Privacy
Privacy Notice
This notice explains how personal data is handled on prothopilot.serioli.org, the public ProthoPilot website. It does not cover the ProthoPilot desktop application, which is separate software and is not distributed from this site.
Who is responsible
The data controller is Luca Serioli, operator of ProthoPilot. For any privacy question or request, write to prothopilot@serioli.org.
No Data Protection Officer has been appointed.
What this website collects
This is a static website. It uses no analytics, no advertising trackers and no application cookies, and loads no third-party scripts, fonts or embeds — fonts and images are served from this site’s own domain. Visiting a page here does not build a profile of you and does not share anything with an analytics or advertising provider.
The only place this website asks you for personal data is the contact form.
The contact form
When you submit the contact form, it sends:
- Name — required, so we know who we are replying to.
- Company / lab — optional.
- Work email — required, and the address the reply is sent to.
- Topic — one of Product, Integration, Partnership or Other.
- Message — required; whatever you choose to write.
- Acknowledgement — a record that you confirmed having read this notice.
This is used for one purpose: to read and answer your enquiry. It is not used for marketing lists and it is not sold. Please do not send patient data, clinical records or other sensitive information through this form.
Legal basis
Where your message concerns using, evaluating or integrating ProthoPilot, the processing is necessary in order to respond to your request and to take steps at your request before any agreement is entered into — Article 6(1)(b) GDPR.
For general correspondence that is not pre-contractual, the basis is the legitimate interest in receiving and responding to genuine communications addressed to us — Article 6(1)(f) GDPR. You can object to processing based on legitimate interest at any time.
The tick box on the contact form is an acknowledgement that you have read this notice. It is not a consent, and it is not the legal basis for the processing.
Who processes the data
- Formspree — receives and forwards contact form submissions. Formspree hosts its service on Amazon Web Services in the United States, and states that it acts as a processor relying on Standard Contractual Clauses for GDPR transfers. Your submission therefore involves a transfer of personal data to the United States.
- Infomaniak — the email service that hosts the mailbox your message is delivered to and replied from.
- Cloudflare Pages — hosts this website. Delivering a web page requires the host to process technical traffic data such as IP addresses, which is necessary to serve the site and keep it secure and available.
How long it is kept
- Formspree submission history: 30 days on the current Formspree Free plan.
- Contact correspondence: normally up to 12 months from the last relevant interaction. It is kept longer only where a longer period is necessary — for example if the enquiry develops into a contractual or commercial relationship, or where a legal obligation applies.
Your rights
Under the GDPR you have the right to access your personal data, to have it corrected or erased, to restrict or object to its processing, and to receive it in a portable form. Where processing rests on legitimate interest, you may object at any time.
Write to prothopilot@serioli.org. Requests are normally answered within one month, which may be extended in line with the GDPR’s extension rules where a request is complex or where several requests have been made.
If you believe your data has been handled unlawfully, you can lodge a complaint with the Italian supervisory authority, the Garante per la protezione dei dati personali.
Changes
ProthoPilot is in active development, and this notice will be updated as the product and its infrastructure change. The date above records the last update.