Privacy Policy
Last updated: 29 October 2026 · Information notice pursuant to Articles 13–14 of Regulation (EU) 2016/679 (GDPR)
This notice explains how personal data of users of the website palladianist.org (the “Site”) are processed when you browse it, subscribe to the newsletter, contact the editorial team, submit a manuscript or search within an article PDF.
- Data Controller
- What data we process and for what purposes
- Legal bases
- Provision of data
- Recipients and processors
- Transfers outside the EU
- Retention periods
- Your rights
- Cookies
- Minors
- Changes to this notice
1. Data Controller
The Data Controller is INTBAU Italia APS, the entity behind the Palladianist project.
- Registered office: Via San Carlo 7, 40121 Bologna (BO), Italy.
- Tax code: 91351090377; VAT number: 04002681205.
- Contact for privacy matters: intbauitalia@gmail.com.
2. What data we process and for what purposes
a) Browsing data
The IT systems and software used to operate the Site acquire, during normal operation, some personal data whose transmission is implicit in the use of internet communication protocols (e.g. IP address, browser type, operating system, date and time of the request). These data are used only to obtain anonymous statistical information on the use of the Site, to ensure its security and correct operation, and to ascertain liability in case of computer crimes.
b) Newsletter
If you subscribe to the newsletter we process the e-mail address you provide (and the subscription date) to send you updates on publications, events and research. Subscriber addresses are stored in our database and messages are sent through our e-mail server; we do not use them for any other purpose.
c) Contact form
When you write to us through the contact form we process: first name, surname, e-mail address, institution (optional), subject and the content of your message, in order to handle and reply to your request.
d) Manuscript submission
If you submit a contribution for the Journal we process: title, author(s), author biography, contact e-mail, affiliation, abstract, keywords, language, type of contribution, the uploaded manuscript and any figures/attachments, and any message, in order to manage the editorial and peer-review process.
e) Semantic search in an article
When you use semantic search, the text you enter (up to 300 characters) is processed on this site's server to select relevant passages from the PDF of the article you are viewing. EmbeddingGemma 2 ranks passages; it does not generate an answer. The query is processed only for the current request and is not saved by the search application, sent to a remote inference service or added to the article index. Please do not enter personal or sensitive information. The usual technical connection data described in section 2(a) may still be processed by the web server; the query text is sent in the request body, not in the URL.
3. Legal bases
| Purpose | Legal basis (Art. 6 GDPR) |
|---|---|
| Site operation, security and statistics | Legitimate interest of the Controller (Art. 6(1)(f)) and technical necessity |
| Semantic search in an article PDF | Legitimate interest of the Controller in providing local discovery of its editorial content (Art. 6(1)(f)); you may object as explained in section 8 |
| Newsletter | Consent (Art. 6(1)(a)), freely given and revocable at any time |
| Replying to contact requests | Consent and/or pre-contractual measures / legitimate interest (Art. 6(1)(a)/(b)/(f)) |
| Managing manuscript submissions | Consent and performance of (pre-)contractual measures (Art. 6(1)(a)/(b)) |
4. Provision of data
The provision of data marked as required in the forms is necessary to obtain the requested service (receive the newsletter, get a reply, have a submission evaluated): failure to provide it makes it impossible to fulfil the request. The search query is optional; without it, you can still read or download the PDF. The provision of optional fields is free. The newsletter and submission require your explicit consent via the dedicated checkbox.
5. Recipients and processors
Data are processed by authorised staff of the Controller (editorial team / administrators of the management area). The categories of external recipients include:
- Providers of hosting and e-mail services used to operate the Site, its database and messages;
- Google Ireland Ltd. / Google LLC — for the Google Fonts service used to display the Site’s typefaces and for YouTube video embeds (see the Cookie Policy).
- Cloudflare (cdnjs) and jsDelivr — article pages currently load static PDF viewer scripts from these services. They may receive technical connection data from your browser; neither is sent the search query text.
Data are not disseminated to the public and are not sold or transferred to third parties for marketing purposes.
6. Transfers outside the EU
Some third-party services (including Google Fonts, YouTube, cdnjs and jsDelivr) may involve the transfer of data — such as your IP address — outside the European Economic Area. The actual recipients and safeguards are being checked with the providers; please contact the Controller for details. No specific transfer mechanism is asserted here without verification.
7. Retention periods
- Newsletter: until you unsubscribe or withdraw consent.
- Contact messages: for the time needed to handle the request and, thereafter, for the limitation period required to ascertain or defend a right.
- Submissions: for the time needed to manage the editorial process; data of published works are kept as part of the journal’s archive, also for scientific record purposes.
- Semantic-search queries: the search application processes the text for the duration of the request and does not persist it. Technical server logs record the request, under the separate log policy below; under the current server configuration they do not record the search text sent in the request body.
- Browsing data / server logs: the site's web logs rotate daily, with at most ten files including the current file. Scheduled server backups include logs and retain four rotating weekly backup cycles. The current website and semantic-search containers each limit their logs to ten files of at most 10 MB; their calendar duration varies with activity. These criteria do not describe historical or manual backup copies.
8. Your rights
At any time you may exercise the rights under Articles 15–22 GDPR: access your data, rectification, erasure, restriction of processing, data portability, and objection to processing. Where processing is based on consent, you may withdraw your consent at any time without affecting the lawfulness of processing carried out beforehand.
To exercise your rights, write to intbauitalia@gmail.com. You also have the right to lodge a complaint with the supervisory authority — in Italy, the Garante per la protezione dei dati personali (www.garanteprivacy.it).
9. Cookies
The Site uses technical cookies and a small number of third-party services. Full details are provided in the dedicated Cookie Policy.
10. Minors
The Site is addressed to an academic and professional audience and is not intended for children. We do not knowingly collect data of minors under 14 without consent from those exercising parental responsibility.
11. Changes to this notice
The Controller may update this notice to reflect changes in the law or in the Site’s features. The current version, with its date, is always published on this page.