Questa informativa è disponibile anche in italiano.
1. Data controller
The controller of the personal data collected through www.osservatoriomashrek.com is Nino Orto, Largo Don Minzoni 1, 95047 Paternò (CT), Italy, email [email protected].
This notice is provided under Articles 13 and 14 of Regulation (EU) 2016/679 (“GDPR”). The use of cookies is described in detail in the cookie policy.
2. What data we process, why and on what basis
2.1 Browsing data
The server that hosts the site and the network that delivers it automatically record, for every request, the visitor’s IP address, the date and time, the page requested, the referring page and the type of browser. This data is used to run the site, keep it secure and detect any abuse.
Legal basis: the controller’s legitimate interest in the security and proper functioning of the site (Art. 6(1)(f) GDPR).
2.2 Contact form
If you write through the form on the Contact page, you provide your name, email address and the text of your message. The data is used to reply to your request.
The message is delivered by email to the editorial mailbox and a copy is saved on the site, in a restricted area accessible only to administrators, together with the date, the IP address and the browser type of the sender. The copy is kept for two years.
The box by which you declare that you have read this notice only confirms that you have seen it: it is not a request for consent.
Legal basis: steps taken at the request of the data subject (Art. 6(1)(b) GDPR). Without the data requested by the form it is not possible to send the message or receive a reply.
2.3 Newsletter
If you subscribe to the newsletter, you provide your name and email address. Together with this data the site records the date and IP address of the subscription, as proof of the request. The data is used to email you updates on published content.
The list of subscribers is kept on the site and emails are sent through the mail servers of Aruba Business S.r.l. The sending system records whether an email has been opened and which links have been followed, to understand which content readers are interested in.
You can unsubscribe at any time with the link at the bottom of every email, or by writing to the controller.
Legal basis: consent (Art. 6(1)(a) GDPR), given by subscribing and withdrawable at any time.
2.4 Comments on articles
If you comment on an article, you provide your name, email address, optionally your website address, and the text of the comment. Together with the comment WordPress records the IP address and the browser type, to detect spam.
Once approved, the comment is public: the name, the website if given, and the text are visible to everyone. The email address is not published. Please do not include personal data about yourself or other people in the text.
The site does not use Gravatar: a generic image hosted on the site is shown next to comments, and the email address is not sent to external services.
Legal basis: performance of what the data subject has requested, namely publication of the comment (Art. 6(1)(b) GDPR); for the IP address and browser type, the controller’s legitimate interest in protecting the site from spam (Art. 6(1)(f) GDPR).
2.5 Protection of forms from spam
The contact form and the comment form are protected by Google reCAPTCHA, a service of Google Ireland Limited, which automatically analyses the interaction with the page (IP address, browser and device characteristics, movements and interaction timing) to tell people apart from automated programs. On articles it sets a security cookie, described in the cookie policy. Google processes this data in accordance with its privacy policy.
Legal basis: the controller’s legitimate interest in protecting the site and its mailbox from spam and abuse (Art. 6(1)(f) GDPR).
2.6 Visit statistics
With the visitor’s consent, the site collects visit statistics with Google Analytics 4 (Google Ireland Limited): pages visited, referring page, type of device and browser, approximate location derived from the IP address and length of the visit, associated with a random identifier stored in the _ga cookies. Google Signals is not active and the property is not linked to Google Ads. Google acts as a processor on behalf of the controller. Without consent, Google Analytics is not started and receives no data about the visit.
Legal basis: consent (Art. 6(1)(a) GDPR), withdrawable at any time as described in section 7.
2.7 Videos and embedded content
Some articles contain videos from YouTube (Google Ireland Limited) and Vimeo (Vimeo.com, Inc.) and a Kindle book preview (Amazon Europe Core S.à r.l.). This content is loaded only with consent, or when the visitor presses the button shown in its place. Once loaded, the provider receives the visitor’s browsing data as an independent controller.
Legal basis: consent (Art. 6(1)(a) GDPR).
2.8 What the site does not do
The site does not provide for visitor account registration, carries no advertising and uses no profiling cookies of its own. The controller does not sell personal data and takes no decisions based solely on automated processing that produce legal effects on visitors.
3. Who the data is disclosed to
Data may be processed, on behalf of the controller and as processors (Art. 28 GDPR), by:
- Aruba Business S.r.l., which provides the hosting of the site and the email service used to send form messages and newsletters, and which hosts the editorial mailbox;
- Cloudflare, Inc., which delivers the pages of the site through its network and protects them from attacks;
- Google Ireland Limited, for Google Analytics and Google Tag Manager;
- Seo ergo Web, which carries out the technical maintenance of the site and may access data only as far as necessary for that purpose.
Data is also received, under their own privacy policies and as independent controllers, by: Google Ireland Limited for reCAPTCHA and YouTube, Vimeo.com, Inc. and Amazon Europe Core S.à r.l. for embedded content, within the limits described in section 2.
The names and texts of approved comments are public. Other data is not disseminated. It may be disclosed to the authorities where required by law.
4. Transfers outside the European Union
The site is hosted in Italy. Cloudflare, Google, Vimeo and Amazon may transfer data to the United States: Cloudflare, Inc., Google LLC, Vimeo.com, Inc. and Amazon.com, Inc. participate in the EU-U.S. Data Privacy Framework, recognised as adequate by the European Commission in its decision of 10 July 2023.
5. How long we keep the data
| Data | Retention |
|---|---|
| Browsing data in the server logs | for the period set by the hosting provider for security purposes, unless needed to investigate abuse or offences |
| Messages sent with the contact form | two years in the restricted area of the site; in the editorial mailbox, for as long as needed to handle the request |
| Newsletter subscription | until you unsubscribe |
| Comments | as long as the article remains published, or until the author asks for deletion |
| Google Analytics statistics | 14 months, then automatically deleted by Google |
| Consent choice | in the visitor’s browser, for 365 days (cmplz_ cookies) |
The retention periods for data processed by Google, Vimeo and Amazon as independent controllers are set out in their own privacy policies.
6. Your rights
At any time you may ask the controller for:
- access to your data (Art. 15 GDPR);
- rectification of inaccurate data (Art. 16);
- erasure (Art. 17);
- restriction of processing (Art. 18);
- portability of the data you provided, for processing based on consent or on a contract (Art. 20);
- to object to processing based on legitimate interest (Art. 21).
Requests should be sent to [email protected] and are answered within one month.
If you believe the processing infringes the GDPR you may lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it), or with the supervisory authority of the European country where you live or work.
7. Withdrawing consent
Consent to statistics and embedded content can be withdrawn at any time with the “Manage consent” button at the bottom of every page. Consent to the newsletter is withdrawn with the unsubscribe link at the bottom of every email. Withdrawal does not affect the lawfulness of processing carried out before it. Details are in the cookie policy.
8. Changes
This notice is updated when the processing carried out by the site changes. Last updated: 9 October 2026.
