cookie in your browser for this purpose.

Statcounter is operated by Statcounter (a division of Aodhan Media UC), registered in Ireland. Data may be processed on servers within the EU and the United States. Statcounter participates in the EU–US Data Privacy Framework.

Legal basis: Legitimate interest (Article 6(1)(f) GDPR) — understanding how visitors use this site in order to improve it.
More information: statcounter.com/about/legal

2.3 Google Fonts

This site loads typefaces (Libre Baskerville and Open Sans) from Google Fonts, a service operated by Google LLC. When your browser requests a font file, your IP address is transmitted to Google's servers. Google LLC is based in the United States.

Legal basis: Legitimate interest (Article 6(1)(f) GDPR) — delivering a correctly rendered, accessible website.
More information: Google Fonts privacy FAQ

3. Cookies

This site does not use cookies for advertising, tracking, or profiling. The only cookie that may be set is the Statcounter analytics cookie described in section 2.2. You can disable or delete this cookie through your browser settings at any time without affecting your ability to use the site.

4. Data sharing

We do not sell, rent, or share your personal data with third parties for marketing purposes. Data is shared only with the sub-processors described above (Statcounter, Google) and only to the extent necessary for the purposes stated. We do not use your data for automated decision-making or profiling.

5. International transfers

Some of the services above (Statcounter, Google) may process data outside the European Economic Area. Where this occurs, transfers are subject to appropriate safeguards under Chapter V of the GDPR, including Standard Contractual Clauses and participation in the EU–US Data Privacy Framework.

6. Your rights

Under the GDPR you have the following rights in relation to your personal data:

• Right of access — to request a copy of the personal data we hold about you.
• Right to rectification — to ask us to correct inaccurate or incomplete data.
• Right to erasure — to ask us to delete your personal data, subject to legal obligations.
• Right to restriction — to ask us to limit how we process your data.
• Right to data portability — to receive your data in a structured, machine-readable format.
• Right to object — to object to processing carried out under legitimate interests.
• Right to withdraw consent — where processing is based on consent, to withdraw it at any time without affecting prior processing.

To exercise any of these rights, contact us at hi@lucadifilippo.com. We will respond within 30 days.

7. Right to lodge a complaint

If you believe we have not handled your personal data lawfully, you have the right to lodge a complaint with the Swedish supervisory authority:

Integritetsskyddsmyndigheten (IMY)
Box 8114, 104 20 Stockholm, Sweden
imy.se  ·  imy@imy.se

If you are based in another EU member state, you may also contact the supervisory authority in your country of residence.

8. Data security

We take reasonable technical and organisational measures to protect personal data against unauthorised access, alteration, disclosure, or destruction. Contact form submissions are transmitted over an encrypted connection (TLS). No method of transmission over the internet is entirely secure, and we cannot guarantee absolute security.

9. Changes to this policy

We may update this Privacy Policy from time to time. The date at the top of this page will always reflect the most recent revision. Continued use of this site following any changes constitutes acceptance of the updated policy.

10. Contact

For any questions about this Privacy Policy or how we handle your data, write to: hi@lucadifilippo.com