Privacy policy
Last updated: 17 August 2026
Data controller
Carmine La Luna (17Labs), reachable at contact@17labs.it.
What data I collect
From this site I only collect what you send me voluntarily through the contact form:
- name
- email address
- phone number (optional)
- the content of your message
Why I use it
Solely to reply to your enquiry and, if it goes further, to handle the quote and the project. Legal basis: your consent and pre-contractual steps taken at your request (art. 6 GDPR). I work outside Italy as well, so the data may relate to people in other countries — the GDPR applies regardless.
I send no newsletters, do no profiling, and never pass data to third parties for marketing.
Cookies and local storage
This site uses no profiling cookies. It stores exactly two preferences in your browser via localStorage: the theme you picked and the trophies you unlocked. These are technical values that stay on your device, are never transmitted anywhere, and can be removed by clearing this site's data in your browser.
No third-party services load alongside the page: the typefaces and the 3D graphics library are hosted on this same site rather than pulled from Google or any content delivery network. Opening these pages, your browser contacts no other domain.
Who processes data on my behalf
Web3Forms, run by Web3Creative and based in India — receives whatever you send through the contact form (name, email address, phone if you fill it in, message text) and delivers it to me by email. It acts as a data processor under an art. 28 GDPR data processing agreement.
Web3Creative in turn relies on further providers, which therefore also process the form data: Amazon Web Services for infrastructure, storage and email delivery; Cloudflare for protection of the submission endpoints; Hetzner (Germany and Finland) for part of the servers; and two anti-spam services, CleanTalk and Akismet by Automattic, which receive your IP address and email address in order to assess whether a submission is legitimate.
Several of these operate outside the European Union. The transfer is covered by the Standard Contractual Clauses approved by the European Commission in Implementing Decision (EU) 2021/914, incorporated into the agreement with Web3Creative: I act as data exporter, Web3Creative as data importer.
GitHub Pages — hosts and serves the pages you are reading. It never receives form data, but like any web server it records the visitor's IP address and browser type in its technical logs. The service is provided by GitHub, Inc. (a Microsoft company), based in the United States.
Register.it — runs the mailbox the messages arrive in, and therefore stores their content. It is an Italian provider and processes the data within the European Union.
How long I keep it
Enquiries that do not turn into projects are deleted after 24 months. If a contact does become a project, the correspondence is kept for as long as the work requires and for the periods accounting and legal obligations impose.
A copy of each submission also stays on Web3Forms' systems, which retain it for up to three years on their side.
Your rights
At any time you can ask to access your data, correct it, delete it, restrict its processing, receive it in a portable format, or object to the processing. Write to contact@17labs.it: I reply within 30 days.
If you believe the processing breaches the Regulation, you can lodge a complaint with the Italian Data Protection Authority or the supervisory authority in your country.
Changes
If anything changes, I update this page and the date at the top.