Last updated: September 13, 2026
This notice describes how personal data is processed for users who browse madeinways.com ("Site") and use the services available on it, in particular the "Contact" and "For businesses" forms, pursuant to Regulation (EU) 2016/679 ("GDPR") and applicable Italian data protection law.
The Data Controller is Cristiano De Vergori, who runs the MadeinWays project in a personal capacity.
As of today, MadeinWays has not been incorporated as a company and therefore has no legal name, registered address, or VAT number of its own.
For any request related to this notice, or to exercise the rights granted by applicable law, you can contact the Controller at info@madeinways.com.
Should the project be incorporated as a company or sole proprietorship in the future, this section will be updated accordingly.
When you fill in the form on the "Contact" page, we collect the data you voluntarily enter, such as first name, last name, email address, and the content of your message.
This data is used exclusively to receive, handle, and reply to your request, and for any subsequent communication directly related to it.
When you fill in the form on the "For businesses" page, we collect the data you voluntarily enter, such as first name, last name, email address, the name of the reported company, museum, or archive, and, where provided, city, region, website, and the content of your message.
This data is used exclusively to evaluate the submission or proposal received, contact you back, and handle any communication related to including the reported site on MadeinWays.
During normal browsing, the computer systems and infrastructure used to operate the Site may acquire some technical data, such as IP address, browser type, device used, pages requested, date and time of access, and other information automatically transmitted through Internet protocols.
This data is processed to the extent necessary to allow the Site to function, ensure its security, prevent abuse or malfunctions, and carry out technical management and maintenance activities.
The Controller does not use this information to directly identify users or for profiling purposes.
To understand, in aggregate terms, how the Site is used, we use Plausible Analytics and Netlify Analytics.
These tools provide statistics on the Site's traffic and usage without installing analytics cookies or persistent identifiers on the user's device and without carrying out advertising profiling.
The Site currently does not use profiling cookies, advertising cookies, or other tracking tools that require the user's prior consent.
Plausible Analytics and Netlify Analytics are used without installing analytics cookies on the user's device and without creating individual profiles for advertising purposes.
For this reason, in the Site's current configuration, no cookie-consent banner is displayed.
Should technologies requiring the user's consent under applicable law be introduced in the future, the Site will be adapted before they are activated and this notice will be updated.
Some pages of the Site may include maps based on OpenStreetMap's services and data.
When a map is displayed, the user's browser may connect directly to the infrastructure used by OpenStreetMap Foundation and its technical providers to load the map resources. This may involve the transmission of technical data, including the IP address.
OpenStreetMap Foundation processes the data it receives in connection with its own services as an independent data controller, in accordance with the terms described in its own privacy notice.
MadeinWays does not use the maps to track users, create individual profiles, or carry out advertising activities.
Processing of the data submitted through the "Contact" and "For businesses" forms is based on:
Processing of technical browsing data is based on the Controller's legitimate interest in ensuring the Site's operation, security, and integrity, pursuant to Art. 6(1)(f) GDPR.
The use of Plausible Analytics and Netlify Analytics is based on the Controller's legitimate interest in understanding, in aggregate terms and not intended for user profiling, how the Site is used, and in improving its content and features.
The integration of OpenStreetMap maps is likewise based on the Controller's legitimate interest in providing users with geographic information useful for browsing the experiences featured on the Site.
Providing the data marked as mandatory in the "Contact" and "For businesses" forms is necessary in order to receive and handle the relevant request.
Without this information, it may not be possible to submit the form or provide an adequate reply.
Providing any data marked as optional is instead left to the user's free choice, and not providing it does not, as a rule, prevent the form from being submitted.
Personal data collected through the Site may be processed, to the extent necessary for their respective functions, by:
Depending on the case, these parties act either as processors on behalf of the Controller or as independent data controllers.
Personal data is not sold to third parties and is not used by MadeinWays for advertising profiling purposes.
Some providers used by the Site may process personal data outside the European Economic Area ("EEA").
Netlify, Inc. is based in the United States. Transfers of personal data to Netlify are carried out on the basis of the mechanisms provided for by applicable law, including, where applicable, the EU-U.S. Data Privacy Framework and the further safeguards set out in the provider's contractual agreements.
Plausible Analytics processes the data related to the service used by MadeinWays on infrastructure located within the European Economic Area.
Loading OpenStreetMap maps may involve infrastructure and technical providers located outside the EEA as well. Any transfers carried out as part of OpenStreetMap Foundation's services are governed by the terms and safeguards it adopts as an independent data controller.
Further information on the transfer mechanisms used by individual providers is available in their respective privacy notices.
Data collected through the "Contact" and "For businesses" forms is, as a rule, kept for a maximum period of 24 months from the last exchange with the data subject, unless a longer retention period is necessary to comply with legal obligations or to establish, exercise, or defend a legal claim.
After this period, the data is deleted or, where possible, anonymized.
Technical browsing data and security logs are kept for the period strictly necessary for the technical and security purposes for which they are collected. The actual duration may also depend on the retention periods applied by the providers of the technical infrastructure used by the Site.
Statistical data is kept according to the configurations and retention periods set by the analytics services used, to the extent necessary to analyze the Site's usage.
The Controller adopts technical and organizational measures appropriate to the level of risk of the processing, to protect personal data from unauthorized access, loss, alteration, disclosure, or destruction.
Among other measures, the Site uses encrypted HTTPS/TLS connections and technical services provided by professional operators.
In the cases and under the conditions set out in Articles 15-22 GDPR, you may exercise the rights granted by data protection law, including the right to:
To exercise these rights you can write to info@madeinways.com.
You also have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali) if you believe that the processing of your personal data infringes applicable law.
This notice may be updated over time, in particular following changes to the Site's features, the services used, or applicable law.
The updated version will be published on this page, with an indication of the date of the last update.