Privacy policy

This page explains which personal data passes through bybucolo.com, why, and what you can ask for. It is written from how the site actually works, not from a template: if something isn't here, it isn't listed below either.

Who processes the data

The data controller is Ekaterina Evgenievna Semenova, sole trader, Italian VAT number 18653891004, reachable at info@bybucolo.com.

No data protection officer has been appointed, as this business is not required to have one.

1. Browsing data

What. IP address, browser and operating system type, date and time, page requested and outcome of the request.

Why. To deliver the pages to you and to protect the site from abuse and overload.

On what basis. Legitimate interest in providing and securing the service, Article 6(1)(f) GDPR.

Who handles it. Cloudflare, Inc., which hosts the site and serves its pages, acting as a processor.

How long. The technical lifetime of Cloudflare's network logs. The controller keeps no copy of them and does not consult them.

2. What you write to get in touch

The form in the Contact section sends nothing to this site: when you press «Send», it prepares a ready-written message in your own mail application. The message leaves from your address, when you send it. Until you do, what you typed stays on your device.

What data arrives. What you would like to be called, the brand name if you give one, the options you picked, the text describing the project, and the address you write from.

Why. To reply to you and to consider a possible engagement.

On what basis. Steps taken at your request prior to a contract, Article 6(1)(b) GDPR.

Who handles it. IONOS SE, which provides the mailbox, acting as a processor.

How long. As long as needed to reply and consider the request. Enquiries that do not lead to an engagement are deleted within twelve months. Where work does begin, the related documents follow Italian civil and tax retention periods, which reach ten years.

Do you have to provide it? No. But without a way to reach you, no reply is possible.

3. Visit analytics

What data. Which page was opened, which site you came from if any, the country, the type of device and browser, and how long the page took to open on your device. Addresses are recorded without the part after the question mark, because unrelated data can end up there.

With what tool. Cloudflare Web Analytics. As Cloudflare delivers the page it adds a call to a small program, static.cloudflareinsights.com/beacon.min.js, and that is the only thing your browser downloads from an address other than this site. The measurements go back to an address on this same domain, bybucolo.com/cdn-cgi/rum.

What it does not do. It uses neither cookies nor the browser's local storage, it does not recognise you by IP address or browser type, and it does not follow you from one site to another. Cloudflare states that it does not track individual end users across its customers' sites. What the controller sees are aggregate numbers, not individual journeys.

Why. To know whether the site is being read, where people come from, and whether the pages open quickly enough on a phone too. Without a measurement, the alternative is guesswork.

On what basis. Legitimate interest in understanding how the site is used and keeping it fast, Article 6(1)(f) GDPR. You are not asked for consent because nothing is stored on your device, no identifiers are used and the data stays aggregate: these are the conditions under which the Italian Data Protection Authority's guidelines of 10 June 2021 allow a site to do without a banner.

Who handles it. Cloudflare, Inc., acting as a processor.

How long. Seven days in full; after that Cloudflare reduces it to an aggregate sample, which stays viewable up to six months back.

You can say no. Any extension that blocks outside scripts, or blocking the domain static.cloudflareinsights.com, stops the measurement. The site keeps working exactly the same: no warnings, no pages refusing to open.

4. Cookies

This site uses no cookies, neither its own nor third-party ones — not even for the analytics above. The why and the detail are in the cookie policy.

5. Transfers outside the European Union

Cloudflare, Inc. is based in the United States and serves the pages from its global network. The transfer is covered by its EU-U.S. Data Privacy Framework certification and, in addition, by the standard contractual clauses approved by the European Commission and included in its data processing addendum.

6. Your rights

At any time you may ask to access your data, correct it, erase it, restrict its processing, object to the processing, and receive it in a portable form: these are the rights in Articles 15 to 22 GDPR. Write to info@bybucolo.com.

If you believe something has been handled improperly you may turn to the Italian Data Protection Authority or to the courts.

7. Automated decisions and profiling

None. Nothing here decides anything about you automatically, and you are not profiled.

8. Children

This site is not aimed at children under fourteen and does not knowingly collect their data.

9. Updates

If the way the site works changes — for instance if the form starts sending from the server — this page will be rewritten before that change goes live. That is how the analytics in section 3 were handled: this page was published first, and only then was the measurement switched on.

Last updated: 26 July 2026