This Privacy Policy describes how personal data is collected and processed through the website hidaba.com (“Site”), in accordance with the European Union General Data Protection Regulation (GDPR, Regulation EU 2016/679) and applicable privacy laws.
> 1. DATA CONTROLLER
The Site hidaba.com is an independent, non-commercial technical blog. The Data Controller is the author and administrator of the blog, operating under the pseudonym HiDaBa.
For any questions, requests, or to exercise your GDPR rights, you may reach out directly via email:
Contact Email: nag@hidaba.com
> 2. TYPES OF DATA COLLECTED & PURPOSES
A. Navigation Data & Security Server Logs
In the normal course of operation, web servers automatically log certain connection data (e.g., IP addresses, browser type, operating system, timestamp of requests, requested URIs, and HTTP response codes).
Purpose: These logs are strictly processed to ensure technical availability, server stability, and network security (preventing DDoS attacks, unauthorized access, and malicious activities).
Legal Basis: Legitimate interest of the Data Controller in securing and maintaining web infrastructure (Art. 6(1)(f) GDPR).
Retention: Logs are retained only for the technical duration required by server infrastructure security policies.
B. Aggregated Analytics (Google Analytics / Site Kit)
The Site uses measurement tools (Google Tag Manager / Google Analytics) to understand readership patterns. The Site implements Google Consent Mode v2, ensuring that by default no analytics or profiling cookies are stored or transmitted prior to explicit user consent.
Purpose: Aggregated, privacy-respecting website usage statistics.
Legal Basis: Explicit, freely given user consent (Art. 6(1)(a) GDPR), which can be altered or revoked at any time.
Retention: Defined per standard analytics retention policies (up to 14 months).
C. Search Queries
The internal search feature performs immediate on-site database queries and does not retain search history, user profiles, or tracking identifiers.
> 3. COOKIES & TRACKING TECHNOLOGIES
The Site uses strictly necessary technical cookies to operate, and optional analytics cookies subject to user consent managed via CookieYes. For details regarding each specific cookie, retention periods, and to modify or withdraw your preferences at any moment, please visit our Cookie Policy.
> 4. DATA RECIPIENTS & INTERNATIONAL TRANSFERS
Personal data is never sold, traded, or shared with third parties for commercial or marketing purposes. Technical data may be processed by web hosting providers acting as data processors under confidentiality agreements.
Typography fonts used on this site are delivered through privacy-first, GDPR-compliant infrastructure without tracking user IP addresses.
> 5. USER RIGHTS UNDER GDPR
Under Articles 15-22 of Regulation (EU) 2016/679 (GDPR), you possess the following rights regarding your personal data:
- Right to access: Obtain confirmation as to whether or not personal data concerning you is being processed, and access such data;
- Right to rectification: Request correction or completion of inaccurate data;
- Right to erasure (“right to be forgotten”): Request deletion of data where legally applicable;
- Right to restriction of processing and right to object: Request restriction of processing or object on legitimate grounds;
- Right to withdraw consent: Withdraw consent at any time without affecting the lawfulness of processing based on consent before withdrawal;
- Right to lodge a complaint: File a complaint with a supervisory data protection authority (such as the Italian Garante Privacy, www.garanteprivacy.it, or your national EU authority).
To exercise any of these rights, please contact the Data Controller directly at: nag@hidaba.com.
> 6. POLICY UPDATES
This Privacy Policy is effective as of November 2026. Any modifications reflecting regulatory or technical developments will be posted on this page.