Privacy Policy
Last updated: 13 October 2026.
Who is responsible for your data?
The data controller for neapolisforge.com is Raffaele Scarnato (Neapolis Forge). For privacy questions or to exercise your rights, contact scarnato.raffaele@gmail.com.
Contact requests
The contact form asks for your name, email address and message, with an optional subject. We use this information to reply to your enquiry and discuss the project or service you request. Required fields are marked on the form; without them, we cannot respond. Please send only information relevant to your request.
When your message concerns a possible order or commission, the legal basis is taking steps at your request before entering into a contract (Article 6(1)(b) GDPR). For other enquiries, the basis is our legitimate interest in responding to correspondence (Article 6(1)(f) GDPR). Sending an enquiry does not sign you up for marketing emails.
The form uses WPForms Lite. Its notifications go to our administrator email address, scarnato.raffaele@gmail.com, which is a Gmail mailbox. Ordinary form entries are not available in the WPForms Lite dashboard; the form also has anti-spam protection. The website currently sends notifications through the hosting server’s default mailer.
Website operation and external content
The hosting and security services process technical data such as IP address, browser details, request times and server logs to deliver the website and protect it against misuse. Our legal basis is the legitimate interest in keeping the website operational and secure (Article 6(1)(f) GDPR). Hosting, email and technical service providers may receive the data needed to provide these services.
Some images on the website are served from Unsplash. Loading an image connects your browser to that provider and can disclose technical connection data, such as your IP address. Links to Instagram and Etsy take you to external websites with their own privacy notices.
International processing
We use Gmail for contact correspondence and externally hosted images from Unsplash. These providers describe any international processing and the safeguards they apply in their own information: Google’s data transfer frameworks and Unsplash’s privacy notice. Contact us for information about the provider arrangements relevant to your request.
How long is information kept?
If an enquiry does not lead to a project or order, we keep its email correspondence for no longer than 12 months after the last exchange, then delete it from our active mailbox. If it leads to a project or order, we keep relevant correspondence while the work is active and for any longer period required by law or reasonably necessary to establish, exercise or defend legal claims. Technical logs and backups follow the hosting provider’s operational retention settings and are retained only as needed for security and recovery.
Cookies and similar storage
The website may use technical cookies or similar storage needed for its operation, security and contact form. In our review on 13 October 2026, the Google Analytics integration was not configured and no advertising tracking scripts were identified on the pages checked. If optional analytics or advertising tools are introduced, this notice and any required consent controls will be updated before they are activated. You can also manage cookies in your browser settings.
Your rights
Depending on the circumstances and legal basis, you may request access to your personal data, correction, erasure, restriction of processing or data portability. You may object to processing based on legitimate interests. Where processing relies on consent, you can withdraw it at any time without affecting earlier lawful processing.
Write to scarnato.raffaele@gmail.com to make a request. You may also lodge a complaint with the Italian data protection authority, the Garante per la protezione dei dati personali, or another competent supervisory authority.